Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/nEAjGRPmYWmy_3QxHuAaotO7Z9A.roa
File: nEAjGRPmYWmy_3QxHuAaotO7Z9A.roa (raw, json)
Hash identifier: rBSTAG2GXRusebElk/muPXcwgjaOX3oR7LF/pf55n2s=
Subject key identifier: 9C:40:23:19:13:E6:61:69:B2:FF:74:31:1E:E0:1A:A2:D3:BB:67:D0
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 01856CAF46C7194D71ABF86A3D7CD9A9F1F8
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/nEAjGRPmYWmy_3QxHuAaotO7Z9A.roa
Signing time: Sun 01 Jan 2023 09:35:04 +0000
ROA not before: Sun 01 Jan 2023 09:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207246
IP address blocks: 212.28.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:46:c7:19:4d:71:ab:f8:6a:3d:7c:d9:a9:f1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 09:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c40231913e66169b2ff74311ee01aa2d3bb67d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:af:0b:e9:56:6e:2d:1e:fc:5e:74:42:c7:
16:6d:c4:2c:c1:82:d0:c9:ec:c8:30:ee:b7:91:fe:
52:04:07:3d:7d:5a:0c:89:1f:98:74:57:a2:93:f6:
fb:2b:c6:b7:71:fa:89:30:5a:a6:b2:14:55:cf:43:
ae:12:70:19:c1:34:d3:65:25:fc:b4:34:b7:6f:84:
07:11:e8:50:22:fe:68:36:02:a3:c6:f0:22:be:fc:
8c:33:2c:89:b1:de:60:12:bd:72:51:42:bc:91:44:
ef:6a:c5:09:4a:5f:09:ee:06:4e:96:79:e4:c4:52:
59:18:9a:21:4f:79:36:b7:41:86:ad:8a:67:c2:c6:
3e:6b:9d:59:db:3b:95:de:34:10:50:9d:c8:62:f2:
3b:ba:9d:58:27:23:57:32:23:fe:fc:a3:86:f6:c0:
be:be:9d:74:cb:a5:f2:3a:ba:0d:04:d1:53:d9:a3:
ed:a4:0c:14:f0:e2:0e:a1:e0:35:81:39:50:17:ee:
eb:ce:d0:ca:4c:09:59:71:34:29:42:6f:8b:3e:7e:
c1:88:cc:16:46:0e:97:59:b0:66:c4:60:f3:74:92:
ee:33:e8:25:c1:a5:93:9a:4e:92:3c:ea:95:ca:95:
d4:c5:83:ac:76:c5:b6:06:a2:39:0b:19:e3:0d:4c:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:23:19:13:E6:61:69:B2:FF:74:31:1E:E0:1A:A2:D3:BB:67:D0
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/nEAjGRPmYWmy_3QxHuAaotO7Z9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bb:45:34:47:36:0e:85:8e:66:39:e4:4a:cb:f1:be:23:12:
11:7e:b6:65:b1:62:1f:00:2c:8d:c7:aa:32:f7:81:15:3a:1e:
1d:77:a9:df:6b:c3:13:9f:d8:d7:42:d8:bf:14:5a:96:f1:c4:
87:9e:0c:7a:89:bb:4b:28:e7:cf:1d:70:c4:80:a5:2d:ae:5f:
b3:18:ef:98:b0:0a:31:31:6b:46:6c:c4:79:44:74:3b:05:9d:
fc:f2:67:f3:24:68:1f:22:de:2e:04:f7:5f:46:59:77:bd:bd:
01:16:63:a1:62:44:cc:32:a5:33:4c:58:18:9a:28:e6:cc:99:
da:4b:56:1f:b0:ba:f1:2a:e4:ff:80:9e:05:c4:7f:98:a3:ce:
b3:1c:8a:f9:ce:8a:7f:a7:54:bb:2b:48:fd:7f:51:5a:cc:eb:
52:58:1a:f0:0d:28:ca:d6:02:64:87:b8:29:57:39:f6:ab:8a:
de:b2:69:b1:d6:b8:a9:9a:a4:84:16:37:a6:68:68:c6:19:9c:
a5:dd:76:04:61:98:17:8b:4c:d4:d3:9c:19:44:2d:2d:fd:01:
a0:d7:d1:a7:f9:82:37:3b:eb:a9:7f:ee:28:9b:c2:ed:20:e4:
0e:ef:52:bf:24:aa:c1:14:16:c7:3a:9c:50:57:8e:c0:46:c1:
be:3b:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:41 2024 by rpki-client on console-fra.rpki-client.org