Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/0M_6PEgkbNEgZkxeGVdXmXmuKvU.roa
File: 0M_6PEgkbNEgZkxeGVdXmXmuKvU.roa (raw, json)
Hash identifier: rMJ3Z5ZCapCN/Q1v8135EKk9Udd3Nydvo/23F+60vt8=
Subject key identifier: D0:CF:FA:3C:48:24:6C:D1:20:66:4C:5E:19:57:57:99:79:AE:2A:F5
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 018CC5DD30B5BFDB2C2BBDC60ED24D74B9E9
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/0M_6PEgkbNEgZkxeGVdXmXmuKvU.roa
Signing time: Mon 01 Jan 2024 16:30:56 +0000
ROA not before: Mon 01 Jan 2024 16:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/22 maxlen: 22
212.42.56.0/22 maxlen: 22
212.42.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 09:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:30:b5:bf:db:2c:2b:bd:c6:0e:d2:4d:74:b9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jan 1 16:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0cffa3c48246cd120664c5e1957579979ae2af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:73:99:63:fa:31:c7:2b:16:21:be:c0:7f:
55:3e:dc:d9:66:0e:0a:6c:ba:92:90:c5:c3:36:12:
88:20:94:61:ca:b7:a8:37:b0:8d:b8:4f:ca:99:1d:
8a:da:c8:0b:61:85:b7:60:a7:ff:87:15:0f:b7:1e:
50:1a:dc:51:bb:43:6b:6b:d7:fa:31:8d:bf:68:76:
5a:54:b9:34:b3:3a:a0:10:77:b1:94:6f:ee:ea:e8:
fa:f5:a9:5f:49:ec:ee:db:e2:34:1f:60:12:ef:0f:
ef:03:3c:18:b4:b5:e9:fb:0a:09:62:98:71:96:92:
eb:08:c0:c7:c4:a3:39:a0:f7:be:72:72:fd:44:ac:
09:23:50:25:9d:8c:34:a4:37:e9:b1:4e:58:cd:89:
82:d3:ef:e5:d3:1f:8c:f5:a6:93:1b:25:37:46:56:
85:fb:2e:d2:b9:16:82:39:7b:87:4c:01:ec:f2:ca:
1f:b9:05:17:78:3b:42:54:de:7a:66:df:19:35:4a:
01:39:e6:b4:b2:f3:19:71:8f:46:c5:cc:21:fc:78:
77:1c:68:92:0a:b8:c6:8c:ad:a4:2b:a2:23:9c:cd:
d5:f9:8e:e1:06:7e:ff:2c:43:57:44:20:06:ab:91:
82:05:c6:fb:c0:3c:a7:6f:02:4e:3b:14:68:37:0f:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CF:FA:3C:48:24:6C:D1:20:66:4C:5E:19:57:57:99:79:AE:2A:F5
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/0M_6PEgkbNEgZkxeGVdXmXmuKvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0-212.42.52.255
212.42.56.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e4:a0:e3:66:31:28:3c:fe:eb:41:52:fb:32:58:06:9d:ac:
e3:85:87:18:de:f0:c4:55:86:61:4b:ee:e2:56:d2:b8:fb:45:
5a:b9:52:3b:d3:40:45:b2:05:81:f6:6e:82:ce:5f:73:96:59:
59:1b:32:e0:bf:6b:e3:dc:93:bf:bd:c7:96:85:81:b4:1b:ec:
ff:2f:bf:70:dc:52:19:f6:ed:c8:32:87:7b:81:16:e5:20:0a:
31:c0:9e:03:ea:c6:9c:b2:65:a7:a7:b9:54:28:92:aa:a6:22:
25:29:6a:72:a9:33:22:f9:6d:4a:fa:5b:2d:02:65:35:b0:96:
d5:22:19:5c:0b:2d:ac:43:bd:79:02:76:ea:62:25:e6:e7:2f:
a1:72:fe:c1:e9:4a:62:43:e8:bd:15:c8:d9:7d:e1:0d:dc:8d:
29:5d:b4:d8:0e:b7:07:47:4b:99:19:0f:38:ca:4d:69:a1:13:
9d:f0:8b:82:9f:65:d6:01:6e:de:13:0f:54:07:27:ca:9f:d4:
3e:48:ee:1b:8f:5e:71:ad:fe:d6:33:05:5d:4d:d8:76:47:de:
2d:d9:5f:f1:d8:65:22:7c:11:02:b9:ad:d4:bc:36:71:a8:50:
15:c6:d0:82:94:7e:da:7b:8b:f9:9a:ec:b0:a1:62:b9:23:2d:
f5:6f:c2:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:48 2024 by rpki-client on console-ams.rpki-client.org