Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9O71_FEszbZdKM_DDISFcAvly8g.roa
File: 9O71_FEszbZdKM_DDISFcAvly8g.roa (raw, json)
Hash identifier: Fu8B0xDdqH661TqQeUyIfOdJXUlUTlsV+NdC8eBVIpI=
Subject key identifier: F4:EE:F5:FC:51:2C:CD:B6:5D:28:CF:C3:0C:84:85:70:0B:E5:CB:C8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018B70E9DBE84A634A81F3DE5F7121B85E99
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9O71_FEszbZdKM_DDISFcAvly8g.roa
Signing time: Fri 27 Oct 2023 11:34:16 +0000
ROA not before: Fri 27 Oct 2023 11:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57960
IP address blocks: 212.86.116.0/22 maxlen: 22
212.86.124.0/22 maxlen: 22
212.86.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:e9:db:e8:4a:63:4a:81:f3:de:5f:71:21:b8:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 27 11:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4eef5fc512ccdb65d28cfc30c8485700be5cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:1c:56:2d:1b:5e:53:ee:85:2e:50:8d:79:
9b:0c:08:fc:82:77:8b:f6:f9:ee:5b:6d:bb:b6:7f:
e6:1d:9b:14:70:dd:49:b1:d1:88:33:c9:a8:ec:57:
ce:d1:17:ab:ba:ea:6f:c9:18:cb:82:4a:4e:2b:3b:
6f:81:2f:aa:e9:af:17:52:79:68:a7:18:d6:a9:a2:
c6:bb:16:3a:ee:b5:3c:39:93:87:79:99:ef:ef:ce:
0f:3f:fc:57:1c:7b:da:b0:c5:5e:87:99:1d:17:99:
48:2c:34:6e:5c:ba:ce:80:6f:94:44:96:cb:1f:75:
3f:48:82:41:4e:45:5f:16:09:d0:da:15:36:8b:6d:
d7:eb:cd:9e:bb:e3:60:c7:f7:13:36:14:25:e0:2e:
67:28:c9:35:e8:58:f8:af:52:22:64:e5:ab:21:d6:
be:4a:c2:64:63:5b:4e:30:a6:8c:32:5d:a5:b7:75:
d8:84:a9:70:0f:26:d0:01:59:c0:4c:21:9d:b7:6b:
bc:76:33:5b:71:fd:5e:84:d4:07:cc:1b:25:e6:4a:
1e:8c:79:44:0e:69:b4:aa:6f:c1:8b:c3:59:9f:ae:
44:2c:5d:16:de:33:cd:2a:b6:af:8f:27:ec:76:6f:
73:78:0d:4f:1c:7e:20:ec:b0:15:82:87:5c:b1:5c:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:F5:FC:51:2C:CD:B6:5D:28:CF:C3:0C:84:85:70:0B:E5:CB:C8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9O71_FEszbZdKM_DDISFcAvly8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.116.0-212.86.127.255
Signature Algorithm: sha256WithRSAEncryption
74:43:cc:9c:11:c4:2c:43:8d:1f:37:68:a3:e6:1a:2a:9e:84:
71:f4:4e:b8:40:0a:a0:e1:f4:ed:8b:5e:76:25:6a:1a:4e:2e:
a0:02:7e:f4:b3:ff:db:07:e7:a1:a3:b4:3a:8a:2d:4a:8c:44:
3f:f8:8a:45:30:7f:42:7f:d2:b4:39:42:05:01:1d:47:eb:36:
c1:b1:f4:dd:b5:64:ee:ff:d2:04:a2:8a:65:75:64:6b:65:33:
65:27:40:db:bf:c6:a1:91:d9:92:b5:44:9a:ec:c6:da:8f:e1:
16:d7:8c:af:fe:0e:46:ee:b3:fb:5b:e1:f8:98:5c:e5:55:f4:
5a:ee:bd:5a:8a:2d:01:c4:33:22:a8:cd:08:41:10:17:3a:59:
24:98:d5:38:90:4c:63:d4:64:37:b2:18:36:a5:cc:8f:0e:ad:
9c:40:2a:9d:fe:15:bc:51:fd:a9:1d:b2:5e:76:3c:33:b8:78:
1e:a4:a3:a4:27:55:25:b7:1f:0c:23:0f:54:42:8d:23:ad:73:
11:b0:00:e6:c5:fc:1b:8b:eb:e3:eb:00:7e:26:7c:06:54:53:
72:c7:4f:17:eb:07:a3:b4:4c:9a:21:5f:f9:60:58:df:b9:c5:
25:5e:31:2c:89:10:66:5f:cd:ff:fa:40:a4:5f:06:8f:cf:c3:
f1:18:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org