Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/JsWqIFtMAiYbHxPH5gLUhNO2Ttg.roa
File: JsWqIFtMAiYbHxPH5gLUhNO2Ttg.roa (raw, json)
Hash identifier: 4FLFFi/3VFGsMowFQSCYUVfxtS3QKZxlyVTDUAmy80k=
Subject key identifier: 26:C5:AA:20:5B:4C:02:26:1B:1F:13:C7:E6:02:D4:84:D3:B6:4E:D8
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 018572713A7706868F6F17E7671B54C81397
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/JsWqIFtMAiYbHxPH5gLUhNO2Ttg.roa
Signing time: Mon 02 Jan 2023 12:25:01 +0000
ROA not before: Mon 02 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213269
IP address blocks: 86.111.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:3a:77:06:86:8f:6f:17:e7:67:1b:54:c8:13:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jan 2 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c5aa205b4c02261b1f13c7e602d484d3b64ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:04:75:a9:a3:a2:5f:df:c3:11:2c:5f:96:
78:62:d8:6f:ab:bb:95:3a:4e:39:7d:4e:9b:3a:e2:
60:b3:7b:e3:c1:40:ef:65:a1:42:f6:5f:fb:cd:33:
c3:7f:e4:bb:83:49:2f:24:5a:2f:ff:7b:c7:80:c0:
25:4e:c5:98:b7:e2:88:95:60:02:0d:cf:dd:53:6a:
9f:1f:6d:88:d4:8b:6d:12:69:8f:4b:4c:00:92:06:
7e:8f:e0:1e:04:c2:be:46:17:cb:3c:e7:2e:49:db:
4c:dc:d8:42:80:bf:d5:91:87:3b:1d:fa:72:8d:fe:
16:2b:56:fd:fe:a0:91:3d:4e:89:35:a8:d6:ac:29:
4c:a4:b1:78:2d:25:a9:30:c4:3e:e9:0b:e7:0c:b3:
37:34:fe:d7:d1:97:f6:52:f5:ed:e7:c0:8c:20:29:
bf:9a:01:53:93:ee:66:ff:2d:c4:00:47:d7:0c:81:
c3:be:6f:e1:f6:b0:e6:35:27:03:4a:8d:8a:84:7e:
49:f2:1b:d1:b1:86:3a:a3:ae:aa:66:65:95:1d:65:
3d:e0:d1:9a:71:25:c5:e0:4a:e3:83:cd:3e:5e:11:
cd:4f:8c:93:35:d8:d5:69:cc:3c:0c:39:3b:d7:cf:
a1:c7:2f:33:14:1f:7c:27:2a:9c:5a:19:d1:e8:2c:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:AA:20:5B:4C:02:26:1B:1F:13:C7:E6:02:D4:84:D3:B6:4E:D8
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/JsWqIFtMAiYbHxPH5gLUhNO2Ttg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:72:6e:c7:88:12:a8:35:27:dd:7f:2b:aa:c2:5f:e2:c5:50:
1b:89:be:d5:9c:b7:9c:72:2d:8c:46:f1:0e:9f:ce:bd:e2:46:
88:27:3b:99:72:23:02:1c:70:cb:fb:5c:53:49:49:ee:f1:79:
09:7f:a5:20:d6:e7:cd:59:1e:b6:de:d3:1a:76:e5:68:3f:28:
50:ea:12:cb:3f:9c:94:77:a8:11:e7:98:00:29:a2:1b:c7:12:
9d:7f:af:42:51:34:58:db:99:57:0c:d3:e1:e1:65:03:1c:a8:
cf:ef:80:44:57:a0:a2:46:ed:67:7d:0d:a0:cb:40:7d:c7:2d:
b8:f4:04:4f:34:20:19:9e:9f:2d:7e:38:32:5e:9f:0e:0f:c6:
f4:bb:9f:80:e9:ec:1b:c4:03:bf:b2:2c:01:82:f6:3f:f5:93:
4d:0f:d8:4b:42:1a:c8:78:02:8a:ba:3d:ac:6c:4d:04:d5:6a:
bc:3e:42:82:59:e9:85:74:07:07:d9:e9:10:43:7a:c8:b9:b9:
21:b3:4a:3c:b4:9d:c0:c3:8d:83:64:6f:81:02:f9:33:7a:8d:
88:c3:0e:1a:be:8f:4e:96:a2:00:73:33:60:6d:d5:3c:6b:b9:
e6:39:a5:e7:0f:f2:0e:28:0d:b4:98:58:44:c8:b1:27:45:03:
95:b6:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org