Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/K0J0w_zChQ6x3gtNXP_j9suzL04.roa
File: K0J0w_zChQ6x3gtNXP_j9suzL04.roa (raw, json)
Hash identifier: PqEVsoKgAPAXm8GYTIRFor0jlwwcIx241Ez7wDAvVLY=
Subject key identifier: 2B:42:74:C3:FC:C2:85:0E:B1:DE:0B:4D:5C:FF:E3:F6:CB:B3:2F:4E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1DA8286F966DE7EA262888CFC4819
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/K0J0w_zChQ6x3gtNXP_j9suzL04.roa
Signing time: Sun 01 Jan 2023 14:34:58 +0000
ROA not before: Sun 01 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210240
IP address blocks: 212.22.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:da:82:86:f9:66:de:7e:a2:62:88:8c:fc:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b4274c3fcc2850eb1de0b4d5cffe3f6cbb32f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:b4:30:4c:e9:cf:0e:59:91:ca:64:58:fb:
d3:1e:7a:bd:12:6a:f9:e5:16:05:dc:d0:8f:29:34:
74:72:1b:eb:f4:97:78:53:38:fc:90:68:99:94:5c:
da:ae:70:69:05:dd:f1:40:f6:16:3d:39:9e:52:28:
b9:bf:44:65:18:6c:25:43:2f:16:41:c0:68:a9:09:
cd:e5:b4:28:2c:8f:1b:c1:49:f7:dd:10:2b:a6:4c:
4b:c6:fb:bf:7b:c8:7f:57:a2:f7:43:5a:ae:f8:28:
40:b1:12:86:94:6e:db:9c:a4:ac:5b:69:16:f4:48:
e6:c6:af:19:17:35:c3:8f:ff:24:ab:8e:5c:48:78:
75:27:83:e0:64:18:c7:7f:a5:3b:37:8b:92:2a:cd:
3e:3e:c1:aa:7b:e2:4f:eb:2b:16:f1:b8:f4:4d:29:
65:7d:76:f5:4c:8f:c3:a5:a5:86:97:90:4e:1b:d8:
ea:ab:03:4d:64:7a:eb:cf:d6:16:11:71:5e:71:5f:
1c:3d:eb:e1:e1:ee:1a:98:0d:c0:8b:77:e3:4e:9e:
9f:a2:26:fa:02:27:08:de:97:02:57:b1:5c:a3:cd:
dd:94:17:5d:76:a6:d4:b9:98:2f:22:46:23:3c:17:
b0:a9:ad:03:2d:76:93:5e:68:50:c5:c7:dc:7d:f8:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:74:C3:FC:C2:85:0E:B1:DE:0B:4D:5C:FF:E3:F6:CB:B3:2F:4E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/K0J0w_zChQ6x3gtNXP_j9suzL04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.74.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c5:bf:99:80:0c:23:21:9c:89:0e:4b:27:3f:2d:12:8b:5b:
a8:02:94:91:e9:8f:61:70:5e:c7:91:30:55:52:0a:9a:7b:c4:
d8:21:c6:33:05:d7:83:f0:71:f3:90:6c:f2:7c:06:4c:97:c3:
5c:3c:c7:1c:9d:27:e3:bd:bc:99:3a:d5:ea:7a:8c:4d:61:ec:
fa:a8:41:48:0a:67:e2:c9:a5:f3:34:60:1e:32:73:a7:3f:cc:
97:48:dd:9a:9b:09:36:b0:7c:3e:ed:cf:d1:70:96:59:d5:54:
fa:6f:09:5e:cd:63:01:38:b7:50:d1:48:a1:ff:8d:6c:ba:5b:
22:44:93:9f:62:08:72:4a:d8:9e:df:91:6a:9a:fc:a4:cf:b6:
90:1b:aa:7d:63:88:27:b6:12:33:c4:ca:62:af:99:30:0f:38:
7c:b3:03:bf:87:e6:1c:7f:19:77:b2:c2:a0:0a:3e:e3:17:79:
ae:4c:96:a8:5b:a5:d1:73:6d:47:03:9a:8c:cb:9c:e6:43:c5:
04:40:3c:68:ae:61:ce:d6:7b:97:d9:14:0d:1a:25:b6:e0:42:
25:0f:3e:b8:d1:bc:6f:f6:af:a4:54:28:d7:f3:d8:ec:dd:13:
d8:0d:94:fe:4d:f7:72:66:8d:b8:7c:97:c5:01:cb:84:1e:04:
9a:5e:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org