Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Eih6aBBmw_d4EOdDVhvudbyIgqg.roa
File: Eih6aBBmw_d4EOdDVhvudbyIgqg.roa (raw, json)
Hash identifier: ZZPNTIegadRWMGRZ5W0FvCpZLrC0Mw/JR8xsSjog/aY=
Subject key identifier: 12:28:7A:68:10:66:C3:F7:78:10:E7:43:56:1B:EE:75:BC:88:82:A8
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018E8A7BFC5BBA1B80F9D5F3CAC1D31C1031
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Eih6aBBmw_d4EOdDVhvudbyIgqg.roa
Signing time: Fri 29 Mar 2024 13:52:45 +0000
ROA not before: Fri 29 Mar 2024 13:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 08:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:7b:fc:5b:ba:1b:80:f9:d5:f3:ca:c1:d3:1c:10:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 29 13:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12287a681066c3f77810e743561bee75bc8882a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:57:6b:f2:63:bb:dc:b6:47:3b:a5:37:3d:
09:db:1e:6a:8e:b9:45:e9:f0:6d:3b:de:19:b7:db:
b2:a4:d2:67:19:74:b3:ee:db:6e:d9:f8:4d:fa:7f:
7f:10:c4:40:dc:a0:a8:29:a2:0f:b8:97:93:bc:50:
12:83:f5:0c:09:63:e2:62:cb:cc:81:af:51:e8:de:
2c:52:5e:23:aa:44:b2:fc:80:ed:c6:a8:c6:0f:05:
ee:c5:cc:63:41:06:1d:72:10:a8:38:09:d2:d2:b8:
47:3a:d7:71:48:22:a5:47:23:66:f7:d2:fb:19:3b:
57:bc:b1:e1:91:c6:85:29:a3:8d:40:4c:d2:28:c0:
1d:21:af:19:f9:61:d1:ef:a7:bf:5d:95:bd:1a:52:
50:48:0e:b2:4c:fe:7d:00:8a:86:2d:f4:a5:b1:27:
bc:12:1b:2b:34:c0:2b:b0:79:cf:aa:94:84:5b:9e:
a1:f6:3f:26:c7:39:df:a6:02:b9:80:b2:de:1e:bc:
08:32:35:db:d9:3c:c9:03:ad:a8:8f:87:2c:42:55:
4b:03:3d:73:ac:62:65:7f:b8:ce:05:42:8d:3a:de:
7c:43:74:ea:ab:56:57:49:a9:ca:90:ec:fc:17:20:
5a:ee:e7:aa:5e:96:c5:21:08:1d:d5:c8:97:90:0a:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:7A:68:10:66:C3:F7:78:10:E7:43:56:1B:EE:75:BC:88:82:A8
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Eih6aBBmw_d4EOdDVhvudbyIgqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:78:40:76:3b:3d:67:e9:c9:5e:f3:3b:4e:35:f2:db:26:82:
67:31:78:30:94:c2:05:5d:32:87:ff:96:37:9c:3d:e6:ec:d1:
bf:be:3b:46:ef:82:b2:b4:2b:83:52:5c:7a:12:b3:1e:d3:28:
30:f2:78:a7:e9:7a:9d:ae:f9:00:1d:f5:c7:04:50:33:8e:4a:
4c:96:99:2d:18:98:02:a0:40:b1:70:e3:d7:dd:2e:b8:2f:66:
67:be:de:32:66:47:4e:b7:4b:ba:19:09:f4:24:49:ba:ae:9b:
f8:0a:94:0c:26:21:89:0c:b3:a4:8c:68:c2:f5:c7:8f:44:11:
02:c7:ab:f5:e2:ac:38:b4:06:31:89:e6:af:e4:f8:ec:18:0d:
36:f1:43:a0:4e:e1:19:04:89:b5:e6:50:85:d2:1b:4e:b6:61:
7c:6e:5d:2e:a6:1d:3c:92:62:32:d8:4c:0e:8d:66:79:57:63:
fd:0d:56:de:f0:8b:e9:e0:8b:19:96:1d:d1:1c:00:24:98:b3:
22:44:82:92:3b:7d:b2:40:d0:89:ae:a5:2c:df:c5:31:ca:00:
f0:08:27:5f:0b:ce:af:26:8d:9f:98:c1:43:75:6b:8b:91:55:
63:e3:ba:83:63:e8:c6:a3:ce:2a:8d:52:a5:b2:ee:32:5a:30:
2c:02:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 11:48:39 2024 by rpki-client on console-ams.rpki-client.org