Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/W0kg9YDXqOLASn9f2B2W3IwkbYI.roa
File: W0kg9YDXqOLASn9f2B2W3IwkbYI.roa (raw, json)
Hash identifier: YJFALyGsx2GFdxLWGIOSB7CLFrJXuHhu8D6FDKK/vUU=
Subject key identifier: 5B:49:20:F5:80:D7:A8:E2:C0:4A:7F:5F:D8:1D:96:DC:8C:24:6D:82
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 01856F26C309DB0D8B18B2EA49D623FCF2AF
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/W0kg9YDXqOLASn9f2B2W3IwkbYI.roa
Signing time: Sun 01 Jan 2023 21:04:49 +0000
ROA not before: Sun 01 Jan 2023 21:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8536
IP address blocks: 212.52.160.0/22 maxlen: 22
212.52.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c3:09:db:0d:8b:18:b2:ea:49:d6:23:fc:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 1 21:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b4920f580d7a8e2c04a7f5fd81d96dc8c246d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:ab:dc:f1:22:ff:03:cc:f2:f1:3b:35:f5:
7b:1c:c5:b6:a1:e3:ef:75:ed:dc:27:47:2f:4b:68:
d9:cd:77:02:0b:e2:63:28:88:4c:d8:f8:af:0d:c5:
d2:ad:f7:f6:d1:08:4a:66:ce:c2:52:dd:2b:1c:aa:
fa:7c:81:a8:82:e6:b0:cf:e3:e7:d7:3c:e2:aa:b7:
ee:7e:d2:0d:2b:1a:ef:23:c1:95:79:f4:ca:2f:f0:
5d:f7:bc:bf:e4:38:57:9c:62:80:46:c2:7e:78:4c:
cd:74:32:52:48:76:33:50:aa:50:1c:c7:8d:40:6e:
ef:71:6e:f7:19:cd:60:8c:1f:e2:c2:ae:30:f0:ef:
aa:56:36:16:0a:a2:0f:82:53:e2:64:68:b2:77:b8:
0a:55:cc:67:31:1c:bf:84:09:3e:86:01:9e:35:c5:
76:e8:81:dc:28:45:a4:97:e5:89:d2:4b:7c:aa:5f:
f0:98:a1:e0:aa:45:62:62:f6:03:92:8a:cd:5a:dc:
ff:fa:84:80:b5:2b:a2:2e:ed:db:23:8d:d3:aa:69:
99:b5:b9:fd:20:10:21:72:73:57:cf:6d:24:b5:bc:
98:ed:20:ad:cf:dd:60:20:34:64:2d:85:9b:d5:66:
46:70:b6:57:82:a4:4e:5f:35:be:1e:d0:27:5b:ee:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:20:F5:80:D7:A8:E2:C0:4A:7F:5F:D8:1D:96:DC:8C:24:6D:82
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/W0kg9YDXqOLASn9f2B2W3IwkbYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.160.0/22
212.52.168.0/22
Signature Algorithm: sha256WithRSAEncryption
64:01:24:13:6c:82:08:9f:1a:0c:a2:41:63:45:de:98:f7:ae:
75:38:0e:b8:09:c6:51:27:b9:43:2d:65:b5:28:8c:5a:6f:8c:
60:0d:f7:cb:07:9e:00:0c:31:98:30:0b:11:58:d4:7f:e8:75:
d3:f5:33:5c:47:c3:98:03:67:ec:26:33:04:1a:81:a5:ec:8b:
4b:9f:50:19:81:83:aa:60:5f:07:7c:f5:95:20:4d:d9:eb:0c:
f0:b7:4d:ff:ef:d2:42:ff:f4:8c:60:f1:04:4b:05:9e:38:5f:
b1:52:5f:a5:db:72:7f:3c:37:0d:29:b2:29:e2:62:1f:32:50:
f7:76:57:86:ff:19:34:46:99:00:83:8a:69:66:cd:6b:d0:d0:
3e:07:e0:71:2e:42:17:f8:c7:a2:76:77:0e:c0:da:1c:f5:94:
ee:d3:df:1c:0c:28:05:14:63:20:84:1d:b5:aa:8e:b5:04:f1:
41:bf:1c:74:98:83:fe:96:08:9a:de:74:28:3f:92:6a:d5:32:
0e:29:39:1f:34:3e:08:c8:d9:b7:a5:29:8a:55:b6:47:cb:e0:
c8:6f:2b:c1:a8:1a:78:4c:12:74:5c:f7:f1:ca:8a:58:70:15:
e6:3b:7c:e9:9c:2a:f2:18:b7:57:f4:fe:ba:16:92:fa:48:5b:
0e:13:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:43 2024 by rpki-client on console-ams.rpki-client.org