Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/rb_6H1pZewxgZYHXCp-Z-7pRxr8.roa
File: rb_6H1pZewxgZYHXCp-Z-7pRxr8.roa (raw, json)
Hash identifier: 789ZLUJqgh4xfVLRo8twvTPSNc8DYivXy8/vjSKhlR8=
Subject key identifier: AD:BF:FA:1F:5A:59:7B:0C:60:65:81:D7:0A:9F:99:FB:BA:51:C6:BF
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018572B43CD020FBAA7B2667B45418C9A792
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/rb_6H1pZewxgZYHXCp-Z-7pRxr8.roa
Signing time: Mon 02 Jan 2023 13:38:12 +0000
ROA not before: Mon 02 Jan 2023 13:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206362
IP address blocks: 212.70.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3c:d0:20:fb:aa:7b:26:67:b4:54:18:c9:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 2 13:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adbffa1f5a597b0c606581d70a9f99fbba51c6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:ef:3c:f2:09:6f:ec:97:74:cf:4e:10:86:
be:a0:df:13:9a:da:1b:56:0c:42:ff:66:ea:32:29:
92:fe:26:70:00:e9:fe:2d:ee:0b:a1:c8:5d:52:c9:
d5:8b:4c:04:8d:bd:23:de:69:50:ef:fa:73:12:4b:
0e:d2:28:d8:d3:ba:d3:5a:ef:f3:ce:eb:ab:b8:c0:
fb:16:13:8e:33:68:40:9f:4e:41:c8:9b:bd:4d:cf:
bf:c2:47:c8:0f:31:77:69:58:fc:5b:13:c6:47:32:
d7:8f:ac:e9:ab:33:f8:95:c1:db:61:30:f0:2e:1f:
bd:8a:e0:7a:a7:64:80:6e:b6:3b:77:72:bd:55:5e:
e5:ed:32:2d:78:e7:88:3e:ce:ac:3f:ee:39:75:3d:
d9:b4:09:c5:d9:87:b0:a8:84:86:48:55:56:90:ff:
8b:1d:ff:78:f8:34:84:43:9b:39:85:9c:cd:7a:57:
34:ea:70:03:b5:d0:84:8e:04:50:fe:1a:a3:6c:aa:
fb:38:50:77:96:0a:44:7c:d3:d8:5e:c8:7d:25:d6:
88:c2:39:e7:32:dd:8f:45:6e:e2:f2:fb:75:78:dc:
f2:f4:9b:fd:b2:7d:fb:17:b2:de:3f:ef:91:8d:1a:
8e:d6:d3:9c:50:2e:d8:75:d3:ba:cf:80:85:e6:88:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:FA:1F:5A:59:7B:0C:60:65:81:D7:0A:9F:99:FB:BA:51:C6:BF
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/rb_6H1pZewxgZYHXCp-Z-7pRxr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.186.0/24
Signature Algorithm: sha256WithRSAEncryption
65:33:d6:dc:aa:55:de:e2:bf:65:1a:72:70:08:bb:59:7a:66:
cd:03:ac:a5:be:90:3e:2b:79:ea:74:89:ed:bc:e1:8a:33:81:
a6:00:3c:c6:e9:ee:cc:70:58:90:c7:61:3e:2e:33:37:9c:98:
d1:23:ce:bd:ac:c6:37:c2:8b:1d:60:e7:26:73:88:f7:87:d0:
4a:7b:3b:7e:14:8a:1b:58:cd:73:c0:08:7c:7f:9c:ed:82:9f:
89:2c:01:73:bf:d7:82:18:df:7c:51:87:37:c0:8f:71:85:11:
a5:fe:58:84:8b:7f:bf:aa:de:b0:b8:8e:08:c8:18:46:21:1e:
2f:eb:b7:40:60:5a:24:f5:f3:4e:80:6e:75:1d:c5:12:ae:0b:
ad:5a:6a:57:b0:34:15:60:42:82:8d:2a:c2:60:ff:7e:8e:49:
ef:9b:69:63:00:ea:df:b0:01:00:02:6f:7a:29:df:79:e9:d4:
f8:f2:31:d3:4f:69:7f:52:a4:1c:ea:2f:1a:ec:b8:3a:b0:6e:
0f:03:13:9e:e3:64:90:95:e0:66:2c:2a:15:c1:6c:6e:50:34:
40:9f:90:8d:5d:f2:8e:bb:49:83:6e:b6:a4:41:6b:2d:0d:0c:
45:14:b7:06:94:85:42:69:bd:cd:ab:c9:d4:cc:88:b9:20:e8:
51:97:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org