Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/SeNBZBIRhwE4bgiKvF4xMeg-p10.roa
File: SeNBZBIRhwE4bgiKvF4xMeg-p10.roa (raw, json)
Hash identifier: 8AS4lvJwheSn8gtlCbEN9SkzKNEHUo/FaoLQCIEQmXk=
Subject key identifier: 49:E3:41:64:12:11:87:01:38:6E:08:8A:BC:5E:31:31:E8:3E:A7:5D
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 018A9398F7354FAAAC749F51D66217FD3CA8
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/SeNBZBIRhwE4bgiKvF4xMeg-p10.roa
Signing time: Thu 14 Sep 2023 12:09:50 +0000
ROA not before: Thu 14 Sep 2023 12:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/24 maxlen: 24
212.42.48.0/22 maxlen: 22
212.42.56.0/22 maxlen: 22
212.42.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 14:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:98:f7:35:4f:aa:ac:74:9f:51:d6:62:17:fd:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Sep 14 12:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49e3416412118701386e088abc5e3131e83ea75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:73:c5:df:b6:60:13:4d:2a:d9:63:cf:89:
9d:06:a7:51:4d:19:59:28:e6:ff:1c:19:36:8c:ef:
d5:66:4a:e5:57:89:31:ff:80:1d:3f:45:bb:9f:0c:
7f:fa:c2:75:db:a2:ed:63:bb:7d:a8:82:af:bc:14:
66:bb:ea:07:78:e7:c9:be:c4:9f:62:78:34:84:70:
4d:11:36:96:59:20:6d:1d:da:51:bf:06:42:48:e4:
d0:bf:1d:72:43:69:50:71:14:3d:26:aa:e6:f2:a1:
34:30:79:a3:de:b7:3a:5a:9c:cf:76:5c:2f:43:48:
b7:60:cd:a6:c1:1b:b5:af:48:66:fc:5e:4a:1c:b2:
9a:7b:ac:47:59:a3:c4:5e:d2:0a:ce:0e:3c:59:d2:
3f:76:d8:7a:0b:fd:d6:1d:32:52:81:00:1c:fb:e1:
b7:ce:f7:ee:a8:47:af:05:4a:c4:5b:16:dc:59:b4:
74:f3:10:9c:7d:3c:cb:eb:0d:68:6f:8d:56:e8:df:
b7:5c:b4:58:04:d9:0c:31:36:22:9a:43:1e:9c:45:
4f:69:be:54:8d:fa:b2:4c:25:99:1d:dc:61:8e:7d:
ce:8c:ea:a3:19:c2:3b:b6:44:0b:f3:d8:ce:c1:e8:
35:3b:64:e4:30:62:a5:05:40:92:e9:96:21:e3:a7:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:41:64:12:11:87:01:38:6E:08:8A:BC:5E:31:31:E8:3E:A7:5D
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/SeNBZBIRhwE4bgiKvF4xMeg-p10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0-212.42.52.255
212.42.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:86:9e:1e:ea:ae:ae:58:4a:f6:b5:e2:3b:a5:76:8f:26:8a:
ee:b1:fa:09:9b:91:2c:7e:29:6c:2d:f1:46:7d:02:74:3e:26:
8d:c1:b0:75:bf:a7:12:b8:2d:e7:fa:9c:f1:95:53:86:04:36:
7c:54:bd:fd:7b:b3:31:47:a1:86:87:77:92:de:6d:b9:7b:0b:
00:e4:1d:91:f4:a1:a3:ad:bc:48:98:a5:68:f7:9c:92:aa:c8:
b8:50:99:07:1f:db:9b:ee:44:9b:23:13:3d:a9:d9:5e:61:27:
f8:e1:6c:e9:56:5a:47:a5:6a:dc:76:ef:54:f3:ff:58:0b:1b:
45:b2:c2:2a:7a:de:f2:3d:d0:22:de:9f:c4:94:93:1c:ee:90:
2f:24:bf:d0:cf:a4:db:ef:d8:ca:fd:fc:b8:44:b9:7e:c6:e5:
6a:25:37:35:2d:2f:01:85:fe:df:da:71:a8:cc:91:a4:ef:5e:
a4:d3:48:66:bd:d3:a5:6d:87:5e:1a:c1:c9:34:1f:57:de:ed:
48:3c:a2:f8:d2:f2:dc:73:06:2f:07:c5:32:d1:7a:15:f9:68:
bf:8e:07:16:81:38:ed:88:34:7b:cb:ee:64:a5:58:ec:ce:52:
71:56:3b:6f:ec:f3:7c:89:3c:93:43:7e:9a:67:36:5c:00:51:
f6:c1:2a:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:22 2024 by rpki-client on console-fra.rpki-client.org