Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_WA06ObrZXZ1mHcme0OZY-IvhMg.roa
File: _WA06ObrZXZ1mHcme0OZY-IvhMg.roa (raw, json)
Hash identifier: sAR2voEzT3eIPl9pfakK3KlSDgnNeXFOQr8vzONCYww=
Subject key identifier: FD:60:34:E8:E6:EB:65:76:75:98:77:26:7B:43:99:63:E2:2F:84:C8
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018572B43F1383B4BB0F1DA696A241040FDB
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_WA06ObrZXZ1mHcme0OZY-IvhMg.roa
Signing time: Mon 02 Jan 2023 13:38:13 +0000
ROA not before: Mon 02 Jan 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210591
IP address blocks: 212.70.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3f:13:83:b4:bb:0f:1d:a6:96:a2:41:04:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 2 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd6034e8e6eb6576759877267b439963e22f84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:47:7b:57:e8:66:a0:6d:69:c1:4a:f6:fa:
46:1d:88:f5:e6:c7:4f:ce:79:ef:b3:f5:32:14:70:
d7:b0:28:ae:38:dd:75:2b:8e:f0:31:a8:3b:40:34:
82:e1:4d:fb:6c:9b:0a:bc:ad:57:f4:dc:cd:df:db:
e4:9b:c6:02:fd:a8:70:27:ed:df:14:96:d0:dd:42:
c0:2a:d6:2b:b6:2b:e5:62:03:8b:b8:ab:aa:de:4f:
7b:27:24:af:f9:30:38:dd:32:1c:fb:8a:76:1b:9d:
04:60:30:63:7f:a8:9f:cd:d7:1d:df:84:83:57:0a:
c7:4d:bc:76:05:49:fc:5a:78:58:57:d7:48:30:98:
e1:8d:6c:6b:c7:8b:62:a5:ba:58:2c:4a:3c:10:3d:
de:c3:d2:3a:08:a4:05:b8:56:44:86:38:95:cf:a7:
f7:71:23:5d:12:bb:76:cf:fc:05:c9:8c:43:ab:e8:
c4:ca:9c:d7:9f:29:1e:27:34:e9:ae:c5:de:a9:d9:
6d:95:cc:80:9c:f3:da:17:01:ee:45:83:2c:f7:4e:
3a:cb:ab:b1:b9:30:35:6c:53:01:02:b1:f0:f6:81:
b9:75:ad:1a:71:97:c2:d5:eb:9b:9e:69:89:c5:52:
bd:b5:35:03:3b:a1:60:e5:d8:ec:5d:63:cb:d8:4f:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:34:E8:E6:EB:65:76:75:98:77:26:7B:43:99:63:E2:2F:84:C8
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_WA06ObrZXZ1mHcme0OZY-IvhMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cd:d6:7a:b5:4f:bd:d6:ea:c0:05:04:92:e1:1d:0b:ae:49:
2c:e2:17:71:24:1a:7d:c0:d6:1c:6f:1b:b4:97:0f:7c:49:45:
da:4c:82:4c:5f:ff:b4:94:ec:41:4a:81:1a:71:49:18:26:69:
84:2d:69:b3:6d:28:dc:bd:07:f8:46:51:bc:43:47:38:c4:02:
85:88:58:d4:0d:e3:86:92:2b:88:2a:68:fe:f1:32:c0:9b:1c:
99:d4:8d:aa:95:84:0b:45:97:7f:2f:e0:98:ed:34:c7:f9:e8:
2a:c3:27:c1:9a:97:15:c3:30:9f:10:54:51:b7:a3:a4:82:38:
11:a1:73:ee:5a:d0:81:84:d1:75:08:96:44:58:9f:fc:66:60:
77:bd:0f:78:bf:28:c9:3e:52:f6:4c:65:52:4f:26:50:9f:e3:
6a:e4:1c:59:01:1e:82:f3:d6:1d:37:52:52:9f:46:fe:c0:c3:
f6:6c:d3:2e:c7:42:c5:bc:6e:be:b0:9d:a4:94:6d:c1:29:19:
64:c3:19:d3:68:22:b4:f9:ed:0b:9b:ce:bc:b2:ec:6b:88:86:
ae:b1:4a:85:54:0d:ff:4d:7e:47:91:b7:16:8c:2f:7d:63:5f:
6b:2f:85:76:a9:b8:53:38:1e:67:a6:e5:85:8f:6c:c5:29:3c:
f3:45:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org