Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/rasdn_V5Nz8ouBfWQbGS72VLLRw.roa
File: rasdn_V5Nz8ouBfWQbGS72VLLRw.roa (raw, json)
Hash identifier: vu/CBfpyfNozUUhwWPVNQu2uKKk65E+2fzuaEt64a3s=
Subject key identifier: AD:AB:1D:9F:F5:79:37:3F:28:B8:17:D6:41:B1:92:EF:65:4B:2D:1C
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 0186E552B0ED3DFA95BD94C1B3C1A0DD238E
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/rasdn_V5Nz8ouBfWQbGS72VLLRw.roa
Signing time: Wed 15 Mar 2023 12:50:47 +0000
ROA not before: Wed 15 Mar 2023 12:50:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212616
IP address blocks: 212.46.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:52:b0:ed:3d:fa:95:bd:94:c1:b3:c1:a0:dd:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Mar 15 12:50:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adab1d9ff579373f28b817d641b192ef654b2d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:9c:6e:91:bf:c1:23:1b:35:c6:13:fd:da:
f9:3f:56:5b:40:b8:c8:a9:31:25:ef:b2:af:81:5a:
7a:3e:4b:03:9a:0e:1a:af:bd:ca:87:47:27:e8:27:
f8:b6:fa:02:da:38:8e:0a:b0:b1:da:de:55:e0:b4:
1a:2d:fa:40:3e:79:d1:07:d2:c2:00:81:2c:93:b8:
99:9a:30:9f:ad:93:c7:ee:37:69:1d:70:24:df:48:
72:fc:20:6c:1e:35:cf:70:ec:09:2b:05:dd:ce:97:
b9:37:19:54:b4:66:f3:c9:2d:38:98:c0:47:70:ff:
f7:f1:da:1c:24:78:48:f1:8b:be:99:5b:ad:3e:0f:
fe:47:bd:97:7f:49:82:af:bf:cc:7c:d8:f0:e8:39:
67:5a:3a:4c:e4:02:97:fd:21:79:57:3b:b9:c6:ca:
3a:fa:4d:aa:aa:cf:8d:25:11:f5:a8:33:8e:6b:c4:
ea:4f:47:1b:00:0e:4e:ed:a2:98:4b:0d:3f:5d:46:
a4:7b:2d:0e:68:16:02:ba:4e:43:9d:c8:a8:80:16:
b6:bb:84:2b:6c:81:89:0e:19:75:a2:99:05:81:e9:
a1:d2:ec:b0:f6:77:ef:ff:78:a9:5f:9e:ca:cf:26:
0c:32:75:0c:0a:4e:b7:dc:cf:5b:6f:a1:ca:17:e9:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AB:1D:9F:F5:79:37:3F:28:B8:17:D6:41:B1:92:EF:65:4B:2D:1C
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/rasdn_V5Nz8ouBfWQbGS72VLLRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.40.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:68:a3:98:4e:45:df:8f:1f:e5:01:98:80:b4:32:e3:3e:8c:
c7:3a:af:20:b0:21:d7:87:fa:80:9f:8f:5d:8e:82:82:92:e2:
fb:19:7e:45:9b:34:8a:ed:8e:ca:8a:b7:f7:53:8d:69:ce:23:
06:cc:48:ac:1f:23:63:7a:3d:da:ae:4d:9a:b4:2f:3f:83:1b:
90:98:eb:5a:50:48:3e:00:5a:d9:f3:f7:3e:48:01:a1:72:15:
9b:57:67:f3:42:60:7f:3e:94:3f:75:c1:46:c5:50:61:ee:2f:
65:1b:8f:d1:0d:46:8c:8b:b5:b9:fa:3b:ef:62:d8:df:f3:dc:
5d:12:0a:c6:72:e1:3f:89:79:09:7d:e1:8d:6e:8b:0a:97:25:
98:38:04:74:5a:a5:4b:9a:e6:ee:71:c0:a2:4e:73:21:bf:5f:
eb:b5:21:3d:b6:46:2b:4f:d7:12:fd:14:45:a1:15:10:d7:5c:
20:00:47:37:97:d4:c0:a7:d0:23:e1:53:d3:38:09:de:64:fa:
74:c9:6e:71:66:cf:33:3b:03:81:50:e3:7d:97:1c:4f:75:86:
ce:52:fd:b3:fe:73:f2:17:78:e4:e4:8f:e6:18:4f:41:a0:49:
49:65:a2:3e:bd:33:a2:7a:c1:b5:0b:33:b2:05:40:a1:ad:0d:
c8:65:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:11 2024 by rpki-client on console-ams.rpki-client.org