Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/eLZUjg2GINwZukGC6_SjmRNn8mY.roa
File: eLZUjg2GINwZukGC6_SjmRNn8mY.roa (raw, json)
Hash identifier: NY4fAz7uJlYByAgKaFtRwxuSP8RExapp7jCT+lUvBOU=
Subject key identifier: 78:B6:54:8E:0D:86:20:DC:19:BA:41:82:EB:F4:A3:99:13:67:F2:66
Certificate issuer: /CN=d8147428a2288531b877320e110892a275cc1263
Certificate serial: 01856D8ADB90257295BC20345A8672C84D77
Authority key identifier: D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/eLZUjg2GINwZukGC6_SjmRNn8mY.roa
Signing time: Sun 01 Jan 2023 13:34:54 +0000
ROA not before: Sun 01 Jan 2023 13:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212169
IP address blocks: 212.23.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:db:90:25:72:95:bc:20:34:5a:86:72:c8:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8147428a2288531b877320e110892a275cc1263
Validity
Not Before: Jan 1 13:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b6548e0d8620dc19ba4182ebf4a3991367f266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:a2:c0:99:47:94:e7:91:b2:9f:55:42:da:
e5:d8:9e:e0:e4:b8:2b:9f:c6:4c:c5:d6:8e:40:ae:
29:43:1d:e2:8f:d1:63:31:30:c2:ec:6e:96:5f:84:
5e:01:ad:6d:ac:7d:54:1a:86:b4:36:6c:ed:33:33:
7e:10:22:34:0f:a2:16:f9:47:8f:07:b0:11:8e:3b:
c1:65:ba:9e:cf:f4:1e:3c:9f:31:19:d4:44:7d:fa:
b3:1e:b7:17:2e:be:68:72:c9:d1:6b:4e:d8:97:0f:
db:eb:99:b3:fc:e6:c9:8d:7f:35:35:39:de:b3:79:
ea:d6:d5:92:f2:e1:07:da:56:63:54:d8:92:09:bd:
4e:0e:14:a4:43:b6:31:8f:fa:3b:1d:e5:38:86:75:
38:c5:57:f4:7e:2d:50:08:56:1a:a9:2d:b8:a4:7d:
7a:6a:6a:e8:fc:51:87:41:a9:3e:40:dd:68:b4:1c:
ac:e6:c2:25:b6:aa:3f:84:10:79:fc:23:cb:65:1e:
4f:85:82:f5:b3:94:8d:54:3b:80:a1:97:cb:2a:10:
b6:ee:bc:f9:58:29:a3:f6:9a:d5:9f:c6:a9:97:96:
b6:35:4a:cb:b4:f2:ca:75:36:d0:78:06:78:be:79:
ff:5f:f2:4a:8e:3c:1a:47:28:6a:ff:4f:08:cb:45:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:54:8E:0D:86:20:DC:19:BA:41:82:EB:F4:A3:99:13:67:F2:66
X509v3 Authority Key Identifier:
keyid:D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/eLZUjg2GINwZukGC6_SjmRNn8mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:58:18:3c:fe:50:ab:29:64:e1:52:fe:10:a0:35:ab:93:9a:
f4:e7:06:61:03:fb:40:d5:14:07:94:89:0f:fb:cd:fb:de:d9:
e9:b2:26:a8:2f:38:58:36:63:05:df:55:01:b9:eb:ba:d7:04:
23:2d:ac:ff:74:83:34:b4:ac:88:59:d5:3d:a9:c1:1c:6c:35:
a2:34:cb:68:08:3a:c7:8f:dc:4c:83:b2:28:97:1a:c5:de:11:
7e:79:66:bb:f4:f9:4a:0f:ad:c9:af:d3:de:d7:59:2c:d0:10:
6c:54:83:b8:27:3a:70:22:c6:6b:89:46:7b:64:7a:45:92:7f:
b7:99:b0:01:7d:f4:9a:88:43:95:a2:6d:cd:53:a8:d2:02:86:
b3:3f:a5:68:3b:65:c7:65:04:63:0b:8d:59:aa:92:ef:36:df:
4c:87:81:22:86:27:04:6f:1c:67:85:ed:be:f3:cd:98:4e:e5:
5d:6a:fe:21:2a:d7:89:2b:7a:e9:c8:dc:fb:27:92:cb:4f:06:
a3:6d:47:ba:ba:b7:84:8e:5c:9c:a4:0e:33:8f:f2:8f:5c:d8:
ba:21:2e:8a:c0:6d:a7:6a:46:55:33:f2:5f:c4:da:11:eb:ec:
e6:57:a8:ce:89:d8:45:a0:0c:4c:7f:fe:0f:57:e0:9e:38:38:
3f:f7:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:05 2024 by rpki-client on console-fra.rpki-client.org