Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/yTWO-nNdKQt9h9QJYEinHtOMwLU.roa
File: yTWO-nNdKQt9h9QJYEinHtOMwLU.roa (raw, json)
Hash identifier: rOPV2+9q1oyvv8UeznBcmjNY8H4wsG8gsXcaBJ6k+eo=
Subject key identifier: C9:35:8E:FA:73:5D:29:0B:7D:87:D4:09:60:48:A7:1E:D3:8C:C0:B5
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018C0AC12E66734124054878F9B8BF9A4726
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/yTWO-nNdKQt9h9QJYEinHtOMwLU.roa
Signing time: Sun 26 Nov 2023 08:31:21 +0000
ROA not before: Sun 26 Nov 2023 08:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24731
IP address blocks: 212.71.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:c1:2e:66:73:41:24:05:48:78:f9:b8:bf:9a:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Nov 26 08:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9358efa735d290b7d87d4096048a71ed38cc0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:4b:ed:bc:03:e8:f2:25:bb:ed:10:2e:09:
06:ab:df:55:49:94:79:94:c8:ab:7b:27:47:c5:75:
f6:c1:e0:38:62:e8:76:f5:a4:4f:f4:a4:d1:3e:be:
4a:39:72:b2:f6:05:94:bb:ad:62:2a:74:34:52:a9:
2e:37:f0:46:db:ac:6c:ab:4d:13:77:5a:59:fe:dd:
b0:95:b7:cc:0b:68:4d:f4:17:0e:5b:9e:87:35:f4:
3e:1c:67:78:5a:6c:01:32:91:93:00:67:be:fc:7c:
4f:24:f4:3b:a7:45:ba:b4:ae:04:35:85:05:b5:43:
9d:f9:8f:c2:d5:30:d7:4d:68:4d:9b:48:2a:15:a3:
50:2a:51:96:a9:53:34:18:fb:a4:ee:15:a6:ce:55:
b5:44:c3:4a:cd:49:b4:8d:f8:4d:9a:da:8b:58:68:
6b:fa:40:f3:6b:91:12:b2:fc:20:3d:33:a9:ce:cc:
17:3a:0c:13:e0:a8:6e:73:01:69:8e:fe:80:80:72:
32:1d:cb:92:31:aa:13:2d:91:ff:5b:a2:5b:f1:09:
e3:8a:78:80:8c:9a:96:89:33:70:89:0c:d2:de:6e:
1b:b3:70:17:f5:70:41:f9:fa:2a:31:61:c5:ed:57:
54:d4:14:4b:92:ec:5a:ec:85:43:43:dc:3b:c0:b0:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:8E:FA:73:5D:29:0B:7D:87:D4:09:60:48:A7:1E:D3:8C:C0:B5
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/yTWO-nNdKQt9h9QJYEinHtOMwLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.71.51.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0d:d2:e2:e3:14:06:96:82:84:ae:de:7b:7e:71:26:f0:ec:
e6:e4:a7:41:cd:a8:8e:0d:2b:1c:ac:05:d9:a6:b3:94:b1:12:
98:8a:a0:2e:16:3f:ce:83:f2:b9:06:be:0d:5a:ab:90:fa:e3:
5d:75:1e:63:bb:21:d5:1f:87:e1:83:86:00:0c:d9:61:63:62:
cf:46:24:d8:d1:db:be:70:98:e7:10:fa:73:41:02:b6:c4:81:
89:f7:d7:ea:fb:0e:58:3c:9b:d2:7c:02:e2:d5:53:e6:7b:dc:
42:c3:89:fe:d2:4f:17:9e:49:61:64:6d:c5:a6:ee:56:e2:3d:
eb:ea:43:f5:e9:c7:89:81:31:3c:07:40:60:7e:51:24:be:87:
10:60:59:d2:1c:0e:7f:bd:f2:c3:a5:e7:be:02:47:9e:1b:71:
79:6f:45:65:30:e5:87:f1:23:a5:19:1d:d4:d3:1a:e0:c3:3b:
61:dc:a0:0a:df:de:63:1d:b3:2d:5e:73:be:66:7b:8d:b0:a8:
e5:c1:e0:11:e4:19:ff:f2:08:c7:95:b6:89:0f:7c:c1:52:ea:
f0:3b:c1:4b:dd:d4:85:6c:10:ad:9b:78:3b:46:c8:56:61:c2:
f7:84:0c:36:dd:57:b2:b1:63:ab:05:3e:57:71:a5:83:35:91:
86:0c:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:10 2024 by rpki-client on console-ams.rpki-client.org