Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/fG4BzuQ-vPuCdVPZyYtUOSfya6I.roa
File: fG4BzuQ-vPuCdVPZyYtUOSfya6I.roa (raw, json)
Hash identifier: Rlz46l3iz+76ZkrI593O4+By32InJRrMSUtEYHREVAY=
Subject key identifier: 7C:6E:01:CE:E4:3E:BC:FB:82:75:53:D9:C9:8B:54:39:27:F2:6B:A2
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C9822403732E02326707893801B6
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/fG4BzuQ-vPuCdVPZyYtUOSfya6I.roa
Signing time: Sun 01 Jan 2023 15:44:48 +0000
ROA not before: Sun 01 Jan 2023 15:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43844
IP address blocks: 212.25.130.0/23 maxlen: 24
212.25.144.0/21 maxlen: 21
212.25.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c9:82:24:03:73:2e:02:32:67:07:89:38:01:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c6e01cee43ebcfb827553d9c98b543927f26ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:8a:1c:31:aa:5b:8e:7f:d1:8c:6d:5a:5d:
96:5c:46:7c:e8:1d:d2:4d:11:44:03:a1:f7:2b:45:
91:a2:db:5b:3f:97:33:ba:24:d1:79:20:b3:d0:bf:
88:87:1c:cd:3b:ff:75:c1:42:7d:6b:f6:7c:51:6c:
5f:47:ff:b8:5a:f8:78:d7:b5:7b:d4:7c:a3:40:2c:
76:00:7c:4e:b1:85:ff:4f:e9:33:7f:dd:eb:9a:6f:
72:61:63:cf:85:db:2f:3e:4b:79:95:e9:ce:34:f0:
d9:53:40:71:d6:45:89:cc:ce:35:e1:14:88:3b:61:
a4:21:df:20:82:e6:94:64:5e:ec:b4:f6:69:0b:c5:
47:58:f1:8c:40:b2:5a:fd:15:97:c5:ee:ad:64:1c:
22:90:0a:bb:96:c6:f9:e3:4d:47:74:84:4f:20:25:
34:ee:2b:51:ac:5e:a5:4c:73:ff:4b:99:e8:ed:aa:
1b:55:0f:0f:ac:9f:dc:fa:60:df:c3:98:98:21:e5:
8c:55:d1:97:6d:67:51:8f:e9:2f:fe:a6:97:0a:92:
52:6d:e7:a9:c6:cb:25:60:da:9c:05:c5:49:8b:0b:
a5:f8:48:2a:2a:51:f1:11:d6:10:12:0f:7b:b3:91:
1e:dc:0b:95:8d:2a:c0:30:96:08:0e:c9:34:ef:c2:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:01:CE:E4:3E:BC:FB:82:75:53:D9:C9:8B:54:39:27:F2:6B:A2
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/fG4BzuQ-vPuCdVPZyYtUOSfya6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.25.130.0/23
212.25.144.0-212.25.155.255
Signature Algorithm: sha256WithRSAEncryption
bc:9a:95:5d:0d:75:80:bc:d1:1c:7a:58:c5:75:50:ef:51:f4:
36:42:3d:c7:c1:a9:e8:7d:5d:31:67:77:96:cf:de:e6:ce:ba:
b3:fa:e9:4f:a8:20:f3:f9:9d:a8:ee:6d:cd:55:a6:17:86:c0:
0e:79:f6:42:21:08:10:21:81:4c:8b:6d:f3:df:d6:0a:83:24:
9b:7c:c0:c1:65:1c:ab:be:1d:6a:87:20:4d:fe:67:d6:a5:cb:
15:e5:9f:37:45:55:49:39:aa:de:33:05:63:e7:bf:ee:cb:80:
a4:4e:5d:0f:77:21:a5:6e:ca:6a:fd:3d:6e:57:54:b7:ec:41:
e4:86:f3:df:f8:11:be:0a:8e:2c:75:28:9c:58:18:bc:49:65:
be:af:7b:18:8f:9b:6b:54:04:de:ec:c0:53:4d:2b:57:0e:08:
41:e4:35:bf:a1:d0:2e:a9:e7:37:d4:51:b9:4e:2b:f7:71:85:
dd:b8:d9:b1:79:21:b0:27:b2:4a:74:04:da:17:51:ff:d3:6f:
b4:18:e7:c4:06:b7:95:27:83:e5:79:f8:94:64:e5:35:6f:f4:
8b:b1:38:a4:59:d2:b7:03:f6:41:39:da:2e:47:7f:6d:78:0e:
75:6e:63:af:6f:bb:95:26:a4:f9:a8:7f:18:0d:1b:18:8a:84:
62:da:31:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:10 2024 by rpki-client on console-fra.rpki-client.org