Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/RwxtC4FlIH-BRM456436ARQdixY.roa
File: RwxtC4FlIH-BRM456436ARQdixY.roa (raw, json)
Hash identifier: 5OEHjdAVhmjTGujmtWTXPuxpGhOBM64b1nTAsTM3K14=
Subject key identifier: 47:0C:6D:0B:81:65:20:7F:81:44:CE:39:EB:8D:FA:01:14:1D:8B:16
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018CC2DB0861AECA1B5623CB0D84A6FC17E9
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/RwxtC4FlIH-BRM456436ARQdixY.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209638
IP address blocks: 212.23.214.0/24 maxlen: 24
193.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 15:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:08:61:ae:ca:1b:56:23:cb:0d:84:a6:fc:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=470c6d0b8165207f8144ce39eb8dfa01141d8b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:07:66:3d:e9:81:80:8e:71:3f:3b:52:3a:
e7:f3:61:9b:4f:41:68:4a:c7:7a:33:e2:0f:73:08:
94:70:01:a7:60:4a:d1:f5:64:04:1d:ad:2a:32:9e:
91:b6:b4:63:fd:13:e6:d0:80:49:d5:a6:24:10:b5:
26:bb:39:e0:1a:a7:f4:65:51:79:37:d2:3c:ec:9c:
27:aa:6f:67:45:36:d0:6a:ba:66:70:54:2d:e0:5c:
34:d0:e3:24:41:a2:c8:ab:be:42:ed:37:a0:02:e0:
fe:d2:31:a9:5d:05:b1:31:f0:07:e3:71:e5:cb:00:
73:45:0a:f3:13:06:8b:8d:10:7f:fb:40:2e:77:dc:
1a:37:d5:c1:49:af:d3:2e:c2:70:d2:48:5e:d6:6a:
c5:2e:02:80:0e:65:83:6a:01:14:d9:47:c7:01:f9:
08:3a:3e:8c:7a:6e:9d:c5:b3:a9:a5:68:28:60:bc:
67:c7:af:58:87:11:b8:43:17:c7:82:42:33:41:b1:
aa:7f:b5:71:af:c7:25:60:83:b4:14:9b:0c:e7:1d:
ae:94:6e:90:09:91:64:aa:60:71:90:d0:05:9c:bc:
c4:e7:48:99:6a:7f:cc:2a:e2:9a:e6:0f:8c:02:93:
f9:2b:2e:b0:c5:30:18:d8:3c:d5:56:f5:93:45:0b:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:6D:0B:81:65:20:7F:81:44:CE:39:EB:8D:FA:01:14:1D:8B:16
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/RwxtC4FlIH-BRM456436ARQdixY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ae:50:eb:2f:27:f0:00:da:35:08:3d:88:7f:0a:12:fe:06:
04:eb:57:af:f3:15:21:9d:4f:26:4a:42:ca:d0:8f:a8:02:24:
d0:88:3b:29:94:bc:af:f0:79:1c:5e:4f:ef:10:47:99:40:f5:
76:7d:cc:ca:de:58:8c:86:da:c9:8f:c5:1f:d9:72:fd:78:fe:
9b:5b:00:fe:a3:ab:c7:93:0a:cf:72:fc:5e:8b:a3:e4:0b:10:
af:9c:7d:2d:f9:d6:b8:b7:4d:3f:60:fa:a4:2f:b2:e9:50:c6:
5f:f8:94:0b:09:81:6f:6f:1d:9a:7d:d1:dc:ea:ac:25:4c:f6:
8c:88:f3:70:53:a1:f1:40:36:0b:7a:43:bb:2e:c3:07:e3:d0:
8d:3b:84:f2:6e:43:e5:50:f0:e1:fa:f8:c8:52:cd:d7:e8:1d:
45:0c:df:f0:d3:fe:13:ac:cc:03:b9:65:b0:8f:1e:8b:ca:8d:
45:bd:67:b0:d7:b1:66:71:14:bc:54:ae:38:f3:22:14:bb:1c:
da:ad:aa:06:3b:3a:98:c1:4e:d1:b1:c8:4b:25:92:a0:51:1a:
da:ea:06:85:e1:25:25:95:68:f5:5c:5b:0d:cc:f6:10:68:bb:
e4:ea:63:54:43:b8:02:08:42:28:4d:16:cc:2e:c4:c4:be:bd:
a9:61:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 18:16:24 2024 by rpki-client on console-fra.rpki-client.org