Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SPX7uidR65B6dIcM1X4hsI1WpLE.roa
File: SPX7uidR65B6dIcM1X4hsI1WpLE.roa (raw, json)
Hash identifier: rW2wWbMJNH93kXeB5/C+wy+6q6O6p9wM4x8Rm4hfMe4=
Subject key identifier: 48:F5:FB:BA:27:51:EB:90:7A:74:87:0C:D5:7E:21:B0:8D:56:A4:B1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A6F54AD2FEA2874E28EF21A842E7165D0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SPX7uidR65B6dIcM1X4hsI1WpLE.roa
Signing time: Thu 07 Sep 2023 11:08:54 +0000
ROA not before: Thu 07 Sep 2023 11:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3170
IP address blocks: 212.69.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:54:ad:2f:ea:28:74:e2:8e:f2:1a:84:2e:71:65:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 11:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48f5fbba2751eb907a74870cd57e21b08d56a4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:53:8c:d9:91:7b:68:cf:5e:62:1a:63:be:
e3:45:00:31:14:06:fa:26:01:42:29:5b:ce:03:04:
26:e9:4d:8a:cf:59:d3:be:b4:26:75:6f:0e:45:7e:
2f:b0:99:74:f1:5b:da:e7:7d:99:03:36:2f:8e:0b:
63:00:df:f3:55:85:4a:4f:bf:3b:e3:e1:bd:0c:9f:
8c:5b:51:cb:9c:9d:d9:c9:7e:06:22:a8:48:88:15:
08:af:50:f9:22:3c:8a:d7:36:99:ea:7f:a0:c6:a1:
0f:6b:4d:f8:51:96:7a:09:eb:bc:14:8e:a2:18:3b:
bc:a6:03:d3:bb:c8:66:6e:c6:60:d8:b7:5a:75:1c:
a0:f8:80:b2:a9:07:19:8d:9a:f7:c6:b7:d7:52:e6:
3e:09:d5:27:42:b2:68:86:73:e2:71:3d:43:19:a0:
c6:86:29:f5:1a:11:b6:76:aa:dc:31:0f:3e:3c:96:
88:38:05:a1:c1:3f:a2:d0:87:43:b9:53:f4:05:25:
a8:69:3b:81:58:05:2c:c3:5b:88:76:02:7e:ae:fa:
20:0f:d4:2e:01:61:99:a3:f4:95:36:1e:e1:07:71:
c3:8b:56:af:1f:ca:b8:73:dd:f8:b6:c3:51:af:45:
5d:67:87:48:da:6c:b6:74:aa:10:bb:36:23:b0:d9:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:FB:BA:27:51:EB:90:7A:74:87:0C:D5:7E:21:B0:8D:56:A4:B1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SPX7uidR65B6dIcM1X4hsI1WpLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5f:b3:a6:b3:0b:54:90:ed:7f:bf:68:09:5c:37:08:49:9d:
6c:e0:f5:9e:5b:c6:76:00:d3:4b:ad:6f:ea:5e:82:93:bd:98:
c3:83:c7:f6:fb:49:0a:61:83:3e:f1:f4:5e:03:ea:d7:98:63:
87:7c:37:f9:9c:4d:1e:f3:11:cf:44:ba:65:4c:9f:77:98:47:
39:eb:7c:54:c2:ac:c2:b0:09:c1:43:43:5e:ae:4d:01:3e:cc:
ce:c6:83:33:ff:d5:c2:e8:a5:e0:a6:2a:90:e4:49:fb:8c:06:
80:a1:a3:11:64:90:f4:ce:9c:d4:54:72:5e:3f:8d:12:18:86:
e0:71:3a:6e:3b:7d:9d:cf:f0:41:2d:59:23:f8:b2:b2:32:5a:
7f:d9:70:2c:c6:d5:86:b0:23:d9:73:11:15:ce:fd:10:d5:63:
16:6a:c7:f0:52:a5:d1:8a:9d:f0:17:68:0b:aa:35:61:26:04:
4b:bc:9f:81:b7:97:96:c0:3d:df:86:d0:dd:d0:3e:c7:d9:c0:
17:88:74:7b:a3:38:99:2c:e4:9f:7e:d5:4c:d7:ad:16:8f:0b:
8b:57:c1:ce:25:b5:71:c2:1a:6d:b2:d4:34:20:4d:47:b7:f9:
8b:32:97:46:da:1d:b4:b5:77:f8:f3:e1:3c:a4:11:6f:ea:26:
05:f9:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:36 2024 by rpki-client on console-fra.rpki-client.org