Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/x-Ng1-RyBH3Ov1Fl83TXz_2ManE.roa
File: x-Ng1-RyBH3Ov1Fl83TXz_2ManE.roa (raw, json)
Hash identifier: i3dw0wRZ7nKhUL7Lw7ikq3Zy5eYLl15na49lvubT/qA=
Subject key identifier: C7:E3:60:D7:E4:72:04:7D:CE:BF:51:65:F3:74:D7:CF:FD:8C:6A:71
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DE9A6F110D427F7C1A228CEC9C005D1C5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/x-Ng1-RyBH3Ov1Fl83TXz_2ManE.roa
Signing time: Tue 27 Feb 2024 08:20:48 +0000
ROA not before: Tue 27 Feb 2024 08:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 212.16.87.0/24 maxlen: 24
212.80.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 08:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:a6:f1:10:d4:27:f7:c1:a2:28:ce:c9:c0:05:d1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 27 08:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7e360d7e472047dcebf5165f374d7cffd8c6a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:b8:6b:24:50:b9:19:68:7f:af:bf:c3:30:
37:7d:25:ff:d8:d9:96:c1:74:f4:2d:bf:b5:7a:bb:
9b:42:9e:2a:4f:1d:30:50:2a:0a:b7:83:ec:38:e7:
7f:25:b0:d2:95:c2:b3:84:9b:8b:b8:17:3e:23:4a:
cf:e4:0f:73:36:b4:f5:01:0a:07:eb:3b:c9:41:ae:
fe:60:f8:fd:98:3f:1c:5e:c2:0a:53:42:f5:a3:c0:
04:09:96:35:6b:b3:c1:52:4b:66:f9:4c:cd:97:ae:
08:b6:39:a3:91:13:a8:1d:90:f4:66:29:b8:52:eb:
ca:96:6f:c0:07:ca:b0:5f:ae:f5:f1:bf:a7:9e:c6:
92:fa:d2:e8:a5:4a:66:b3:e9:3a:cf:5a:fb:35:8c:
1c:30:61:9a:22:62:47:8a:bd:0a:b9:86:08:c2:87:
eb:b7:d2:8c:0e:20:a6:2e:13:ac:48:8a:4d:b9:93:
5a:f2:3e:bc:ca:54:0e:d2:ca:c4:4b:63:c9:eb:10:
02:64:d7:fe:96:6f:90:65:88:93:d7:7e:47:fa:2a:
1c:93:0e:c6:0d:f1:e6:af:ca:8c:54:52:f3:84:18:
8e:16:8a:9f:50:71:a6:95:0e:8d:67:2c:86:7e:58:
53:e6:d0:48:81:51:26:a2:7d:70:74:c7:c0:1b:51:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:60:D7:E4:72:04:7D:CE:BF:51:65:F3:74:D7:CF:FD:8C:6A:71
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/x-Ng1-RyBH3Ov1Fl83TXz_2ManE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.87.0/24
212.80.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ab:d3:dc:2b:56:1b:0d:bb:a6:ab:52:ae:c1:1d:85:db:9e:
cf:2c:87:1a:97:00:4e:22:e4:7b:ea:d6:18:d5:0e:b2:70:0a:
cc:b7:a7:00:ef:d8:eb:94:2c:f4:22:50:20:bc:ac:3a:16:c8:
be:52:0f:79:e1:e9:ae:dd:06:cb:a4:ad:fe:0a:a7:46:ac:30:
04:16:c4:df:a1:b9:24:ea:d6:cd:60:ac:1a:73:7b:6f:bc:6b:
94:67:93:64:fe:ff:d4:27:01:37:aa:a8:28:a1:e0:ae:08:3e:
13:9b:3b:f9:6c:f2:78:aa:11:1c:5b:e9:45:fc:08:b6:e2:66:
06:a8:62:41:f6:9e:dc:ac:5e:4d:2c:82:1d:53:bb:fa:56:30:
17:51:44:8b:d1:1b:c1:01:0b:fd:2f:0b:b6:c9:e0:7f:75:63:
5a:7d:84:7d:49:24:97:d0:e6:df:96:1e:83:aa:6a:31:1b:59:
4f:96:42:ee:81:f3:05:4a:29:39:bb:9b:a3:06:b3:99:ab:42:
07:40:80:8a:0b:8a:80:a0:b1:e3:fe:63:04:63:af:4c:f0:8f:
c7:bc:29:b8:b8:a4:e9:2a:19:a2:a9:ef:a3:5a:1b:78:54:05:
b8:1e:2f:b2:1a:d7:30:f6:c9:fb:0b:99:a5:b9:57:bb:71:c4:
78:92:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org