Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/rJyBScJP5SpZZr8z8iofXerY1qw.roa
File: rJyBScJP5SpZZr8z8iofXerY1qw.roa (raw, json)
Hash identifier: Sl18beIcP7/narqHb24FKc+OW3tA5LJWOKSJYgfdd6I=
Subject key identifier: AC:9C:81:49:C2:4F:E5:2A:59:66:BF:33:F2:2A:1F:5D:EA:D8:D6:AC
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018C196CAD9E28E9E433F03CAE69DCEE7FE8
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/rJyBScJP5SpZZr8z8iofXerY1qw.roa
Signing time: Wed 29 Nov 2023 04:53:21 +0000
ROA not before: Wed 29 Nov 2023 04:53:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 212.23.214.0/24 maxlen: 24
193.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:6c:ad:9e:28:e9:e4:33:f0:3c:ae:69:dc:ee:7f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Nov 29 04:53:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac9c8149c24fe52a5966bf33f22a1f5dead8d6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:7b:71:c1:0d:fb:27:af:3f:75:5c:89:ba:
17:a8:85:f7:6e:e4:41:fd:d7:72:11:0e:fe:47:6a:
d6:97:ef:72:98:45:53:aa:de:bc:02:a8:7d:35:9b:
2c:ab:4c:95:e2:5e:2f:a8:11:ab:16:b6:5b:34:d1:
40:e7:29:78:cf:ce:78:bc:d7:85:53:6d:70:d5:6f:
cf:b4:81:87:e6:e1:81:eb:e0:50:eb:b8:26:06:42:
b9:91:11:dc:7f:73:31:75:1e:88:3a:32:48:1d:5f:
ec:0d:4b:87:01:23:63:d3:ea:6b:86:3b:84:6a:da:
00:9b:77:09:1a:ed:12:8a:f1:be:03:8d:e4:e2:14:
47:8b:8c:25:a0:18:e3:8e:9c:67:cb:fb:ad:ff:42:
7d:2f:2e:52:68:e7:e3:9b:1c:5c:28:f3:db:4b:fe:
da:09:26:b5:c9:ae:3d:a9:12:15:90:b5:ca:95:51:
86:21:e1:28:95:8d:8a:18:fa:54:0c:fe:24:f5:29:
25:77:43:e4:dd:b5:89:a7:f0:37:f4:17:47:e0:63:
1d:f8:6c:1e:57:ad:0b:de:3e:43:75:e3:30:cf:75:
b3:35:31:ff:1a:3d:e6:f1:eb:51:bc:54:67:ed:6f:
e0:42:9f:9a:06:6a:8c:19:3e:7e:66:b3:f1:81:0c:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:81:49:C2:4F:E5:2A:59:66:BF:33:F2:2A:1F:5D:EA:D8:D6:AC
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/rJyBScJP5SpZZr8z8iofXerY1qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:01:ea:0e:10:01:78:b0:f3:4d:10:d4:93:9e:0c:99:5c:24:
05:40:13:3b:fd:46:3a:ba:70:1a:07:a5:96:dc:26:85:43:a5:
5b:65:53:7a:a1:42:55:b0:e8:2e:dd:cc:a3:96:ec:eb:0b:ef:
22:74:4c:85:7d:ba:44:32:fb:6c:a6:0c:f8:cd:86:7d:0b:41:
81:03:52:d9:0d:e7:6b:74:37:02:d0:ec:c9:a1:88:ee:0c:d6:
85:86:c8:77:ea:7e:f9:61:08:44:54:5e:60:8e:3d:ae:78:45:
d9:92:e3:67:c1:7a:c1:e9:a0:3d:3e:3a:1e:d5:56:dd:b6:c5:
65:a2:ab:6a:4d:95:56:af:ee:e2:f7:51:3d:e9:2c:68:78:1e:
1b:d3:ce:af:c3:b8:ac:aa:87:00:ac:b2:63:b4:20:2d:dd:dd:
3c:0a:08:14:b5:92:34:89:e8:5d:a7:27:e7:7f:87:80:b8:91:
32:80:87:65:b7:ba:56:69:65:21:6f:91:37:7e:71:81:f9:ec:
90:ee:9b:45:62:9f:aa:3f:3a:96:48:33:54:47:64:eb:0d:79:
1c:41:35:e6:79:1b:4c:77:03:18:b9:80:5d:af:d3:cb:d7:f6:
de:16:7c:88:cb:94:08:f5:e2:fd:cb:8b:26:18:91:3a:4b:9e:
d2:66:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:24 2024 by rpki-client on console-ams.rpki-client.org