Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/h5AhBlfFkrQgUjlR0xU9SQ-ajew.roa
File: h5AhBlfFkrQgUjlR0xU9SQ-ajew.roa (raw, json)
Hash identifier: fO7ZQoObrmidTaaWoEsSW4bc/10W4waRhGKaNvuDeFA=
Subject key identifier: 87:90:21:06:57:C5:92:B4:20:52:39:51:D3:15:3D:49:0F:9A:8D:EC
Certificate issuer: /CN=64b0ab01ca0d034e50d1085a741232fe8cbb4cbf
Certificate serial: 018571DE74E7924861391F41880DE4FC11D9
Authority key identifier: 64:B0:AB:01:CA:0D:03:4E:50:D1:08:5A:74:12:32:FE:8C:BB:4C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLCrAcoNA05Q0QhadBIy_oy7TL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/h5AhBlfFkrQgUjlR0xU9SQ-ajew.roa
Signing time: Mon 02 Jan 2023 09:44:42 +0000
ROA not before: Mon 02 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 212.104.211.0/24 maxlen: 24
212.11.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:74:e7:92:48:61:39:1f:41:88:0d:e4:fc:11:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b0ab01ca0d034e50d1085a741232fe8cbb4cbf
Validity
Not Before: Jan 2 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8790210657c592b420523951d3153d490f9a8dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:49:e2:d0:54:c4:8f:28:9e:1a:ae:f1:86:
8f:21:4f:21:de:8d:9d:03:59:2a:b9:d0:f3:7b:5e:
66:75:25:c6:21:a1:84:64:f1:de:f9:76:bc:d0:22:
8e:44:be:c4:8e:cb:df:7e:8d:40:19:7f:65:a6:d9:
e7:c7:47:bf:7a:a6:69:81:d8:07:d8:d8:8c:8f:04:
82:d2:31:1b:8b:07:66:90:ca:0a:f3:f4:a4:fb:54:
80:0a:43:36:1d:8d:cb:ed:ae:8d:e6:22:56:e9:da:
fe:d6:c8:6f:a5:6f:93:07:ec:9f:0e:78:25:ec:ad:
e7:9b:65:3b:f5:cf:21:32:6f:32:2c:6f:24:e5:ff:
90:ec:33:ee:34:0f:34:c3:fc:90:b7:c7:a7:0a:4b:
b8:e3:ca:6d:de:6b:82:d8:be:44:c5:48:1c:1a:06:
ce:40:b5:ba:8e:84:e8:6a:b3:47:0c:50:4e:e9:a8:
0f:4b:f9:17:60:04:84:a0:f5:a5:ac:ec:7c:98:6b:
86:8b:f8:04:90:ae:89:00:d5:4c:d4:86:bf:fa:05:
4b:0b:4f:67:00:b1:7a:0c:a5:02:ca:6c:69:4d:79:
22:30:7b:dc:65:96:07:08:5e:cb:2f:6e:2f:77:35:
6b:77:52:3c:12:b0:b4:e4:b0:97:51:4b:d2:59:1d:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:21:06:57:C5:92:B4:20:52:39:51:D3:15:3D:49:0F:9A:8D:EC
X509v3 Authority Key Identifier:
keyid:64:B0:AB:01:CA:0D:03:4E:50:D1:08:5A:74:12:32:FE:8C:BB:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLCrAcoNA05Q0QhadBIy_oy7TL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/h5AhBlfFkrQgUjlR0xU9SQ-ajew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/ZLCrAcoNA05Q0QhadBIy_oy7TL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.93.0/24
212.104.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e9:01:29:91:55:b2:37:af:02:d2:a6:14:7e:12:27:65:07:
f0:e8:74:29:f3:c5:b8:12:4a:2b:2a:1f:de:42:6f:64:e9:58:
ac:a5:09:0c:aa:39:9d:e5:47:a7:ae:a0:91:d3:90:d8:ce:f3:
1b:02:6d:d5:86:5b:89:2d:ff:b8:97:e5:b6:a9:38:24:33:f4:
cf:ca:9d:fb:10:2f:87:c9:56:c2:08:a9:e0:ec:74:7a:4f:fe:
cc:86:be:71:36:cb:d5:a0:8c:83:fc:5e:e7:24:e4:0f:7c:6a:
9b:71:f3:c5:86:76:b8:a8:3d:4b:e8:41:87:a1:31:49:e8:05:
27:56:13:f8:a7:17:31:b1:f6:22:7e:b2:6d:ce:6d:d2:94:82:
fe:98:03:27:1f:41:f1:16:68:38:98:3b:9c:cc:50:a5:af:2d:
17:65:c4:18:6b:7e:f0:6a:e8:1f:76:bd:22:c7:53:c0:a6:7f:
70:06:09:66:58:f0:34:ab:4e:74:b2:8c:a7:71:5c:7d:e4:65:
16:ce:ac:80:fa:3a:6b:7b:ae:10:76:18:fd:11:98:79:25:d3:
cc:90:6b:b2:c9:b8:9c:6b:fe:27:e1:eb:e5:df:e7:fa:c6:80:
0b:e9:c6:07:bd:b0:45:50:41:f3:f7:48:41:bf:a7:c5:47:0f:
bd:18:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:53 2024 by rpki-client on console-ams.rpki-client.org