Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X5dcXGbFnVlcdG_6OJBvCWHAUYo.roa
File: X5dcXGbFnVlcdG_6OJBvCWHAUYo.roa (raw, json)
Hash identifier: 9SWoIWSibcsbYLRHX4iEwsu58yq4ylatnG1BnOqDdZ4=
Subject key identifier: 5F:97:5C:5C:66:C5:9D:59:5C:74:6F:FA:38:90:6F:09:61:C0:51:8A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01882E45ECB9A4E2F0CA97C0B50349E71D4E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X5dcXGbFnVlcdG_6OJBvCWHAUYo.roa
Signing time: Thu 18 May 2023 09:51:54 +0000
ROA not before: Thu 18 May 2023 09:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 10:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:45:ec:b9:a4:e2:f0:ca:97:c0:b5:03:49:e7:1d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 18 09:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f975c5c66c59d595c746ffa38906f0961c0518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:fb:e2:4a:e5:39:61:d1:17:91:ac:f0:6a:
f7:4f:38:f7:7a:ea:36:5d:1f:bf:d9:4a:d0:15:a0:
8e:8a:f7:7d:bf:d0:59:e0:f3:53:1f:81:40:65:f1:
8d:e4:65:7a:27:dc:90:d8:d7:90:4d:3b:16:35:ca:
2a:55:1e:79:d7:f8:27:d3:fe:6e:26:20:46:7c:a3:
65:7c:94:77:f4:e5:cc:41:26:dc:ae:a7:cf:28:b3:
7c:ba:4e:56:1a:12:73:66:4f:0b:f5:1b:57:6c:db:
67:d3:de:46:5c:15:c3:20:8c:b4:57:ad:ee:91:85:
f0:29:b5:80:fd:52:4a:68:4f:03:e5:01:93:41:44:
b8:1d:90:71:28:74:92:3d:ea:bc:11:72:7e:3a:e5:
48:56:7a:eb:bf:8c:0f:01:52:73:49:cd:13:1a:c0:
aa:12:5f:08:a1:bb:14:78:9b:c1:1b:95:ef:c1:57:
29:d6:79:1d:2e:ad:03:f9:4e:06:1f:8d:03:61:01:
94:ac:e1:c3:99:fc:05:62:d0:08:9d:ca:d1:ce:f1:
35:e0:6b:9a:3f:eb:1f:6b:ce:36:0d:25:de:e3:00:
c3:d8:47:39:d2:92:dc:5a:59:5d:c9:18:b7:18:b1:
97:d6:ed:16:f2:6f:28:81:c8:0c:f2:4a:b3:29:ef:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:97:5C:5C:66:C5:9D:59:5C:74:6F:FA:38:90:6F:09:61:C0:51:8A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X5dcXGbFnVlcdG_6OJBvCWHAUYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0a:41:48:17:bf:8f:9f:92:98:8b:e9:eb:62:e2:7e:33:6a:
87:7f:1d:b7:49:71:88:df:a7:cc:c0:35:c5:5d:45:29:8e:9f:
b6:37:78:8c:43:6f:a4:19:85:d0:07:e5:cf:de:3b:30:3f:92:
65:dc:9d:ac:28:e2:6a:ff:82:1a:da:fe:23:c9:02:a2:ae:9e:
6e:3a:ee:63:80:a3:92:51:c9:c4:eb:f1:ca:d4:e8:4c:f7:fa:
3d:5d:2f:32:0d:e0:da:d5:84:c2:e4:36:34:ff:0d:7f:e5:7a:
33:95:6d:c8:d8:63:d4:b5:9f:28:51:b2:6b:e2:25:ec:20:a3:
34:78:83:6c:c7:a9:c8:90:10:40:91:ba:54:8d:c0:aa:30:94:
7a:a8:1e:e4:36:04:01:0e:ff:28:5f:51:8f:f3:dc:78:64:64:
bb:e9:39:95:8f:6e:b0:e2:9f:04:16:bb:a3:10:7d:09:ea:38:
a4:35:a9:ec:ea:7b:1a:a0:81:ca:7b:39:7b:68:d2:f1:94:46:
70:3e:9b:5e:d1:3f:0a:cb:5c:91:b5:7d:af:ff:00:fc:bf:18:
f8:bb:29:ff:6f:eb:d8:20:c2:a7:7a:f5:1c:2a:18:06:1b:ee:
58:ea:b6:71:44:1d:8f:fe:79:c3:26:fd:da:a8:2f:2e:d0:86:
29:a3:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org