Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/2X9h1H_UgFprHQxyGuRoZpkkCPg.roa
File: 2X9h1H_UgFprHQxyGuRoZpkkCPg.roa (raw, json)
Hash identifier: i+0h9Cg5cyUU2StwibaD0fA+6dOUkHWqUf3jJkEjD7Y=
Subject key identifier: D9:7F:61:D4:7F:D4:80:5A:6B:1D:0C:72:1A:E4:68:66:99:24:08:F8
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 01856D3875A1FB12D19A73F0DEB5AA9ADADC
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/2X9h1H_UgFprHQxyGuRoZpkkCPg.roa
Signing time: Sun 01 Jan 2023 12:04:54 +0000
ROA not before: Sun 01 Jan 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 212.39.33.0/24 maxlen: 24
212.39.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:75:a1:fb:12:d1:9a:73:f0:de:b5:aa:9a:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jan 1 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d97f61d47fd4805a6b1d0c721ae46866992408f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:a2:c8:92:d3:b1:0d:15:2a:be:22:40:1c:
bf:95:18:b1:88:9c:a6:5f:53:83:c0:54:6b:d9:32:
44:72:e5:2a:33:e8:f3:15:0e:ff:5a:f5:d5:20:1d:
b5:46:ff:3d:55:78:38:f5:53:1e:fc:64:9a:6f:4e:
0b:10:b6:3e:dc:d3:3b:f0:59:0b:65:1d:e1:5c:54:
33:c6:b6:ff:80:c6:a6:91:f5:4d:d4:6f:8f:b9:50:
9c:85:a5:1b:70:5e:33:84:28:a2:e4:fb:ed:e3:b3:
36:ec:cf:45:0f:f9:74:43:b7:97:f9:08:74:bd:4b:
26:01:51:44:3a:a4:31:0e:49:8a:b1:a1:b0:ab:7a:
38:78:c9:37:c5:a4:0f:64:6f:6b:7e:05:00:10:73:
5c:ad:a6:33:31:6e:c7:a2:0a:d4:ad:2c:2a:fd:95:
d9:e2:f4:19:7b:51:f8:3a:5a:c7:41:74:e3:77:58:
79:7d:96:c6:b1:2c:52:19:a3:bc:18:86:de:d8:ad:
2b:7b:ac:5f:31:2f:57:7b:58:32:9c:51:d4:ad:c4:
ef:92:6f:f1:08:1b:e5:dc:a2:64:bd:d8:1d:31:9d:
81:1c:3a:13:a6:e8:c5:56:8a:fb:0a:af:46:ce:de:
bf:e8:13:4f:9b:31:70:28:28:c4:b7:aa:61:b3:5b:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:61:D4:7F:D4:80:5A:6B:1D:0C:72:1A:E4:68:66:99:24:08:F8
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/2X9h1H_UgFprHQxyGuRoZpkkCPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.33.0/24
212.39.42.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1a:47:7d:03:ec:15:d6:b3:4f:d1:f9:3b:0b:01:cf:e3:65:
ce:53:14:28:a0:6a:f5:74:ba:02:8b:83:66:c1:12:f1:7a:be:
a7:0b:08:a1:22:e4:21:c4:bb:1a:4d:ff:5e:37:d4:d9:c1:a1:
ef:ec:67:98:1d:41:ad:d1:2c:b3:90:6e:d1:bf:ce:f9:66:26:
23:6b:cd:cd:89:32:6d:9a:1f:20:1e:f2:3c:7e:ab:cf:31:e7:
0b:5b:44:d7:8a:66:ad:3d:fa:2f:44:ad:78:b0:64:03:29:8e:
40:00:06:4e:f4:4b:20:eb:ff:6a:87:12:8d:d9:9f:de:72:67:
5c:d7:1a:4d:9b:3d:45:8b:57:3c:9b:23:4b:3d:c4:54:dd:58:
38:c2:27:da:40:6b:ca:49:26:a3:3d:a8:e5:57:88:18:a9:0c:
22:55:f6:f3:3c:29:cc:52:b5:8a:8c:3e:07:44:3c:0d:21:1a:
65:a3:3a:e2:89:d1:af:6a:1e:d9:d4:c4:81:c1:72:ab:eb:db:
70:ee:5c:73:03:80:d7:21:75:b7:a3:ed:21:bf:b2:2f:62:19:
97:5c:a6:70:6d:06:91:60:f7:bb:b1:41:10:95:e6:68:45:da:
2b:70:3e:df:fb:6a:aa:e8:96:9c:a5:b9:18:89:b2:6e:f7:f5:
3e:f6:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:00 2024 by rpki-client on console-ams.rpki-client.org