Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MhtENFM6IsZ3ZR8mM_1wYpXYmgE.roa
File: MhtENFM6IsZ3ZR8mM_1wYpXYmgE.roa (raw, json)
Hash identifier: xRgr3EWJ5sA51tjIskh1CyQUL49r7QTnBFO9Dg0qOQk=
Subject key identifier: 32:1B:44:34:53:3A:22:C6:77:65:1F:26:33:FD:70:62:95:D8:9A:01
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DAC16A64A44994AE58C3899DE196F8BF0
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MhtENFM6IsZ3ZR8mM_1wYpXYmgE.roa
Signing time: Thu 15 Feb 2024 09:26:21 +0000
ROA not before: Thu 15 Feb 2024 09:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36113
IP address blocks: 212.16.92.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 09:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:16:a6:4a:44:99:4a:e5:8c:38:99:de:19:6f:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 15 09:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321b4434533a22c677651f2633fd706295d89a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:5a:e3:48:ac:f9:ee:11:26:f3:5b:b6:a3:
30:eb:2a:0d:e6:4c:5a:d4:44:58:7e:6d:6c:cb:ba:
44:a4:b4:ac:74:95:0f:5d:73:3c:3b:6a:f4:45:a0:
ae:b9:45:60:5e:8e:7a:63:b5:65:14:78:54:8f:bc:
9f:4a:44:55:ce:c1:03:e7:9e:48:9e:4b:77:8f:9d:
0c:6a:81:4f:58:aa:2d:89:ba:d4:8c:0c:12:de:de:
b4:48:b7:ac:80:f8:cb:de:5f:a5:5f:dd:0a:5b:a6:
93:c5:9b:3b:3f:76:fa:80:40:55:81:7c:c5:27:0c:
ce:2f:06:2d:ba:9e:9a:d1:48:38:f9:c5:9e:87:61:
ae:84:c8:4a:c3:14:e1:4f:0c:11:51:92:2e:be:e9:
67:f7:6c:a4:07:df:25:bd:57:98:d7:55:95:5b:c8:
91:54:7b:33:1a:d0:f6:4d:24:fd:fc:55:92:11:9c:
ae:78:c7:41:52:36:30:6f:b3:93:25:03:34:9d:4c:
a1:d8:ea:5d:e8:f7:e5:ab:b3:9d:48:26:ae:4e:aa:
2c:57:24:b5:57:e6:01:ca:e4:94:77:b0:66:89:90:
01:9f:4d:19:00:ce:4f:be:61:4f:99:0f:f6:fb:7f:
3b:06:7e:6b:e7:37:a3:d1:57:e8:bc:c7:be:24:a6:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:44:34:53:3A:22:C6:77:65:1F:26:33:FD:70:62:95:D8:9A:01
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MhtENFM6IsZ3ZR8mM_1wYpXYmgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.92.0/24
212.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:92:03:b2:af:24:38:90:d4:1a:7f:6c:0b:71:1b:27:46:a1:
2a:cc:e5:95:39:6a:ed:77:a2:24:da:e5:db:00:6a:44:37:f6:
53:d8:06:ea:ef:d0:9c:9a:23:18:b2:6e:67:72:af:01:59:c1:
ae:08:08:db:6b:9d:74:42:26:7a:63:ac:7e:c5:5f:76:f8:51:
91:dd:77:b7:25:c2:17:c5:21:54:a7:5d:bf:3e:fb:09:c0:ab:
2a:6d:75:4a:56:92:d5:7c:27:f6:8c:3d:ba:15:7e:4c:73:3f:
2e:7b:4d:11:36:96:ed:d0:ae:2b:ce:94:c5:08:da:b7:12:33:
50:08:d3:3a:7c:da:af:6e:bf:90:9d:32:7c:75:e0:cd:07:6f:
5f:7c:91:a0:ea:bb:e6:41:9d:35:a6:36:c4:cf:67:05:64:d6:
65:81:b2:8c:f3:53:c0:be:27:99:ea:fc:b9:52:52:fb:ab:eb:
8c:a1:f1:25:67:de:85:00:e4:0f:b8:37:70:92:9d:ea:cd:1d:
f4:7c:4c:d4:1f:35:a2:d0:38:e7:15:1c:8f:78:58:7c:e4:e8:
21:07:5a:e0:37:31:b7:87:a4:f8:60:2a:42:80:8e:03:11:be:
23:66:26:25:d1:d5:1f:2f:ea:87:35:d5:25:ef:b0:4a:0d:5f:
4f:81:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 12:45:18 2024 by rpki-client on console-ams.rpki-client.org