Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1uZ_5aCTNMzkRUA5qw4VbVzHmNo.roa
File: 1uZ_5aCTNMzkRUA5qw4VbVzHmNo.roa (raw, json)
Hash identifier: UEPp9GuLHpFFB+Kr6NxUIadzydw7Av9ruROniyaNP2U=
Subject key identifier: D6:E6:7F:E5:A0:93:34:CC:E4:45:40:39:AB:0E:15:6D:5C:C7:98:DA
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01924C7C527A38DD227BB228096F3E3534E0
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1uZ_5aCTNMzkRUA5qw4VbVzHmNo.roa
Signing time: Wed 02 Oct 2024 09:07:48 +0000
ROA not before: Wed 02 Oct 2024 09:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214107
IP address blocks: 212.232.18.0/24 maxlen: 24
2a14:6780:2::/48 maxlen: 48
2a14:6780:ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Oct 2024 08:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:7c:52:7a:38:dd:22:7b:b2:28:09:6f:3e:35:34:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 2 09:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6e67fe5a09334cce4454039ab0e156d5cc798da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:82:3d:3c:4e:80:9d:bd:80:09:09:41:f4:
75:fb:62:7d:23:a1:fa:cf:6d:41:d5:51:ef:92:91:
d1:ca:60:01:73:95:5b:0e:3a:18:11:10:9e:32:2e:
04:5d:a2:01:6b:06:b4:71:8f:57:49:29:93:ca:04:
e2:15:92:bf:af:07:e5:8b:cd:0e:5d:f6:8c:dd:6f:
42:a3:4a:70:8a:c5:29:46:06:de:49:50:80:bc:03:
a9:ad:ec:6b:27:0f:68:55:f8:f3:09:bd:b9:68:79:
b9:01:67:1f:71:c9:77:c5:c1:86:30:ed:0a:3e:10:
3c:9f:22:10:5f:79:db:c3:86:91:1c:30:28:7e:d0:
3f:23:54:d1:be:74:d3:67:75:60:2e:bf:9d:15:b7:
de:1e:c2:89:78:34:3f:11:90:5e:b1:aa:71:61:e4:
c2:a6:e0:24:3f:52:2f:a7:1f:2f:1c:1d:8e:3e:7c:
26:35:2e:90:1b:44:81:6a:94:ac:e4:2d:b5:32:77:
5d:01:ff:a3:ef:10:69:4c:11:dd:71:df:ac:03:3b:
e1:7d:25:aa:a5:47:19:10:53:e1:ce:6c:c4:47:1e:
40:9e:96:0f:70:3b:50:6b:ba:53:d7:48:0c:37:e0:
3e:09:ae:af:fd:be:03:29:70:92:e4:65:26:24:d2:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E6:7F:E5:A0:93:34:CC:E4:45:40:39:AB:0E:15:6D:5C:C7:98:DA
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1uZ_5aCTNMzkRUA5qw4VbVzHmNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.232.18.0/24
IPv6:
2a14:6780:2::/48
2a14:6780:ca::/48
Signature Algorithm: sha256WithRSAEncryption
80:39:6d:31:b6:2a:a7:2c:5d:1a:01:a0:8e:df:ca:ab:48:68:
33:e9:82:2f:be:bf:3f:e2:57:78:dd:f7:2a:17:e6:35:a9:43:
f6:32:ce:0e:fd:2d:b8:81:89:be:f9:9f:da:3f:dd:f1:a2:6e:
28:c1:4d:56:c3:23:cf:25:78:20:03:ed:e0:ad:11:02:80:b5:
a4:e0:08:26:8a:d8:9a:ed:5c:27:71:f5:b1:2d:0d:9e:96:a3:
cb:30:95:5c:41:fd:3a:59:01:d1:1e:b8:38:70:0d:31:c7:41:
05:c4:5b:08:8f:93:49:2b:19:be:31:e2:43:eb:ab:24:c4:28:
bb:0f:5e:c9:32:28:b1:fb:86:35:8a:1d:52:fe:0e:df:2f:be:
58:36:79:85:07:9b:aa:e0:32:00:82:3e:c2:47:c3:c7:2f:ee:
df:0b:bd:b6:14:b2:84:77:85:78:26:42:dc:12:34:1a:bb:94:
37:8c:59:f2:ae:99:9f:b6:6e:e7:2e:d6:d6:29:9d:a5:27:44:
2b:7a:fe:0c:5b:48:e9:6b:60:a8:da:96:40:be:43:0a:c1:ca:
b2:51:29:4f:0b:85:df:8c:eb:ad:9f:fe:29:55:02:3a:f2:e3:
ca:92:39:e7:27:8c:69:83:32:1a:bd:48:94:85:82:85:7f:5f:
b5:6f:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 09:59:51 2024 by rpki-client on console-ams.rpki-client.org