Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/TEUegyGzFMTKs--cAGOGoMP_pLE.roa
File: TEUegyGzFMTKs--cAGOGoMP_pLE.roa (raw, json)
Hash identifier: /cxRkhNhQ2MwALb/s1GCYjRztr1Ot4F2v0jmGtYFtTk=
Subject key identifier: 4C:45:1E:83:21:B3:14:C4:CA:B3:EF:9C:00:63:86:A0:C3:FF:A4:B1
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 018D8815EFDF11327A0A3F070B8240FB8C53
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/TEUegyGzFMTKs--cAGOGoMP_pLE.roa
Signing time: Thu 08 Feb 2024 09:39:15 +0000
ROA not before: Thu 08 Feb 2024 09:39:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/22 maxlen: 22
212.42.51.0/24 maxlen: 24
212.42.52.0/24 maxlen: 24
212.42.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Mar 2024 13:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:15:ef:df:11:32:7a:0a:3f:07:0b:82:40:fb:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Feb 8 09:39:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c451e8321b314c4cab3ef9c006386a0c3ffa4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:2e:c1:b4:34:c3:5d:e6:87:cf:1e:c5:e4:
fe:7a:d4:aa:37:9b:30:9e:15:18:7f:d1:35:dc:3e:
20:6f:a4:fb:a4:b4:68:5f:04:59:7e:24:ae:4f:be:
26:49:04:33:a6:0e:ab:8f:cc:6c:59:2a:8d:36:6d:
7f:a4:55:51:77:d9:06:01:18:c0:17:77:4a:61:ba:
41:42:20:cb:78:a4:d6:bd:bb:bb:58:a4:f7:ad:35:
f8:1e:4a:10:e3:5e:ad:56:d2:1a:3f:e9:5d:f7:9d:
66:91:94:36:ad:28:0a:1a:b7:cf:89:17:52:4d:ed:
e2:4d:db:ab:d5:9e:f7:4c:ac:6d:5a:40:3f:ca:5d:
d0:3c:ac:6d:04:96:4c:66:c9:d0:b1:29:16:5b:fb:
40:4e:a5:bc:22:12:01:ab:a1:2d:5f:3b:d2:12:1d:
b3:c6:21:6a:82:31:fa:f4:72:c6:a2:36:0f:bb:da:
9f:c4:85:a8:20:5c:b3:82:39:66:51:30:c2:eb:eb:
9e:4a:bd:e8:b6:4d:fa:2f:a3:63:b4:91:41:ee:29:
42:42:46:b5:b0:e3:e5:c8:59:ec:39:8b:51:a2:50:
a8:02:ac:b3:bd:96:72:41:02:a1:3e:4b:b5:b9:9c:
f6:11:28:8c:bb:55:35:67:2d:49:6b:f2:88:7a:89:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:1E:83:21:B3:14:C4:CA:B3:EF:9C:00:63:86:A0:C3:FF:A4:B1
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/TEUegyGzFMTKs--cAGOGoMP_pLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0-212.42.52.255
212.42.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:24:82:fe:68:20:40:59:f8:a2:5e:2d:f7:b8:bc:6c:fc:ec:
48:a9:14:d4:03:3b:f0:de:26:64:64:d6:4b:74:b3:79:1b:dc:
7a:21:7f:2c:e2:42:f4:52:93:1e:66:5d:5e:91:1f:a0:3f:04:
cd:bc:a8:ff:c3:6c:fb:f9:19:4a:f5:76:3b:b9:fd:08:64:e5:
67:bf:f7:53:9e:20:94:f5:d7:c1:7c:86:5d:4a:eb:4a:90:08:
12:af:17:a4:9d:a3:a4:7d:59:da:3e:c6:73:80:e9:ac:8d:3e:
1a:bd:ad:a7:4c:c7:00:94:27:5e:f1:d9:2f:f3:70:99:25:f3:
77:de:85:28:40:6d:ce:3f:39:08:30:1a:60:db:0c:48:12:25:
af:cf:83:54:69:d5:40:37:5b:75:55:57:86:30:3d:ac:f5:48:
79:67:9c:03:0e:35:11:20:0f:42:66:5d:20:cf:13:77:54:f5:
44:f6:bd:d1:9a:d0:b6:6b:82:37:2d:51:70:22:d9:75:d7:42:
11:3d:a3:46:aa:cb:47:8e:48:fd:13:eb:f3:34:d5:f6:02:bc:
57:79:d5:d4:b9:b1:47:fd:4f:24:92:39:39:e0:2c:98:ab:a6:
b6:07:a0:e0:18:eb:18:c5:13:9e:ce:a4:3c:eb:ea:84:46:9f:
23:8e:1d:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:40 2024 by rpki-client on console-fra.rpki-client.org