Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/h4E1f4Bl11pFTdxu4Z3wdwkN2KU.roa
File: h4E1f4Bl11pFTdxu4Z3wdwkN2KU.roa (raw, json)
Hash identifier: pMWQRLC5umlYH7tTXZubdZz04RX9HNi4PzzLDbsWrdg=
Subject key identifier: 87:81:35:7F:80:65:D7:5A:45:4D:DC:6E:E1:9D:F0:77:09:0D:D8:A5
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1CFF141EF2D873BE98B8BC183C7E2
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/h4E1f4Bl11pFTdxu4Z3wdwkN2KU.roa
Signing time: Sun 01 Jan 2023 14:34:56 +0000
ROA not before: Sun 01 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 212.22.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:cf:f1:41:ef:2d:87:3b:e9:8b:8b:c1:83:c7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8781357f8065d75a454ddc6ee19df077090dd8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:5d:48:eb:bd:94:c1:52:a1:46:d9:71:9c:
1a:a6:c7:e2:14:b5:5f:f5:6b:41:b5:f6:95:6a:9b:
9e:13:ec:ae:1f:e0:2a:f0:3a:4a:55:8c:50:3d:bf:
2d:c3:8e:a3:7a:5b:a3:3a:0b:27:bb:9b:b3:61:3b:
12:d4:10:8e:c2:d2:e5:3e:89:e2:8b:23:50:38:aa:
f4:6f:3d:d0:d8:f5:51:3c:59:4d:c6:df:00:e9:52:
33:e3:6a:43:21:49:b7:2e:c3:ff:86:3e:a2:ef:8c:
74:ea:fa:9f:cb:76:a5:4b:59:03:ce:67:ff:d8:4b:
c1:75:6c:49:ca:cc:c2:67:58:3a:52:e0:33:3d:e6:
89:b4:78:ba:2e:fb:63:36:fc:7f:43:a1:b3:b0:02:
63:a1:0f:9d:13:7c:4e:d9:1b:03:72:e5:fa:0e:15:
dc:68:a5:fe:d1:61:5a:c1:96:d4:27:f5:79:cc:cc:
79:c2:b8:c8:f1:89:5a:9e:3e:cd:d5:6e:ac:3a:39:
f7:85:30:62:51:b6:69:48:7a:5e:5a:66:19:d7:e3:
79:0f:b0:d4:b9:d0:4c:cc:30:56:f2:af:d4:f1:93:
16:7d:82:1e:82:94:37:a6:c7:d0:8e:ea:10:38:af:
d0:ad:9d:9c:b4:6b:53:b4:df:a3:b5:8f:81:a0:62:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:81:35:7F:80:65:D7:5A:45:4D:DC:6E:E1:9D:F0:77:09:0D:D8:A5
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/h4E1f4Bl11pFTdxu4Z3wdwkN2KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4b:10:51:68:a6:9c:4c:08:c6:90:3f:da:9a:17:0e:46:21:
a6:de:34:3a:48:82:d6:10:d9:86:07:d1:5f:ff:9e:e6:b6:29:
94:56:69:b6:ac:d7:f0:5e:6b:b4:ef:39:b7:a0:1a:b3:d8:dc:
7d:19:45:27:e9:2d:30:fc:51:a9:de:00:08:ec:e3:f5:1b:ba:
87:7c:38:37:02:5b:10:e7:40:63:46:4a:97:02:8a:59:3d:ca:
aa:97:53:cc:47:ce:6c:48:67:fe:aa:7a:dd:26:a9:b1:e5:35:
ea:c8:ec:6a:65:81:d2:f4:43:7c:79:2b:55:d2:75:fb:a9:bc:
cb:44:f9:37:83:be:91:cc:0e:80:63:0e:53:11:91:90:4a:75:
45:2c:e6:f5:64:13:12:91:7f:6b:d2:53:f2:f8:89:d8:3f:85:
67:d3:70:0a:ae:a0:20:ca:a8:85:b9:db:aa:3b:d5:7e:b7:f0:
f5:77:2f:2b:63:2d:1a:b4:67:5a:bc:e4:5b:58:e1:2c:ca:ad:
5c:9d:b5:f6:f2:9b:9a:bc:c2:e8:3f:a6:4b:5e:06:5f:04:19:
34:eb:1b:60:e2:61:03:13:ac:f1:f4:83:6b:06:06:07:a0:6e:
86:3d:d1:40:bd:2a:28:64:6b:5e:3b:f0:62:15:84:ab:5b:67:
ff:ea:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org