Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/J46bEypzhRlNAzJC11b_wa35l7U.roa
File: J46bEypzhRlNAzJC11b_wa35l7U.roa (raw, json)
Hash identifier: cYheKpyJWKGBAoiD/tEIl5AmsxzzUf2mqHabmfgpLvo=
Subject key identifier: 27:8E:9B:13:2A:73:85:19:4D:03:32:42:D7:56:FF:C1:AD:F9:97:B5
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 018572559C70F9713933BB3CA9A531848C79
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/J46bEypzhRlNAzJC11b_wa35l7U.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15851
IP address blocks: 212.127.64.0/19 maxlen: 19
213.231.192.0/18 maxlen: 18
2001:a48:8000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9c:70:f9:71:39:33:bb:3c:a9:a5:31:84:8c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278e9b132a7385194d033242d756ffc1adf997b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:b1:44:a2:9d:5b:0e:bf:4c:74:ba:5d:92:
f8:f9:06:67:9d:a4:6a:9b:2e:7a:63:d7:18:5e:9b:
a6:74:a9:ac:b5:13:2c:30:cc:0c:a3:8a:22:c7:24:
73:8d:da:47:3c:cf:fa:57:90:84:ee:85:ed:6e:7a:
31:9f:ed:eb:b3:3a:7e:b1:5e:d5:da:74:8e:f3:22:
cd:09:e8:f3:3b:60:e2:3f:61:69:cd:be:0d:96:f6:
86:e8:b3:c6:31:24:9c:21:94:fd:1e:08:72:9f:e3:
e2:da:48:c7:e5:4c:f7:46:8d:8f:e4:7c:ba:cd:46:
22:0f:86:7d:7b:b0:fa:5a:5d:50:cb:fd:f9:5b:4c:
92:85:d4:29:bf:03:15:cd:aa:1b:51:aa:7a:1b:cf:
55:d3:0f:02:ee:50:38:7e:20:e9:82:a8:88:14:2f:
27:3d:2d:2e:9f:53:5b:d8:86:77:ce:7b:77:47:63:
9f:e6:03:4a:f7:bb:e6:5a:5b:0b:d3:e4:77:84:f8:
9a:28:23:82:df:c9:a5:42:1b:4c:a5:f3:d5:ce:65:
c2:cc:57:42:25:20:22:72:5e:ce:e5:cf:6a:43:10:
0c:ef:03:85:9e:de:5a:9f:24:1f:d2:68:5f:13:42:
d2:38:d8:d2:b0:8a:22:9e:c0:55:a4:e7:9c:b9:3a:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:9B:13:2A:73:85:19:4D:03:32:42:D7:56:FF:C1:AD:F9:97:B5
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/J46bEypzhRlNAzJC11b_wa35l7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.64.0/19
213.231.192.0/18
IPv6:
2001:a48:8000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:34:ad:13:96:c8:91:ce:5e:0c:19:5e:a3:5c:26:fc:b0:6c:
d1:2d:2e:2d:a0:f7:b7:e2:33:de:63:64:14:5e:49:b3:e7:a9:
f2:b1:43:b5:be:55:52:2a:c2:5a:03:3e:ad:ba:d9:7d:de:7e:
c8:75:ca:6e:4d:55:5d:a8:8b:37:e8:f5:c9:46:28:4a:bf:0a:
90:9b:71:a0:72:ae:12:4d:8e:b3:06:8c:8c:14:90:b3:9a:37:
00:4b:76:01:a1:ad:5a:95:43:c5:01:94:26:f2:95:21:e4:d5:
a2:6b:f8:3c:67:25:16:db:e5:ba:5d:b7:06:4c:76:18:2d:60:
07:37:67:b9:2c:db:12:9b:a2:38:66:3b:e8:d2:a8:32:28:52:
ea:3b:7b:e0:a3:0c:30:19:3e:b4:eb:3e:9b:5c:89:e3:9a:01:
eb:f2:c5:4d:7a:00:26:d7:87:81:a1:3c:76:eb:e9:be:1d:d9:
9b:ab:ca:e1:47:64:4b:a0:62:39:fd:cf:cc:35:22:d3:38:fa:
7d:a9:cb:a7:62:29:58:dd:ac:46:6b:f4:7e:e5:b5:a2:19:84:
b2:87:ab:e8:d9:8c:57:01:ec:d0:fa:b5:f9:fd:b6:bf:a5:a8:
49:43:47:7a:ed:82:20:96:28:67:4b:37:87:36:ed:fb:d4:10:
be:f3:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:42 2024 by rpki-client on console-ams.rpki-client.org