Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/a-NOljVCEHx1MyowWOYpHW5ITOw.roa
File: a-NOljVCEHx1MyowWOYpHW5ITOw.roa (raw, json)
Hash identifier: yuPQxYqnK0emcB/fTKWjNsH89VSdOp2jd19eHzlyIvo=
Subject key identifier: 6B:E3:4E:96:35:42:10:7C:75:33:2A:30:58:E6:29:1D:6E:48:4C:EC
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018DF604D552919A29BEB2B226E2D74753D6
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/a-NOljVCEHx1MyowWOYpHW5ITOw.roa
Signing time: Thu 29 Feb 2024 17:58:48 +0000
ROA not before: Thu 29 Feb 2024 17:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 19:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:04:d5:52:91:9a:29:be:b2:b2:26:e2:d7:47:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Feb 29 17:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6be34e963542107c75332a3058e6291d6e484cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:6d:d8:78:96:fe:f6:f8:4e:0b:93:2d:a2:
dc:e6:b0:1a:84:c4:52:32:f7:bd:fb:97:fe:03:f7:
b7:a3:74:e0:12:52:ed:af:6e:97:53:58:cf:cd:22:
9c:7a:5e:8a:55:a3:2f:ba:99:44:57:76:2d:e4:f6:
09:8f:0a:5b:03:85:0d:7a:f8:3f:34:68:b0:1e:11:
7e:e1:cd:9c:e7:58:72:bb:51:0b:4f:8c:a7:81:97:
84:bd:69:a2:14:2a:c7:df:ad:f2:14:b5:54:44:99:
af:bf:bb:e0:c7:8b:5e:ea:d0:7f:70:6d:f9:30:3c:
42:9f:7f:b2:68:6c:ac:45:36:e7:c4:8e:07:ce:8e:
96:5b:3a:f0:04:b4:8f:e2:be:ba:90:46:25:ae:b7:
7b:2b:ae:6a:84:45:03:db:04:78:48:b2:37:46:2d:
0e:53:bc:b1:36:14:b5:e5:92:14:5b:c0:db:c4:11:
95:1b:4b:aa:22:72:c3:32:cb:1a:2e:34:1a:51:92:
ff:0a:0b:cc:2a:0f:a2:95:4f:fc:0d:97:26:0e:83:
a1:3e:be:7d:5b:50:9a:94:c4:0c:c1:c7:ad:76:ee:
3e:5e:0f:54:0f:a7:88:a4:f2:80:52:72:70:ed:64:
58:b3:94:31:31:e2:f8:5a:f9:da:d3:de:13:f9:78:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:4E:96:35:42:10:7C:75:33:2A:30:58:E6:29:1D:6E:48:4C:EC
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/a-NOljVCEHx1MyowWOYpHW5ITOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
67:09:6d:96:85:29:be:ad:68:e6:3d:e8:65:42:87:b3:17:6b:
4b:61:66:cb:2f:b2:ce:1b:4b:3d:bf:2f:ea:5e:a1:1d:16:9f:
90:d8:fd:2c:ca:aa:7d:19:a4:e7:9b:b7:7d:e7:ce:43:99:75:
0e:0e:13:d7:cb:15:c0:d0:b4:8d:36:90:64:79:90:1f:9a:fb:
50:d6:48:76:b5:2e:a2:f5:49:d4:bb:04:3e:cd:17:0e:51:23:
7d:98:18:a7:d7:af:e6:48:d4:aa:e3:03:b0:6f:7a:0f:6c:c8:
9f:3d:e2:a2:86:d7:93:c2:26:e7:09:62:ad:af:60:a1:29:6a:
b8:52:a2:8e:e1:dc:0d:bb:92:3a:29:04:7d:66:bf:93:86:99:
74:fa:61:df:28:01:ca:35:7e:e9:a8:29:41:46:3a:e1:27:54:
27:5f:95:eb:48:4b:52:90:fc:74:27:ea:c2:9d:96:99:8f:70:
3a:f2:dc:45:2b:81:5b:14:80:d2:b5:17:ac:83:18:4f:2b:e8:
61:f1:1e:ad:cd:b5:d8:09:6d:fb:c0:52:7f:48:dc:1f:b2:12:
08:f8:ce:e4:2e:d5:2b:77:aa:43:6d:c2:33:a4:a6:38:c1:57:
31:9b:ce:66:80:c0:3e:a1:59:b6:eb:5c:d1:45:f2:88:44:82:
22:38:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 22:41:18 2024 by rpki-client on console-fra.rpki-client.org