Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/fS2VXstuYRJ_8mfq4q6XaZ82tzI.roa
File: fS2VXstuYRJ_8mfq4q6XaZ82tzI.roa (raw, json)
Hash identifier: +V0+JI6tOQ+tUJOOo2NTcRT1XzmaUuLr6YeN1x/1bko=
Subject key identifier: 7D:2D:95:5E:CB:6E:61:12:7F:F2:67:EA:E2:AE:97:69:9F:36:B7:32
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01856F42A4DBCD81CE92B58D154DACD209EC
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/fS2VXstuYRJ_8mfq4q6XaZ82tzI.roa
Signing time: Sun 01 Jan 2023 21:35:16 +0000
ROA not before: Sun 01 Jan 2023 21:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15373
IP address blocks: 212.87.224.0/21 maxlen: 21
212.87.232.0/23 maxlen: 23
212.87.234.0/23 maxlen: 23
212.87.238.0/23 maxlen: 23
212.87.236.0/23 maxlen: 23
2a01:698::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a4:db:cd:81:ce:92:b5:8d:15:4d:ac:d2:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 21:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d2d955ecb6e61127ff267eae2ae97699f36b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:2b:45:3c:4d:d9:cd:d3:1a:2c:a0:7b:53:
1b:f4:e3:de:13:c6:81:c1:d0:a5:7c:c7:64:b5:c8:
73:83:7f:63:da:03:0c:f7:28:56:9f:27:ab:4d:9c:
61:ea:f2:1a:f0:52:ac:90:53:6d:23:be:7a:c0:2f:
b7:bb:82:e0:a4:f7:96:c8:a1:7c:a9:31:7f:82:1b:
e5:1f:34:b8:32:6c:62:72:a5:5b:b7:57:da:6a:d0:
c0:b8:77:cb:62:b6:f2:8c:1c:8a:34:ba:7b:9e:48:
5b:bd:f1:30:ec:1a:51:f7:46:8a:2e:37:be:d3:4c:
a4:04:b7:96:5d:27:ed:ad:cb:db:51:1a:b6:56:fa:
ad:ee:5b:39:89:71:c1:b1:ea:64:e3:3b:89:a7:50:
4f:76:be:14:5c:fe:51:27:61:31:a6:00:f6:bb:9b:
c6:cd:90:f7:8b:fa:25:48:68:f6:37:ce:40:4b:60:
73:cf:4a:ce:66:08:2c:4a:5c:be:23:c3:e5:56:50:
88:e8:2f:4a:6d:b3:25:26:93:c3:ad:14:f7:3e:1f:
62:9c:1f:b0:ad:f3:3e:05:99:43:a9:93:1f:23:ea:
e0:b0:90:3d:06:f8:f5:20:8c:c8:b8:e3:99:ce:b1:
c0:cf:5c:65:a3:75:db:56:67:d5:d3:4b:72:ac:c4:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2D:95:5E:CB:6E:61:12:7F:F2:67:EA:E2:AE:97:69:9F:36:B7:32
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/fS2VXstuYRJ_8mfq4q6XaZ82tzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.224.0/20
IPv6:
2a01:698::/32
Signature Algorithm: sha256WithRSAEncryption
1b:38:09:67:0b:4b:7d:62:5e:cf:15:26:84:c1:5c:cb:83:be:
a3:22:fb:ef:68:cd:b5:1a:dd:92:86:6d:ab:59:df:c9:a9:81:
3c:b3:77:8e:1e:1b:4b:03:7a:24:cf:71:f9:ec:79:52:fe:1b:
40:4a:83:d4:75:17:f4:02:62:1a:d7:b1:81:e3:c3:c1:fb:2c:
4c:f7:bc:5d:14:96:9e:57:e7:fb:d6:be:c1:b7:35:74:9b:53:
4d:e5:96:d3:15:df:79:82:e6:b7:6f:1d:10:38:d7:30:83:eb:
4b:49:6a:60:9b:60:15:33:d4:10:86:62:5c:ee:e6:78:2d:c3:
a7:84:de:f4:e3:64:c2:8d:3b:d0:83:35:5e:44:09:55:c2:f5:
71:ed:a5:26:d5:c7:7d:ec:6e:a4:78:51:51:1e:47:1b:c2:14:
1d:e8:77:9a:18:0d:40:b5:ec:85:64:f4:40:aa:38:33:a9:df:
9d:c6:2a:51:d1:62:31:b9:0a:68:a4:28:49:e8:57:e8:2d:e2:
0b:17:cd:dc:47:8e:16:97:b0:f1:a0:04:ca:02:56:1f:dc:8f:
46:a4:e6:a9:08:73:6c:84:12:db:9f:1f:67:ce:f5:f4:d8:ef:
9a:fb:c3:65:4d:06:9b:0e:35:ae:8c:ea:24:b1:48:b0:d3:a7:
44:b6:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 29 17:23:34 2023 by rpki-client on console-ams.rpki-client.org