Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Z0oefKBy9h5Oqcvet5rBpESVd2o.roa
File: Z0oefKBy9h5Oqcvet5rBpESVd2o.roa (raw, json)
Hash identifier: JFFsbYXtPQGiORhDP6TgysM4weCBz2nD7zWVT36QZug=
Subject key identifier: 67:4A:1E:7C:A0:72:F6:1E:4E:A9:CB:DE:B7:9A:C1:A4:44:95:77:6A
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DBAF41A9578B40E924A4D173F9B12
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Z0oefKBy9h5Oqcvet5rBpESVd2o.roa
Signing time: Sun 01 Jan 2023 23:14:46 +0000
ROA not before: Sun 01 Jan 2023 23:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31307
IP address blocks: 212.252.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ba:f4:1a:95:78:b4:0e:92:4a:4d:17:3f:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=674a1e7ca072f61e4ea9cbdeb79ac1a44495776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:07:54:76:2d:40:30:20:6d:a1:e8:39:cd:
20:14:8a:ab:40:fb:f4:8e:4a:a5:0c:09:64:0a:92:
34:3f:71:0e:94:cd:13:d5:88:18:32:1f:fe:a6:3f:
c6:19:76:e4:6e:1f:ea:9f:56:95:90:6c:87:22:26:
ad:49:16:91:c3:bf:e8:8d:3e:ac:33:f7:13:e5:c7:
0b:fa:72:e2:45:be:24:d4:b1:81:87:f1:98:af:18:
b7:2d:39:9e:b6:9f:c4:15:a7:2c:68:48:1a:9a:22:
fe:c1:02:d8:89:f4:07:13:c1:6b:35:26:bd:f5:17:
03:e1:f7:f3:2d:fa:55:6a:3d:95:2b:66:d7:51:fa:
41:56:12:f2:dd:72:c8:03:cd:18:84:e1:84:b3:2e:
d5:ca:20:eb:dc:fa:fb:98:d0:85:a7:52:28:8b:2b:
eb:1e:03:df:2d:aa:ca:64:6b:22:e2:f8:9e:cb:a5:
95:33:29:45:f6:c7:6f:0a:31:b3:a6:62:82:f3:41:
d3:d1:89:54:8e:8d:f3:16:25:e8:94:74:4f:6a:4d:
63:b3:4a:74:8b:0e:f8:97:a0:58:e6:dc:03:64:b2:
d0:8c:c2:a1:7b:1a:1f:15:72:3e:cb:9b:74:78:f7:
f8:d8:de:48:04:d6:04:e6:cd:e5:8f:2b:00:b4:3d:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4A:1E:7C:A0:72:F6:1E:4E:A9:CB:DE:B7:9A:C1:A4:44:95:77:6A
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Z0oefKBy9h5Oqcvet5rBpESVd2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.196.0/24
Signature Algorithm: sha256WithRSAEncryption
61:db:4a:c9:78:20:f7:6f:5b:71:43:37:a7:96:15:86:a4:d6:
aa:2d:2f:57:48:5a:27:b9:ee:37:8b:c3:56:00:d3:f0:c9:67:
4f:15:2b:f7:e8:ca:fe:e9:c7:c9:df:e7:cb:2d:21:bb:61:cc:
f4:06:46:85:86:91:06:db:36:96:96:c7:bb:d7:72:f1:86:fa:
e5:3e:b7:38:ae:13:a1:ec:c8:26:46:4d:53:4a:c3:0f:d7:2f:
00:fd:8e:04:18:73:b8:e1:85:01:7c:b1:d5:1d:d3:89:ef:8a:
31:ed:24:86:86:f5:c9:46:2b:06:00:c7:a1:f7:cb:8f:eb:29:
22:c2:da:4f:38:ce:dc:58:57:20:bf:cf:c0:3e:31:00:52:01:
e7:7b:ab:b5:a8:91:56:bc:e5:06:3d:6e:91:dd:af:74:b1:70:
9f:c9:d5:80:65:06:bf:f3:6f:95:f6:8a:74:2b:0f:6d:71:3a:
49:41:8e:55:d2:63:33:48:fc:31:ac:b8:20:6f:be:2a:41:2a:
7a:53:3d:37:83:c4:12:15:79:fa:18:ad:60:25:93:8a:ac:a4:
a4:c6:73:e0:64:6b:94:b9:e3:a5:67:ab:67:aa:7a:43:b7:91:
a9:d4:f7:94:8a:d3:e8:be:79:96:98:cb:c3:71:e3:28:c2:8f:
78:0c:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org