Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_fhCbya8FgyIHFtopP4GdgL_m-c.roa
File: _fhCbya8FgyIHFtopP4GdgL_m-c.roa (raw, json)
Hash identifier: M8yHCkYC2YclZAQe36tnhrUXPdFrmp3IB4EypAg0gfg=
Subject key identifier: FD:F8:42:6F:26:BC:16:0C:88:1C:5B:68:A4:FE:06:76:02:FF:9B:E7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C168E6C75C48EB4958248318A9726CB36
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_fhCbya8FgyIHFtopP4GdgL_m-c.roa
Signing time: Tue 28 Nov 2023 15:31:21 +0000
ROA not before: Tue 28 Nov 2023 15:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216082
IP address blocks: 212.68.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:8e:6c:75:c4:8e:b4:95:82:48:31:8a:97:26:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 28 15:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf8426f26bc160c881c5b68a4fe067602ff9be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:dd:19:d4:ba:04:74:f0:c0:70:e9:77:2d:
6e:04:c0:f9:91:1d:ff:57:36:80:27:0c:d4:61:d7:
27:80:a2:1e:05:37:7a:0e:af:d4:83:33:79:1b:04:
23:1c:94:f3:f5:74:08:51:26:19:73:29:fc:20:a6:
b6:50:9b:da:16:63:f3:08:10:85:f5:a6:29:ce:fa:
ce:79:ed:c8:88:3c:d4:f4:a1:45:bb:b6:cd:f7:87:
88:05:e9:b2:9d:72:1e:b3:94:fb:59:31:ff:50:10:
b3:4c:3b:de:0f:34:2a:bf:92:85:b3:55:d4:63:11:
57:cc:d3:fc:dc:16:96:e3:4f:4c:ad:d7:98:38:c2:
fb:37:8f:03:4f:17:23:7c:0a:0d:47:0f:24:7f:4d:
06:d7:e6:2c:58:21:f0:77:a0:4d:c1:43:2a:57:08:
70:43:f5:b9:44:19:fa:b9:a5:ec:ff:98:54:3d:81:
7d:da:c3:eb:65:3e:cb:07:bd:92:d8:a1:f0:06:89:
38:dc:c2:f3:d9:2c:a9:7b:bb:7d:b6:bd:8e:a2:55:
1e:59:1a:fe:b3:e2:09:8c:4b:e8:7b:1b:d6:d5:38:
f8:9e:26:0d:56:3b:b0:90:0f:2f:84:c6:14:0f:29:
1e:ef:f5:94:70:48:f6:b1:ed:6c:27:f0:77:23:d3:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:42:6F:26:BC:16:0C:88:1C:5B:68:A4:FE:06:76:02:FF:9B:E7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_fhCbya8FgyIHFtopP4GdgL_m-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e7:2b:d9:ba:39:3c:1d:a1:2e:6e:5b:90:04:f1:12:b9:6b:
41:ea:cc:f6:7b:5c:06:1d:82:03:76:0c:65:24:5b:ca:b6:60:
bc:4c:83:2c:cc:37:91:1b:a9:4e:31:59:f1:ee:3c:7d:c8:98:
62:80:7b:bb:f2:01:e7:34:e6:83:f1:ac:f4:c0:e6:b2:f7:fd:
de:3d:bf:6c:a6:04:80:aa:40:4e:4f:06:56:73:04:3d:f7:a8:
b1:8b:65:27:19:05:9e:06:41:36:60:12:22:85:d6:bb:93:0d:
00:ac:1e:6a:17:81:3c:86:06:ea:67:a3:f5:02:e7:a1:e1:6a:
b4:cf:fb:d6:46:2d:14:2b:53:08:4f:c2:11:ff:20:13:f6:b8:
6d:3d:81:ef:ca:13:04:be:5f:8a:49:bf:ed:ee:5b:35:81:ce:
d3:73:cf:1e:15:3d:5c:38:54:52:02:6b:91:e2:a2:c4:8a:fc:
4f:a9:89:0b:c1:ea:3e:fc:16:f7:a2:8c:ad:6a:44:44:6d:51:
94:3d:a8:1d:56:b2:f9:d8:e0:5b:b9:7d:5a:de:f3:bb:fd:f2:
8b:ba:9e:50:3a:24:31:b6:bd:81:06:b1:aa:47:fa:c6:54:fa:
24:38:82:d2:1a:1e:f2:f9:73:68:73:e6:93:1d:38:24:7d:33:
15:e5:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org