Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/n5TdukEqlx6mHSvEQ8sXzEEaz4U.roa
File: n5TdukEqlx6mHSvEQ8sXzEEaz4U.roa (raw, json)
Hash identifier: VrN4xFzZWSfFD2AHrsNTtsDFTQMvCFoN5r/0tbIaCaM=
Subject key identifier: 9F:94:DD:BA:41:2A:97:1E:A6:1D:2B:C4:43:CB:17:CC:41:1A:CF:85
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188BF4F79473FA33745BC405EAC0810B90A
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/n5TdukEqlx6mHSvEQ8sXzEEaz4U.roa
Signing time: Thu 15 Jun 2023 13:47:16 +0000
ROA not before: Thu 15 Jun 2023 13:47:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204582
IP address blocks: 212.193.123.0/24 maxlen: 24
62.76.251.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:4f:79:47:3f:a3:37:45:bc:40:5e:ac:08:10:b9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 15 13:47:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f94ddba412a971ea61d2bc443cb17cc411acf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:14:2f:b8:44:00:94:ab:e0:58:0d:c0:54:
39:75:dc:60:f1:39:bb:9a:12:35:e5:fe:13:a5:bb:
05:62:19:d0:a7:a8:7f:9c:80:80:75:45:71:a4:41:
7e:36:7d:4e:31:08:ea:e9:49:ab:70:be:69:43:26:
cb:a8:f2:ec:ec:b1:52:44:39:da:2e:3e:93:8d:0e:
c5:e1:0a:f7:c3:25:2c:5e:31:76:47:0b:5f:81:92:
b1:08:97:43:ff:67:81:5e:bf:4b:6c:27:56:95:d5:
6e:23:2c:80:de:05:5c:c0:ec:c4:fd:4d:1d:0d:df:
d5:37:cb:da:2f:b7:2b:ae:0f:25:42:ad:d3:4a:91:
75:70:8a:ba:19:76:15:44:d1:ed:34:c9:b8:74:39:
73:2b:7d:1c:bd:67:5e:44:b0:6b:df:1a:ac:8a:c4:
23:84:24:fd:91:2e:a2:38:ec:e2:42:58:ed:20:47:
ed:fb:e5:56:ce:5b:51:b7:c1:5f:8c:57:d2:e0:c2:
a4:62:a3:c7:70:d9:68:06:f4:98:f9:5d:3b:d1:fb:
d2:56:23:27:70:44:24:8f:fb:6e:5e:ea:6b:9f:f3:
7b:c7:22:f0:47:ea:64:6d:8b:b8:27:71:30:42:9c:
30:01:64:9d:82:3c:41:ad:5b:45:49:94:62:0e:00:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:DD:BA:41:2A:97:1E:A6:1D:2B:C4:43:CB:17:CC:41:1A:CF:85
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/n5TdukEqlx6mHSvEQ8sXzEEaz4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.251.0/24
212.193.118.0/24
212.193.123.0/24
Signature Algorithm: sha256WithRSAEncryption
97:74:a2:00:1f:ea:fe:70:9c:a8:31:3d:59:25:95:4e:dd:38:
72:b3:91:06:96:11:66:c4:28:1e:64:c6:28:5f:97:85:4e:7d:
a3:03:a7:77:9e:49:dd:87:fc:b5:f0:11:c4:ce:1c:09:2b:9f:
1d:fc:ae:f3:ea:d1:a9:88:87:09:23:96:32:53:e8:e1:b6:47:
e5:51:5f:e2:e8:0c:db:7a:6c:54:d1:8d:77:ed:ea:ca:40:6e:
12:a7:9d:17:a1:0a:9b:e5:8d:67:6d:b2:46:29:33:e2:ca:fb:
d3:f7:20:5b:91:53:0a:f2:18:71:f9:ce:f8:6e:3c:18:24:e7:
8a:83:8c:f6:08:8f:9c:29:b5:d6:0d:e6:a2:44:64:e5:b3:38:
a5:2b:e1:c6:71:f5:5a:b1:56:a9:d0:3f:be:8b:5d:1f:d4:e8:
7f:5d:ff:a9:08:8c:37:e7:09:84:15:35:48:ad:25:e8:6a:ae:
23:7a:2a:4e:95:35:bd:96:2d:02:cb:a0:7f:1a:98:bc:77:25:
72:71:76:a4:5f:7a:c8:a5:e1:c6:14:f5:e5:d0:ac:e6:00:2b:
92:04:25:18:81:f0:60:76:b6:84:15:fb:ce:ad:c9:42:6c:9d:
54:c5:d9:bb:eb:5a:50:6a:7a:88:7b:db:1a:1a:5e:25:5c:3e:
2b:70:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org