Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8ULu3B-xbACm4Wstc8Pp2lrWObo.roa
File: 8ULu3B-xbACm4Wstc8Pp2lrWObo.roa (raw, json)
Hash identifier: EZ8Dj/Hny0849guJDrn+Djs1rUPdaV/b0YnbCaEVDdM=
Subject key identifier: F1:42:EE:DC:1F:B1:6C:00:A6:E1:6B:2D:73:C3:E9:DA:5A:D6:39:BA
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01870F7916D763CC3E92BE69C1E0B93844DE
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8ULu3B-xbACm4Wstc8Pp2lrWObo.roa
Signing time: Thu 23 Mar 2023 17:16:46 +0000
ROA not before: Thu 23 Mar 2023 17:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207795
IP address blocks: 212.69.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 21:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:79:16:d7:63:cc:3e:92:be:69:c1:e0:b9:38:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 17:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f142eedc1fb16c00a6e16b2d73c3e9da5ad639ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:f3:0d:40:77:e8:e0:b5:7c:85:c9:5a:e5:
94:fe:5e:7b:d2:2d:4b:70:93:52:d6:14:68:40:ff:
11:53:26:c6:76:44:dc:c1:ac:b7:59:de:4b:53:89:
7e:d9:66:ef:39:d5:b0:8a:27:b1:58:1b:f4:ae:b9:
fb:36:0f:b8:bf:39:f2:6b:da:f1:82:6a:ce:b3:8c:
a8:a8:33:5f:97:85:30:ad:81:26:2e:f5:5e:db:01:
00:ee:d9:85:ed:24:20:46:50:b2:55:b1:92:af:3a:
b3:68:19:b4:62:ac:df:7a:7b:d0:7f:da:7e:28:55:
26:2b:02:3c:e2:7e:ad:74:64:c6:c4:8e:8a:dd:bb:
1e:5f:d8:89:99:25:d7:c9:1d:bf:99:f2:c1:2c:56:
70:1a:9c:c9:a2:72:0f:0d:d2:2f:bd:ee:39:5f:cd:
e9:97:2c:59:b9:e7:7c:3c:29:6f:e1:a9:f6:58:75:
14:d9:de:31:54:ba:fd:b6:90:89:4f:10:0e:c5:51:
bc:c2:60:da:94:b8:a8:11:6b:f3:62:9f:d1:74:b8:
12:b3:70:3d:e5:fe:e5:d8:dc:e2:4e:cf:a3:56:c2:
28:bd:e0:02:3f:aa:4a:07:a8:b6:2c:b3:a9:86:f4:
47:10:70:b4:c7:0f:21:da:17:aa:74:bb:42:c2:69:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:EE:DC:1F:B1:6C:00:A6:E1:6B:2D:73:C3:E9:DA:5A:D6:39:BA
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8ULu3B-xbACm4Wstc8Pp2lrWObo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.134.0/24
Signature Algorithm: sha256WithRSAEncryption
95:59:a0:06:5d:8c:76:0f:2d:29:67:d4:f4:5a:06:bb:d9:81:
d0:ff:ea:06:64:42:48:96:3e:f2:23:a4:5b:b4:15:12:88:5a:
30:3f:81:1d:65:5e:4f:ef:9f:8b:02:ef:08:51:b9:da:08:bd:
ac:ee:cf:3e:f6:55:c6:9f:b4:55:79:46:46:60:ae:2e:58:ae:
32:6a:62:9b:36:0f:36:01:f8:58:98:b4:bd:ca:d3:08:cd:71:
8e:66:48:d5:fc:bd:18:3c:d5:13:c9:7d:21:6f:74:ca:1d:70:
b0:3a:22:d4:19:8a:f1:5d:76:f8:cb:fc:53:1f:71:07:05:64:
07:8c:80:26:5b:3b:d5:fe:83:12:99:1e:7c:bd:b5:2c:e8:14:
17:fe:01:53:2f:08:c0:7d:79:96:8f:3c:74:05:b2:4f:d9:83:
11:12:ff:4f:8b:81:cb:2a:58:4a:ff:14:71:d5:ba:d2:af:e1:
be:12:5a:4a:7b:a3:95:f1:0a:9f:78:f3:4f:c5:b1:8b:44:da:
93:d6:0b:13:7b:9d:93:6a:60:1f:dc:1d:ea:98:c3:5b:ba:fe:
20:7a:3b:11:1b:5f:af:48:b6:15:1d:3d:bd:61:ed:a8:0f:df:
f5:e8:a8:96:a4:1a:08:64:4e:1f:d6:37:6c:ba:6d:10:99:fb:
ac:f6:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org