Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/RN6V8i-M4a0vTdj1_AAzbnttVQE.roa
File: RN6V8i-M4a0vTdj1_AAzbnttVQE.roa (raw, json)
Hash identifier: YR2KUif+0b5dK8C5N8FqizF3/n0sCV8hczN438mO+ig=
Subject key identifier: 44:DE:95:F2:2F:8C:E1:AD:2F:4D:D8:F5:FC:00:33:6E:7B:6D:55:01
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018C77ED3FC8312A2D8E70A9DEC1035EDAC9
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/RN6V8i-M4a0vTdj1_AAzbnttVQE.roa
Signing time: Sun 17 Dec 2023 13:18:06 +0000
ROA not before: Sun 17 Dec 2023 13:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 213.210.216.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:ed:3f:c8:31:2a:2d:8e:70:a9:de:c1:03:5e:da:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Dec 17 13:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44de95f22f8ce1ad2f4dd8f5fc00336e7b6d5501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:58:2d:80:e0:8a:14:84:a0:6c:4d:48:e1:
f7:af:fa:f9:2f:6b:14:1d:a9:2d:c4:b8:be:dc:4c:
12:cf:d3:dc:f6:1f:d7:b3:bd:56:94:23:2e:01:7d:
a7:9b:15:52:91:f2:b8:87:e7:ff:0f:fd:50:c3:7b:
54:c3:23:96:a4:9a:0e:48:71:3d:f1:b9:d7:3d:cf:
53:e8:e7:eb:86:12:c2:a9:fd:bf:88:6b:84:37:24:
71:07:34:b1:b8:b3:77:ed:28:d6:0e:2e:d0:12:32:
81:29:30:72:c4:6c:eb:c2:fb:4b:89:69:82:3f:23:
fc:9b:cd:af:49:7e:29:6f:98:b5:af:0e:f1:b6:25:
61:b7:31:51:eb:7c:3d:42:58:22:9b:93:ea:c7:29:
df:28:f1:ed:70:2c:f9:85:01:01:02:02:b6:8c:5a:
ef:11:6b:a4:41:28:d1:a7:06:eb:e4:0f:20:ab:42:
a4:17:ac:12:fb:cd:e5:df:45:39:da:46:dd:2f:74:
1e:31:56:15:53:73:70:90:a6:a7:47:57:cc:2b:fb:
74:f2:22:8f:16:0c:2a:ff:4e:c4:24:0d:8f:a5:d9:
fb:16:bb:e8:a0:31:50:50:52:d4:6e:85:d7:e8:c9:
4a:46:0a:e8:0a:7b:1e:dd:60:7a:3a:19:3a:b0:a7:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:95:F2:2F:8C:E1:AD:2F:4D:D8:F5:FC:00:33:6E:7B:6D:55:01
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/RN6V8i-M4a0vTdj1_AAzbnttVQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.74.0/24
213.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fb:7e:e6:e0:ae:cb:e6:f0:b7:f9:fa:33:33:8d:62:7b:c1:
55:3c:64:a0:42:c7:04:e2:d9:22:b5:6a:7d:ae:33:cb:bf:e1:
86:9f:1c:3c:fa:9f:cf:9d:50:15:13:65:61:6a:9f:03:14:da:
9b:63:ab:23:cc:c4:9a:e0:46:7f:4a:0b:51:b0:7f:63:06:1e:
c5:f2:eb:58:8d:f9:44:f4:39:dd:d6:62:2d:2b:15:00:09:4c:
9f:89:07:88:9d:33:9f:9f:02:80:31:27:ed:43:d1:27:d4:eb:
2f:9f:97:90:f9:4c:5b:90:66:a6:72:34:c5:b3:c6:a0:d9:31:
ec:f6:85:af:8a:ba:e3:f5:9f:ec:db:1b:e6:05:6f:fe:44:b5:
dd:73:59:56:85:93:dc:14:8b:37:50:44:ce:9f:f3:25:04:6a:
cd:a7:10:d3:9e:56:f7:3b:d9:6c:f4:c6:4a:98:b9:23:8d:28:
e2:75:cc:17:72:dd:aa:5b:5e:99:38:d4:72:7f:7e:1c:e3:42:
a6:9c:40:a4:05:f3:8c:0c:3c:b0:53:64:04:55:48:12:66:f7:
a1:6a:55:d3:88:59:cf:f0:ff:06:42:65:e7:0b:8e:1a:e5:9d:
62:29:92:0d:84:ff:48:4c:68:a0:69:2d:8d:e9:97:42:ce:18:
7c:c8:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:14 2024 by rpki-client on console-fra.rpki-client.org