Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/a7XPiq-Ms3UiqxrcWnS0djqMYVw.roa
File: a7XPiq-Ms3UiqxrcWnS0djqMYVw.roa (raw, json)
Hash identifier: uNeQJXzpkKWAD1hVdrCQ0CAH3203UkunNi1QUjEYdX4=
Subject key identifier: 6B:B5:CF:8A:AF:8C:B3:75:22:AB:1A:DC:5A:74:B4:76:3A:8C:61:5C
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DBDEAD66AD4CA3AE8379E8F595DD8
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/a7XPiq-Ms3UiqxrcWnS0djqMYVw.roa
Signing time: Sun 01 Jan 2023 23:14:46 +0000
ROA not before: Sun 01 Jan 2023 23:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34684
IP address blocks: 212.252.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:bd:ea:d6:6a:d4:ca:3a:e8:37:9e:8f:59:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bb5cf8aaf8cb37522ab1adc5a74b4763a8c615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:4d:6d:df:ea:6a:67:5b:fd:54:a8:14:33:
b1:43:61:15:78:a5:31:07:12:d4:c9:f0:4b:f1:59:
1a:db:68:2b:bd:c8:dc:4e:87:8d:5e:d3:7b:f2:70:
73:4c:61:8c:7a:58:e6:e8:58:7e:e3:b6:3d:ee:38:
1c:f2:f9:69:ce:07:bf:d8:b6:a9:0e:8f:5d:d7:af:
c8:f5:f4:bd:e8:e7:e5:aa:1d:15:3c:c1:25:88:40:
22:f5:e7:58:a2:09:0d:be:3f:23:18:5a:b9:3c:dc:
04:c7:e7:7f:13:c8:ad:0d:45:00:5e:5c:29:87:72:
5f:fa:c6:2e:15:33:ea:c8:51:dd:a8:00:f1:22:db:
46:bc:3c:28:c2:55:b9:5c:0f:7a:94:3c:18:5a:2b:
48:18:3c:7c:fa:7f:5a:c2:b2:65:f0:fa:d6:e3:d6:
52:66:f6:7d:4e:1a:ff:06:d1:92:44:28:2c:34:3c:
4b:67:1a:fb:c6:54:41:5d:92:02:13:10:a9:86:61:
1b:86:b1:94:b0:59:e1:19:76:9a:7a:70:57:ce:2d:
70:5e:a3:db:67:4a:20:57:ee:fe:f8:19:4f:14:30:
33:7a:33:28:f0:fc:5c:de:97:4a:73:5b:f7:ad:b9:
5f:80:a5:6c:5e:ec:bf:60:b0:2e:0d:e8:ae:df:c4:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B5:CF:8A:AF:8C:B3:75:22:AB:1A:DC:5A:74:B4:76:3A:8C:61:5C
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/a7XPiq-Ms3UiqxrcWnS0djqMYVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.135.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4f:74:40:2d:65:8c:91:f7:a9:66:b6:a5:5d:37:45:46:c3:
9e:8c:39:f7:95:da:8d:e1:f0:69:3e:b9:87:21:41:cf:58:82:
14:46:5e:7e:a5:4e:4e:74:fb:28:a7:5b:54:19:36:3b:f3:05:
4b:0d:ce:85:93:8f:34:ca:3d:61:cb:4a:3f:27:b9:3c:28:6d:
1a:85:c1:8e:d4:dc:bb:f8:82:38:cc:2c:64:ba:ce:86:d1:a3:
37:30:a1:2a:c9:1f:e5:67:a0:97:1a:c6:cc:1b:9f:b6:f3:26:
f1:65:e9:5f:5d:73:d4:91:54:be:f8:fd:33:76:27:58:8a:ca:
af:e2:13:85:f4:de:f4:09:57:d2:c1:88:16:c6:ea:fe:c9:5a:
37:52:c7:9a:7c:34:63:ae:7a:61:ed:8a:c0:45:7a:fd:d8:8b:
24:03:17:93:4e:12:2d:79:96:31:77:fd:c8:77:59:5b:15:fd:
26:68:65:27:64:b8:a1:88:52:ac:2b:65:1c:b5:f6:10:3a:1d:
0c:99:b7:11:25:8f:c8:28:7c:ac:b3:e9:b8:ea:59:5d:59:89:
75:fc:77:00:83:aa:12:1f:81:dd:d8:40:3f:82:28:20:3f:8f:
bf:8c:47:ce:17:4d:3a:76:3b:d3:29:94:43:2c:46:48:56:23:
89:77:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org