Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ZgNBqmt-aVrQxqbcO8rcm1Izqog.roa
File: ZgNBqmt-aVrQxqbcO8rcm1Izqog.roa (raw, json)
Hash identifier: CsNoiptGnBFqUEPZpw66/hGpUtH5p49g+UoB1CaVNXc=
Subject key identifier: 66:03:41:AA:6B:7E:69:5A:D0:C6:A6:DC:3B:CA:DC:9B:52:33:AA:88
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305915B3924A4098F6CD4096A8813B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ZgNBqmt-aVrQxqbcO8rcm1Izqog.roa
Signing time: Mon 02 Jan 2023 01:54:54 +0000
ROA not before: Mon 02 Jan 2023 01:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5513
IP address blocks: 212.51.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:59:15:b3:92:4a:40:98:f6:cd:40:96:a8:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660341aa6b7e695ad0c6a6dc3bcadc9b5233aa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:ef:8b:20:9e:fe:a2:63:e9:01:bd:5c:f6:
cd:2c:e8:9b:9f:e7:f2:3e:0f:f0:a9:11:f0:29:1f:
33:cd:53:ee:01:fd:b9:63:dc:72:f1:a4:c1:63:2c:
2c:ba:54:69:7e:a6:c1:d0:c5:e5:d0:5a:00:5f:6f:
bc:44:12:31:25:e2:55:f2:00:f5:94:b3:28:e9:1a:
38:4e:ad:21:67:c9:1d:3d:ed:f2:56:ac:b5:43:49:
8a:d4:4c:5f:ce:80:9b:60:0f:d3:26:99:d0:e9:af:
87:e8:85:5f:50:96:74:f4:ba:b8:e4:4c:65:10:1c:
50:7b:5d:48:44:09:24:75:77:75:36:ec:9e:b6:8a:
92:5e:19:aa:d6:9b:e3:3b:c9:8b:b8:e4:18:44:a2:
68:e0:89:b3:a8:f2:18:71:f9:dc:14:d8:b5:42:9a:
2e:a6:41:74:0d:6b:01:66:83:85:52:33:87:08:78:
12:ee:10:e2:67:b8:82:40:21:10:d0:d0:75:49:0a:
ef:d8:37:e4:d6:20:7b:86:ce:e5:93:10:e9:07:60:
82:b8:72:14:0e:a3:fa:4d:1c:90:b8:fb:da:cc:d5:
ac:5d:d7:b0:8c:00:0a:a8:c1:22:be:fd:bf:47:b8:
2f:f7:2a:27:9c:24:4e:5f:30:c3:31:ef:06:ba:4d:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:03:41:AA:6B:7E:69:5A:D0:C6:A6:DC:3B:CA:DC:9B:52:33:AA:88
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ZgNBqmt-aVrQxqbcO8rcm1Izqog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.51.64.0/18
Signature Algorithm: sha256WithRSAEncryption
24:de:7e:09:1b:00:d3:19:ea:46:df:a9:5a:f5:24:ff:73:4e:
70:26:aa:d8:80:ff:41:c6:9e:42:c9:d8:27:90:1e:98:35:cd:
6b:20:88:92:ef:e2:05:54:4f:54:cc:85:10:3d:b9:16:bf:b7:
1d:1a:e8:9a:c8:01:41:2c:99:74:78:fd:91:82:17:89:da:85:
17:2a:3e:a2:9e:24:f9:2d:0e:e5:e2:9f:3f:04:2e:a4:42:1d:
64:61:e9:d9:0e:fa:28:41:ee:9f:da:e9:03:8b:dc:7d:3c:a0:
c8:b0:e8:9b:a4:c2:a8:15:60:e3:a0:b0:d2:33:b4:bc:9a:99:
11:57:82:b3:92:b8:ba:17:45:04:4d:84:ac:ab:84:87:5d:5e:
8a:d9:d8:99:e3:9a:63:1f:82:fa:ac:d5:0b:fd:e3:28:e1:a9:
18:08:87:9f:63:48:5c:0f:48:e2:56:ad:aa:f8:66:e9:27:f4:
d1:16:38:99:07:de:4b:47:a1:a9:86:f6:a3:11:54:91:d6:4e:
af:2c:c5:97:4d:83:b6:2e:16:98:52:de:a2:25:3d:7f:86:f9:
1e:62:b4:df:d4:51:68:c2:f8:13:69:d0:f8:2b:b4:16:ee:68:
75:86:08:67:84:65:26:97:35:2b:eb:9d:fa:62:a4:d0:cb:f1:
8b:23:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org