Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dWD1YaPybxoA1DQsBYHIMru8BtU.roa
File: dWD1YaPybxoA1DQsBYHIMru8BtU.roa (raw, json)
Hash identifier: sRPs/iMR+ZebO4uendW2W3RuZ7dbSAI1lZnwNBuZQzs=
Subject key identifier: 75:60:F5:61:A3:F2:6F:1A:00:D4:34:2C:05:81:C8:32:BB:BC:06:D5
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1D40D04A4E5E97B0724C5A7777C2D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dWD1YaPybxoA1DQsBYHIMru8BtU.roa
Signing time: Sun 01 Jan 2023 14:34:57 +0000
ROA not before: Sun 01 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204102
IP address blocks: 212.22.67.0/24 maxlen: 24
212.22.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:d4:0d:04:a4:e5:e9:7b:07:24:c5:a7:77:7c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7560f561a3f26f1a00d4342c0581c832bbbc06d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:49:b7:ab:03:d8:dc:92:03:e3:82:00:3f:
dd:7b:81:21:32:36:7d:ab:db:c7:7d:60:3b:99:21:
9d:a9:9f:5e:0f:9b:49:90:31:1e:ee:a7:9a:1c:47:
ed:20:18:6f:c4:49:91:4c:cf:57:51:62:d2:d4:78:
04:f7:f4:74:87:bf:3d:3e:04:98:a2:cc:b6:45:e4:
56:da:49:63:26:a0:09:80:f8:49:82:b3:f0:16:64:
e0:bb:f9:00:49:b2:d5:96:09:a5:7a:77:0e:d4:48:
7d:39:7c:54:3a:62:73:2b:4e:52:41:5c:cd:14:ff:
90:79:6a:cf:3f:21:a2:bb:e9:c0:be:8a:0e:95:3b:
b8:c6:37:94:11:4f:09:ee:c1:99:26:6b:5d:77:4e:
76:fa:14:27:4a:99:81:4d:72:77:24:2f:3f:80:a5:
5c:c6:e2:b5:d5:87:da:f5:d3:17:ac:04:cf:47:a9:
a4:fb:97:e7:14:e2:e9:ac:f3:a1:a4:a9:2a:4a:8c:
da:b5:81:92:52:5c:ab:5b:5c:f3:70:15:20:d6:ef:
a8:85:0e:56:1d:88:2c:7d:dc:47:c3:18:95:3a:27:
9e:cd:2d:e3:eb:d0:e3:69:61:b3:eb:2f:3e:98:db:
43:0f:0a:bd:2c:8e:03:15:d8:b6:28:bb:e4:ca:d0:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:F5:61:A3:F2:6F:1A:00:D4:34:2C:05:81:C8:32:BB:BC:06:D5
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dWD1YaPybxoA1DQsBYHIMru8BtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.67.0/24
212.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
92:44:fe:6c:a2:6c:9c:02:08:fe:ac:3e:86:07:9e:86:74:2c:
f1:8d:85:c1:4e:57:f6:55:a8:2f:44:5b:c7:77:e0:33:58:b2:
0b:83:32:1a:21:36:e3:87:eb:d0:d7:46:06:f8:ad:a1:7f:b1:
89:23:96:a6:75:5d:cd:a6:01:b5:97:36:89:3f:d3:c6:1b:d6:
41:2d:21:0a:da:55:ad:43:cb:db:d1:9e:aa:4f:62:34:7a:66:
f1:f0:c9:e3:b2:fe:94:e1:5c:76:fc:c3:4b:3a:b9:33:2f:3b:
d6:92:26:c1:90:d1:ba:f3:53:c1:98:11:40:0e:5d:00:0e:07:
a8:55:7f:ad:a0:3e:78:c0:e3:09:c8:98:25:66:5f:63:4d:69:
d5:8c:5b:ca:df:9e:c7:df:dd:ca:f8:f1:3c:82:db:d2:70:90:
24:c3:32:ae:7d:39:7b:7c:a3:c1:74:c4:9d:c6:3e:a2:03:dc:
53:05:b2:8d:8f:04:8c:49:d8:ca:a8:b9:61:23:33:3f:64:a5:
5e:be:2a:cc:10:d7:30:e2:af:aa:df:b8:72:4d:9b:94:ca:d8:
a7:a7:5e:83:a2:9c:27:d2:00:39:ae:4b:87:89:91:f7:27:63:
63:ed:48:f3:aa:82:38:df:f2:5d:39:40:a1:2a:96:35:44:69:
18:82:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org