Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/k1q4yUtH8nOkn-WoWyRwtIj_XLU.roa
File: k1q4yUtH8nOkn-WoWyRwtIj_XLU.roa (raw, json)
Hash identifier: jBxnQgqNVHoaAfhxz0pNsM55hTvKVbA1WohU1S4tAqI=
Subject key identifier: 93:5A:B8:C9:4B:47:F2:73:A4:9F:E5:A8:5B:24:70:B4:88:FF:5C:B5
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DBA80BE6A1FB3AD01EA414E1BDB02
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/k1q4yUtH8nOkn-WoWyRwtIj_XLU.roa
Signing time: Sun 01 Jan 2023 23:14:45 +0000
ROA not before: Sun 01 Jan 2023 23:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31085
IP address blocks: 212.252.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ba:80:be:6a:1f:b3:ad:01:ea:41:4e:1b:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=935ab8c94b47f273a49fe5a85b2470b488ff5cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:f9:ea:e2:70:15:4e:c1:4b:4d:22:c0:df:
cd:6c:37:89:79:87:e1:e6:58:4a:f3:98:3c:d1:5f:
8b:57:55:08:db:d6:3e:da:71:76:02:71:97:55:05:
ca:79:6d:cd:a7:15:de:d8:36:88:8b:f2:e8:15:2a:
4e:fa:2f:09:1e:93:56:25:9f:a0:f1:37:32:9c:56:
6e:19:ac:8e:3e:57:fe:ca:a1:73:a4:2f:04:b2:9b:
e3:04:00:f7:5b:38:8f:f9:31:03:dc:c9:b4:0a:6f:
b3:b6:c3:a0:c2:84:cc:03:88:a0:b7:66:7b:d5:b1:
68:fb:d7:0c:8c:b2:7e:f3:16:05:94:a0:bd:71:45:
3b:40:7f:8f:c2:bb:47:11:11:f5:da:5d:a6:6c:23:
61:93:68:db:19:f0:30:9f:e3:d5:b4:85:63:26:19:
ef:28:77:c8:05:e0:d7:13:5b:a0:fd:d8:5f:66:7f:
11:04:73:b5:f3:16:47:49:28:c9:bc:c3:01:3e:56:
f9:11:dc:4e:5d:46:e4:07:0c:5a:d6:58:05:5a:fc:
69:d4:48:af:99:23:45:d0:0f:c6:47:52:55:ad:f9:
d5:2e:72:26:ac:17:ac:7a:b6:c8:50:79:71:83:c9:
8f:cf:30:ba:7a:93:39:8a:98:8d:5a:52:65:40:c1:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:B8:C9:4B:47:F2:73:A4:9F:E5:A8:5B:24:70:B4:88:FF:5C:B5
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/k1q4yUtH8nOkn-WoWyRwtIj_XLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.192.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4b:bd:00:da:94:ef:90:d0:0f:32:17:51:79:7a:4c:0d:17:
cd:86:f9:7f:6c:c0:ae:1d:ee:e3:47:a5:ec:71:4b:5a:0e:da:
d8:3a:40:ac:bd:04:86:1e:00:da:6a:90:57:56:87:2b:91:b2:
4a:9e:a9:0d:48:fd:91:7f:d3:fe:13:1e:40:c8:ff:b6:01:eb:
27:16:69:39:b4:4b:31:43:1b:02:6b:01:56:b4:0f:39:bb:b0:
c4:e5:3e:0a:5e:68:04:9e:b2:de:92:9e:17:b0:eb:48:44:d2:
ff:81:c1:9a:eb:08:43:58:a6:36:63:cd:1c:b0:7a:76:a1:a6:
16:2d:62:6d:c8:85:34:f6:52:dc:8d:05:f4:33:d6:76:78:9c:
35:e5:81:86:37:5a:02:78:d5:76:9c:b4:93:56:22:70:b7:5b:
0f:42:69:98:27:96:af:6a:bd:56:c9:4e:91:db:34:26:86:f2:
df:de:fa:61:7e:bd:6f:c9:50:62:5c:da:e3:03:12:8d:f3:f3:
1c:16:54:08:df:40:f4:4f:c6:41:b5:b7:ea:b3:dd:44:a8:6b:
4e:eb:84:8b:0f:24:1e:6f:bf:52:43:f1:31:0a:98:93:80:cb:
09:f1:79:6a:03:d7:8d:c2:70:34:41:31:72:34:c3:3d:a8:f5:
2b:47:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org