Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/CiYXAADFuhdrCgc3y-fP9prBE0I.roa
File: CiYXAADFuhdrCgc3y-fP9prBE0I.roa (raw, json)
Hash identifier: nmWDwUvQJDbIZlsZVp8m9Q5N8+ZQ2PiY1TKdVm6cti0=
Subject key identifier: 0A:26:17:00:00:C5:BA:17:6B:0A:07:37:CB:E7:CF:F6:9A:C1:13:42
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187BEC39865498D5DD534C4F600F85077C4
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/CiYXAADFuhdrCgc3y-fP9prBE0I.roa
Signing time: Wed 26 Apr 2023 18:11:42 +0000
ROA not before: Wed 26 Apr 2023 18:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31262
IP address blocks: 212.49.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:c3:98:65:49:8d:5d:d5:34:c4:f6:00:f8:50:77:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 26 18:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a26170000c5ba176b0a0737cbe7cff69ac11342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d7:1f:10:90:b7:e3:7e:bf:01:a0:63:75:78:
1a:c5:eb:8a:05:a5:1d:02:3f:8d:dd:2a:c5:f9:0c:
34:75:53:0c:fc:18:ee:1f:b3:cc:3e:60:10:3e:14:
73:fa:e0:ae:cd:94:e5:84:98:0b:5e:46:b4:1e:60:
53:14:55:51:ee:62:26:92:db:2a:85:35:30:1f:e0:
1d:c0:c1:8b:79:e8:25:7e:91:30:3a:4b:28:73:d4:
87:95:1b:80:80:c4:29:53:ce:a3:a9:b4:50:8b:a2:
39:dd:71:e8:77:0e:f0:e7:ba:55:56:f3:58:bb:5a:
66:72:d5:a4:34:8f:8a:1e:d7:6d:21:5f:54:7e:5b:
9d:d1:0a:10:7a:af:b1:44:c8:05:e8:20:1c:d8:ac:
41:57:b2:dd:54:47:a3:85:ce:e9:9f:13:c2:f7:bd:
b5:96:bf:bb:99:dd:76:82:d1:36:fd:0e:2e:5b:4c:
a1:3b:8e:a5:0d:75:50:8b:d4:40:7d:87:22:32:d2:
57:ef:99:04:bf:3a:87:c2:2c:f9:39:35:39:c6:be:
04:7d:f3:85:7f:e1:16:fa:c4:41:19:f4:9c:57:c9:
c8:65:e4:b4:28:73:07:d4:22:f1:58:7f:9d:c9:91:
d3:1b:c7:97:3e:1b:f0:a8:5d:0c:23:19:99:0d:f1:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:26:17:00:00:C5:BA:17:6B:0A:07:37:CB:E7:CF:F6:9A:C1:13:42
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/CiYXAADFuhdrCgc3y-fP9prBE0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.145.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4d:93:2d:33:78:3f:4a:02:34:32:53:81:a7:a5:dc:3a:f2:
b6:95:a8:2f:ea:0a:3d:0b:72:69:90:19:06:8b:01:5b:d3:a4:
ca:c7:81:0e:af:f5:53:a6:ac:36:f1:9f:b4:1b:e8:c3:e7:b7:
71:9c:bb:27:58:07:4c:4b:8c:72:49:98:6f:67:7f:67:e7:32:
47:51:77:da:d2:8e:22:bb:af:e9:2a:e3:fc:43:22:ac:c3:5f:
f6:d5:a6:f0:45:0e:c5:1d:e2:20:76:fa:f4:7c:ea:fc:68:62:
43:b3:93:11:e5:fe:8b:c2:6e:be:a6:0a:12:67:cb:1b:fd:a7:
7f:5f:bd:eb:5b:0b:46:7f:04:e3:4e:35:bd:fe:b7:1c:0b:5c:
09:0c:5b:33:ae:9e:ad:03:16:b6:61:f4:a8:78:76:07:b1:4e:
79:0f:f8:f9:ec:2a:7b:86:2f:f4:98:ff:51:df:61:f3:ed:12:
5c:6e:27:47:ec:d4:2c:33:59:07:7a:0a:98:42:dc:1d:f8:77:
36:ed:59:96:96:d8:55:eb:64:06:19:ef:e8:41:96:1c:b7:ef:
eb:d6:90:e3:9d:be:bc:a9:f3:f3:df:34:f6:a9:f9:6f:d9:10:
12:51:33:54:c8:60:2c:2a:de:22:a1:74:79:ad:1a:0c:09:1f:
82:9d:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:08 2024 by rpki-client on console-ams.rpki-client.org