Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/Hamc6eAv8bVo6HwZg2-8s7wPiVw.roa
File: Hamc6eAv8bVo6HwZg2-8s7wPiVw.roa (raw, json)
Hash identifier: B2uk32pWPUtTrd0rrmIfPqZTc3V8bo7+jnlZbpShr4U=
Subject key identifier: 1D:A9:9C:E9:E0:2F:F1:B5:68:E8:7C:19:83:6F:BC:B3:BC:0F:89:5C
Certificate issuer: /CN=daabfc9017a8b36d691120e373f08ce401f6af40
Certificate serial: 018571956517EF507079205070BA796D9388
Authority key identifier: DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/Hamc6eAv8bVo6HwZg2-8s7wPiVw.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206385
IP address blocks: 212.46.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:65:17:ef:50:70:79:20:50:70:ba:79:6d:93:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daabfc9017a8b36d691120e373f08ce401f6af40
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1da99ce9e02ff1b568e87c19836fbcb3bc0f895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:84:87:19:e2:49:12:0b:00:4d:4d:96:f6:
f0:92:7d:1e:d8:0b:ea:e4:8f:50:0f:36:e2:52:78:
79:f0:e0:52:8d:a1:99:18:79:af:1b:31:b5:67:7b:
93:e3:bc:43:c8:2e:29:75:93:2c:59:85:4c:d9:ab:
da:b9:51:0e:05:9b:a7:42:1b:cc:6d:4f:f7:ae:4e:
fb:13:67:cb:e0:28:06:bb:19:75:83:d5:8d:df:16:
2a:c4:00:9a:4e:70:7a:f6:9e:94:66:3d:f2:70:a1:
70:27:23:c6:31:43:48:13:ec:d2:e3:8a:3c:77:1b:
07:6f:f0:a9:53:ff:40:09:6b:6c:81:2a:a2:90:d0:
42:96:2d:2e:62:bc:99:57:1c:11:50:e7:8d:a1:7e:
b5:1c:bf:d8:88:d9:b0:7d:2e:f5:c7:d0:2e:eb:1b:
45:49:f3:c6:b8:ab:0a:06:e9:71:ef:f1:dd:74:72:
aa:10:a6:a9:24:87:1c:b5:8c:41:72:a5:00:66:e9:
7d:a0:c9:ed:f8:f1:22:64:5e:7c:19:a3:77:3c:9b:
aa:7d:6b:05:1d:85:56:01:88:57:72:7e:14:67:1a:
1c:d7:2b:c6:c0:97:ab:5b:e5:7b:58:19:c3:58:3b:
2f:1f:06:2a:8b:4a:42:02:14:9c:db:3c:0f:08:51:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:9C:E9:E0:2F:F1:B5:68:E8:7C:19:83:6F:BC:B3:BC:0F:89:5C
X509v3 Authority Key Identifier:
keyid:DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/Hamc6eAv8bVo6HwZg2-8s7wPiVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:08:62:78:e3:45:fd:15:95:ea:07:0b:bf:f7:55:a2:d8:1c:
3e:25:b6:06:91:b8:cf:34:bf:3c:a2:09:21:ac:3d:9a:6f:70:
9d:32:97:cc:45:b1:f6:fa:47:a0:3e:b5:3e:22:0b:d9:5f:74:
52:44:bd:f2:4e:61:f5:16:c1:2c:f6:6f:c8:85:e3:53:05:82:
0d:a8:dd:94:b8:ce:2f:13:c5:b7:e8:ba:85:c1:f3:1b:8d:cd:
72:f7:35:e3:c4:f4:f5:5c:61:dc:7e:6d:41:18:ca:55:fe:d2:
2f:49:c6:ae:95:57:92:9d:df:04:37:d4:1c:3b:4c:08:19:f0:
32:85:fe:48:ad:06:05:25:3a:ad:5d:e3:1b:2c:61:0c:9c:e9:
41:1b:09:84:17:bb:b6:25:e6:51:32:16:21:51:78:27:ff:73:
04:c7:1e:eb:90:2a:ec:32:c5:c9:1f:88:ef:08:e8:0b:d0:08:
a8:a8:c9:08:e8:b9:2a:ee:67:32:b2:82:96:e4:53:79:97:b5:
44:53:ef:b9:c9:a1:a1:98:78:2c:8e:24:e1:aa:8c:d7:aa:56:
09:7c:a3:6b:47:18:65:a5:b1:cd:df:2d:72:a2:99:57:ef:b1:
bb:d4:a3:5d:ee:60:7d:b0:d2:2f:07:95:8d:0e:8a:78:62:12:
56:03:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:39:59 2024 by rpki-client on console-ams.rpki-client.org