Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hXO8Vf8JYuCBSYqIkGm-x4iSiTg.roa
File: hXO8Vf8JYuCBSYqIkGm-x4iSiTg.roa (raw, json)
Hash identifier: qp/AHC/yySeGFQU2g0r5FPkbwcoN0FI+TCCWf4G8KXI=
Subject key identifier: 85:73:BC:55:FF:09:62:E0:81:49:8A:88:90:69:BE:C7:88:92:89:38
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BCEC0B7D031EF4C749A89ADC2BF14675B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hXO8Vf8JYuCBSYqIkGm-x4iSiTg.roa
Signing time: Tue 14 Nov 2023 16:53:38 +0000
ROA not before: Tue 14 Nov 2023 16:53:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:c0:b7:d0:31:ef:4c:74:9a:89:ad:c2:bf:14:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 14 16:53:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8573bc55ff0962e081498a889069bec788928938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:e2:40:05:22:eb:fd:1c:04:1d:da:56:45:
bd:19:79:34:cf:79:ac:3c:dd:35:a3:1e:01:1f:07:
87:2d:ea:d3:62:d5:da:77:89:f7:51:f1:53:dd:3e:
9b:fc:6a:0a:45:62:43:4c:fb:31:43:da:b5:03:8b:
95:77:fc:b6:83:29:3e:9f:b0:d2:6b:bd:23:d7:a5:
84:8c:c8:15:77:62:96:60:ad:53:a1:85:36:2a:4c:
20:5c:67:22:3b:85:84:db:be:ec:82:0e:af:74:92:
83:db:aa:3e:4b:17:10:68:ee:83:11:0a:5c:0e:86:
e3:58:17:77:b7:53:1a:41:cc:f4:5c:6e:8a:09:5c:
21:41:44:da:d0:a0:55:00:b3:05:ae:c2:3a:12:4a:
0a:2b:00:35:e8:2e:ea:d9:48:15:b3:a4:4e:da:65:
21:c3:f9:48:e0:ed:a1:88:78:cd:76:d5:c3:7e:e8:
d7:2e:32:d2:2b:a3:28:12:28:35:4c:ce:2a:e1:1a:
06:36:ce:29:bd:dd:da:a1:94:4e:d1:3b:e9:65:46:
e0:16:ab:f1:ea:1d:80:f7:97:4d:cf:86:97:a9:78:
a2:51:8b:be:11:96:3c:71:91:a0:ad:59:47:3d:35:
d7:52:1a:f9:65:e4:a6:05:39:e1:cb:85:6c:32:4c:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:BC:55:FF:09:62:E0:81:49:8A:88:90:69:BE:C7:88:92:89:38
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hXO8Vf8JYuCBSYqIkGm-x4iSiTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:6d:3e:e1:fa:05:1c:32:fa:f0:c3:ad:2a:3c:6a:3a:77:69:
4a:3e:67:28:18:42:0d:a2:36:41:86:a7:d1:51:17:ed:3e:24:
18:43:e3:9c:11:fb:bb:50:97:57:ac:66:e7:ac:4a:fd:29:07:
8a:48:23:7d:e5:5a:3e:a2:63:4b:49:8e:e7:8e:40:82:fc:aa:
ef:58:fe:64:c2:15:96:55:b9:79:eb:e3:2e:2c:f7:70:dd:22:
a7:86:d0:1c:d9:e2:56:4d:4e:6f:c1:19:b4:c5:c3:72:03:3b:
ab:78:77:21:ec:f1:70:01:0d:09:5a:bb:73:6e:62:d8:71:72:
b1:55:48:a0:63:f2:a6:01:8e:20:75:5b:1c:62:e7:7d:da:0b:
28:50:c3:84:b6:0b:c1:bd:44:d4:df:e2:c7:ea:2f:7d:f5:ed:
8c:a6:92:c0:88:2a:99:b8:b1:ba:98:14:0d:64:63:c9:52:85:
38:7f:8d:ad:f4:ae:13:19:d2:bc:e7:a6:7e:dc:9c:96:83:a4:
37:57:ce:e6:a8:7d:e0:74:fe:a9:5f:d5:9e:39:51:fa:5c:99:
72:a4:ec:2b:b5:3a:d1:76:c4:38:a8:9d:de:17:9e:db:80:31:
b7:e3:ea:2d:54:f9:89:ba:db:27:f1:cd:7c:80:98:0e:7b:e9:
bd:de:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org