Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/4qsyLkZL67DTa9nLJO_44xTtE2s.roa
File: 4qsyLkZL67DTa9nLJO_44xTtE2s.roa (raw, json)
Hash identifier: Q8f229VDZGZAhjOWXWZIH5sWL2Aj1BB543WcJ4b9m+E=
Subject key identifier: E2:AB:32:2E:46:4B:EB:B0:D3:6B:D9:CB:24:EF:F8:E3:14:ED:13:6B
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA8C37AD54B712E9D4B0B2E5A9756D
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/4qsyLkZL67DTa9nLJO_44xTtE2s.roa
Signing time: Mon 02 Jan 2023 13:45:06 +0000
ROA not before: Mon 02 Jan 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205074
IP address blocks: 212.91.16.0/24 maxlen: 24
212.91.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8c:37:ad:54:b7:12:e9:d4:b0:b2:e5:a9:75:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2ab322e464bebb0d36bd9cb24eff8e314ed136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:a9:51:10:9e:34:19:89:3e:73:8e:ab:1a:
4a:51:ae:8e:71:11:4c:36:e4:96:34:57:db:ac:fa:
9a:9b:45:d1:ea:57:a8:2b:78:be:83:68:8c:1a:0d:
35:12:47:4a:e5:9d:0d:0e:5f:2d:4e:d6:4d:1a:be:
31:b3:30:f3:7b:3f:67:07:d2:82:de:74:c5:62:ca:
c9:a9:a6:7f:f7:a4:a7:36:8b:36:17:56:42:2d:8f:
d2:fb:4c:9a:57:77:35:ba:ba:2a:21:ac:81:d1:25:
60:83:ea:71:25:1b:43:11:11:3e:ff:0d:79:67:fd:
8b:ca:f9:dd:29:d1:07:37:26:40:fa:28:34:45:30:
c9:0f:74:bc:d5:71:10:1b:98:76:d0:67:0a:7f:db:
2b:6f:6e:ca:71:6d:59:0c:de:7c:78:13:27:53:66:
73:19:a3:20:3d:45:a2:a5:6a:7d:fe:0e:72:89:72:
41:b3:81:e9:ff:9b:41:60:93:93:08:2a:36:f8:65:
fe:3d:9e:14:c3:e7:55:9c:9a:23:d4:86:9d:6e:60:
83:4b:b8:35:6c:72:61:08:9c:0a:7e:47:cc:73:95:
07:2d:54:e1:76:87:e4:44:46:9a:d5:ec:a1:a9:01:
d9:c9:f2:cd:a1:88:94:d4:a9:c6:83:1a:d6:40:97:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:32:2E:46:4B:EB:B0:D3:6B:D9:CB:24:EF:F8:E3:14:ED:13:6B
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/4qsyLkZL67DTa9nLJO_44xTtE2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.16.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:0a:34:50:8d:45:94:47:e3:be:cd:c5:4b:8d:64:ed:ae:82:
3a:1e:bd:93:75:86:78:74:c0:e5:a2:4d:e5:5d:00:c1:67:a9:
4d:27:41:c4:2e:a4:c7:b3:c1:3f:4f:ca:2f:f9:e4:93:cf:67:
7f:b2:36:01:84:5e:c7:d5:51:f5:ee:93:22:48:50:da:11:29:
68:6e:2f:df:e5:72:e3:9c:4f:17:10:34:1b:ee:e3:09:2f:f7:
4f:f1:8b:4a:7d:f7:19:f2:01:c3:88:aa:52:36:49:21:ce:01:
2e:16:ae:e1:8c:dd:ba:15:70:c1:8d:e5:b4:20:84:5b:1e:7c:
3e:d2:ef:ee:d4:58:fa:e2:b1:14:54:56:0e:d3:a6:41:26:ad:
2c:a4:2c:e9:03:3f:68:30:97:c3:5b:59:fa:98:b6:7f:6d:db:
bb:3b:c9:72:f4:60:35:a2:81:e5:44:09:6b:e2:18:37:9d:b1:
2d:bd:15:92:1f:15:61:35:85:10:6e:ed:75:9b:a3:b2:52:d6:
53:01:63:31:90:05:f2:29:0d:3c:c7:c2:ca:9a:73:a2:4b:43:
28:e6:85:49:cf:be:a0:b6:0f:77:0d:6d:5e:e3:c1:26:92:35:
21:0d:e4:fb:6f:68:68:e7:bc:16:02:5e:6b:d0:a6:7d:e8:1b:
4b:0c:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org