Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/wudhGDvVBoOjRivtWk_FgwCj-zA.roa
File: wudhGDvVBoOjRivtWk_FgwCj-zA.roa (raw, json)
Hash identifier: C90OWk1dIDSPFDiHN7FV93kuwWjKWvnBZgUIMoNjeE8=
Subject key identifier: C2:E7:61:18:3B:D5:06:83:A3:46:2B:ED:5A:4F:C5:83:00:A3:FB:30
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 01856D38746D8A700C45DD13A56829CBB712
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/wudhGDvVBoOjRivtWk_FgwCj-zA.roa
Signing time: Sun 01 Jan 2023 12:04:54 +0000
ROA not before: Sun 01 Jan 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:74:6d:8a:70:0c:45:dd:13:a5:68:29:cb:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jan 1 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2e761183bd50683a3462bed5a4fc58300a3fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:52:df:9a:f3:10:4d:44:b0:62:a0:bf:b5:
81:1c:b6:0a:74:92:ea:ae:ef:fc:16:f7:18:a9:ae:
96:f1:b2:5d:b8:e7:2c:e3:64:ab:52:26:ae:a4:f3:
f0:db:3f:82:1b:bf:e7:39:27:15:62:05:ad:d0:13:
ce:f6:b2:6a:5f:5e:fc:e7:5f:55:56:ad:f9:e5:43:
b9:73:6e:3e:46:95:f3:4a:bb:b6:4b:03:8b:8c:e0:
57:1d:a4:39:b6:29:85:f2:05:7c:a3:a6:76:71:31:
7a:4e:ac:cb:b7:05:77:09:04:55:da:c2:71:a7:14:
bd:f0:e4:40:7a:ed:46:f6:38:b4:b6:7a:d3:83:22:
e0:d0:f8:46:51:47:5c:e7:a9:dc:03:22:38:5a:4d:
7b:a8:82:6b:07:d0:f8:33:d5:f5:77:53:e3:a9:af:
40:9b:08:49:9b:43:12:93:1a:fb:2c:06:64:e3:01:
74:70:3a:54:ed:b2:6a:f6:c9:b5:6d:f3:57:53:42:
64:29:7e:15:a9:e5:b3:ca:56:26:4e:c6:04:cb:da:
88:42:e4:79:8d:f0:12:da:18:d1:36:21:2d:70:b5:
0c:f5:75:da:a1:60:a5:cc:3c:8f:db:89:16:93:2b:
9f:af:cc:bb:c5:c7:95:88:4d:25:ed:5f:93:d7:d7:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:61:18:3B:D5:06:83:A3:46:2B:ED:5A:4F:C5:83:00:A3:FB:30
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/wudhGDvVBoOjRivtWk_FgwCj-zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e2:dd:35:fa:ac:34:21:47:93:d8:90:67:e0:fd:3e:00:3e:
7e:38:7e:6b:3d:98:8a:41:21:2a:16:65:72:c6:09:f0:5b:54:
ae:2b:e5:78:70:60:09:51:79:5f:9e:bf:76:1f:18:ad:7e:b3:
42:72:d9:23:2b:32:0e:0f:0a:b7:dd:c2:b3:c8:b4:24:d4:26:
2e:b2:a9:3f:08:2f:e0:d6:17:bb:68:52:b2:1d:f2:c3:37:44:
8a:8f:5e:2e:ba:f4:53:ff:54:8c:23:a7:13:a7:6a:e2:bc:77:
96:09:96:b9:c4:06:e0:ff:ee:ee:70:d5:e0:41:50:fd:a9:21:
44:fb:bd:e8:8a:76:ca:9c:ab:ae:e6:61:49:70:31:41:15:f6:
52:a3:38:34:cb:4d:79:64:ea:a1:ce:89:71:9b:4f:df:fa:95:
7a:62:5a:d2:2d:80:d0:35:d3:33:72:3b:eb:67:50:97:9a:a9:
55:d4:34:7d:41:a1:53:5e:eb:76:d6:fc:8e:1e:7b:eb:0b:6c:
24:92:e0:9b:30:45:8a:c0:5c:11:f7:07:38:12:64:47:f1:bd:
a8:73:66:05:c4:e3:db:23:6a:c6:61:b8:18:10:87:5c:3b:03:
7c:91:fb:bb:af:02:f2:23:83:0a:e8:37:c0:d5:76:22:26:76:
e9:dc:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org