Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/_EYKopL27vmUOiwqe9GqWvSih5A.roa
File: _EYKopL27vmUOiwqe9GqWvSih5A.roa (raw, json)
Hash identifier: A2dIPOIeavrxPNaKJdGK5FbZABnRM9gDiBF0YEXVplc=
Subject key identifier: FC:46:0A:A2:92:F6:EE:F9:94:3A:2C:2A:7B:D1:AA:5A:F4:A2:87:90
Certificate issuer: /CN=64b0ab01ca0d034e50d1085a741232fe8cbb4cbf
Certificate serial: 018CC500ECE090C3084F8AB58DC2EEE1BA69
Authority key identifier: 64:B0:AB:01:CA:0D:03:4E:50:D1:08:5A:74:12:32:FE:8C:BB:4C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLCrAcoNA05Q0QhadBIy_oy7TL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/_EYKopL27vmUOiwqe9GqWvSih5A.roa
Signing time: Mon 01 Jan 2024 12:30:21 +0000
ROA not before: Mon 01 Jan 2024 12:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 212.104.211.0/24 maxlen: 24
212.11.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 15:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ec:e0:90:c3:08:4f:8a:b5:8d:c2:ee:e1:ba:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b0ab01ca0d034e50d1085a741232fe8cbb4cbf
Validity
Not Before: Jan 1 12:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc460aa292f6eef9943a2c2a7bd1aa5af4a28790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:a3:32:9c:1d:50:7e:e2:5c:86:2f:19:38:
fa:d4:4b:ad:d7:98:89:2d:0f:b0:75:ec:56:d9:44:
88:76:47:d4:8a:d2:38:77:2c:08:83:2c:8a:b8:1e:
9d:58:6f:1d:0b:f2:af:f0:6d:48:c4:73:8e:01:62:
61:c3:03:0c:f2:ee:fd:cd:ce:f2:52:ad:15:c3:ea:
5a:51:09:64:3c:27:d0:3e:2e:0a:a5:a2:6b:d8:5e:
18:d0:78:c4:16:62:8f:99:f5:6a:56:cd:5e:82:45:
ef:21:cd:a2:c3:fd:7b:26:0a:38:1a:ba:90:c2:ae:
ce:cb:18:23:6e:0b:d6:21:af:38:76:ca:a6:02:ab:
1f:de:0b:df:a4:dd:84:e9:13:32:92:3e:29:e6:4e:
93:3e:53:3f:61:53:6a:d8:3c:f9:48:1f:07:e3:f3:
ce:69:06:04:e8:86:59:97:32:16:30:b1:e0:ed:a4:
45:11:fd:11:48:4d:7b:6c:c0:d9:da:20:50:cc:14:
0f:c4:9f:f9:ca:42:51:a8:c2:cb:16:87:4c:69:89:
ff:f6:ea:88:b6:89:1c:6e:7f:ec:5f:88:68:54:e5:
aa:23:86:49:48:42:82:36:b3:b9:e1:7a:1b:b2:4f:
60:e5:b0:7b:1e:fb:aa:de:59:3f:7f:94:c4:f9:6f:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:0A:A2:92:F6:EE:F9:94:3A:2C:2A:7B:D1:AA:5A:F4:A2:87:90
X509v3 Authority Key Identifier:
keyid:64:B0:AB:01:CA:0D:03:4E:50:D1:08:5A:74:12:32:FE:8C:BB:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLCrAcoNA05Q0QhadBIy_oy7TL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/_EYKopL27vmUOiwqe9GqWvSih5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/ZLCrAcoNA05Q0QhadBIy_oy7TL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.93.0/24
212.104.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:e3:05:62:21:fd:aa:cf:a7:31:0a:5f:b8:5c:82:27:0e:
c8:77:a5:1b:eb:11:fa:e4:ed:ab:78:d3:20:8b:e4:27:69:c0:
82:7e:93:96:cc:5d:15:10:c3:5a:41:25:4b:e6:85:08:d2:f0:
24:b8:42:db:64:70:29:d8:ad:04:2e:05:ab:0b:61:de:86:64:
d4:21:28:c3:56:38:ec:fa:44:69:4d:a3:79:c0:c9:09:f3:fa:
3f:9a:4c:43:05:b8:73:42:85:48:d2:49:88:9f:d1:51:fb:73:
56:94:48:7c:9b:b9:bf:47:bb:4b:c3:23:d8:af:c8:50:99:0c:
ce:ba:92:7c:2b:df:3b:c0:00:7c:6f:e5:43:1e:f5:df:32:70:
93:08:f7:2a:56:39:3a:40:9d:0d:22:9e:56:bd:11:e7:7e:10:
a0:96:b0:d2:b7:e4:d9:03:ed:03:8b:c6:6b:83:7a:ac:89:3d:
7e:10:39:d6:31:7b:d4:2b:7c:7e:8c:dc:4d:ef:19:c9:48:92:
71:ed:0e:dd:e3:1d:29:45:63:3f:ca:50:5c:6a:8c:1d:16:39:
d0:3f:3d:ed:9f:82:41:6e:9a:ae:9e:6b:b5:93:38:4e:d1:a3:
21:72:35:33:56:c7:3c:b7:80:50:b0:5c:42:be:43:85:26:ee:
52:74:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:00 2024 by rpki-client on console-fra.rpki-client.org