Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/Wupv9JJrC4rDlg3RpKivf-JHNno.roa
File: Wupv9JJrC4rDlg3RpKivf-JHNno.roa (raw, json)
Hash identifier: egBEy8BV3weW3xIpq+sbm0wiaNbzl4+fm9WxD0/gSnE=
Subject key identifier: 5A:EA:6F:F4:92:6B:0B:8A:C3:96:0D:D1:A4:A8:AF:7F:E2:47:36:7A
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 01856DDD5B9ADC7AADB93FAA70CBFF709CD6
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/Wupv9JJrC4rDlg3RpKivf-JHNno.roa
Signing time: Sun 01 Jan 2023 15:05:01 +0000
ROA not before: Sun 01 Jan 2023 15:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206049
IP address blocks: 212.11.67.0/24 maxlen: 24
212.11.76.0/24 maxlen: 24
2a0a:7640::/29 maxlen: 30
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:5b:9a:dc:7a:ad:b9:3f:aa:70:cb:ff:70:9c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jan 1 15:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aea6ff4926b0b8ac3960dd1a4a8af7fe247367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:5b:4e:4c:ab:5b:10:b7:8a:ac:80:49:eb:
a9:d6:0e:92:80:ef:df:1d:ca:27:15:cf:d1:3f:85:
50:e1:81:fd:0b:d6:3d:0e:d7:ce:27:58:f4:11:5b:
0e:d4:0a:86:4f:88:6b:a0:90:02:00:55:7a:ad:4c:
a1:c2:62:ab:45:43:bb:79:2a:8d:3b:ae:ad:3e:29:
96:36:64:cb:9b:ef:d9:82:2f:86:ae:6c:89:4f:4a:
47:c1:98:bf:0b:4f:35:eb:09:98:31:06:2c:d4:89:
bf:91:0a:94:31:71:28:85:64:73:53:56:a5:b1:bc:
f0:21:a8:89:9d:db:33:df:d5:46:28:b9:ae:13:94:
3b:ab:16:bc:f5:db:c8:08:c9:ff:fe:4f:6e:40:55:
fe:0c:de:88:d6:24:99:68:a4:1d:a0:ba:c3:9f:4e:
ab:99:00:20:37:94:3c:f9:5d:a9:84:d7:a1:7b:81:
90:5b:92:8c:b6:b9:ca:d6:cb:43:a3:e6:5c:d2:00:
99:66:38:7b:59:ee:e4:f7:e6:67:78:71:0d:ad:0e:
bd:e2:26:e0:5a:14:f8:51:e9:0f:ec:51:d7:7e:78:
1f:80:ad:da:87:45:71:07:5d:36:ab:3d:96:53:66:
a8:89:d3:05:52:06:73:82:c0:70:0a:ab:52:9e:81:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:6F:F4:92:6B:0B:8A:C3:96:0D:D1:A4:A8:AF:7F:E2:47:36:7A
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/Wupv9JJrC4rDlg3RpKivf-JHNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.67.0/24
212.11.76.0/24
IPv6:
2a0a:7640::/29
Signature Algorithm: sha256WithRSAEncryption
95:de:2c:a0:04:a8:76:8b:db:24:25:0d:a3:1b:64:6c:ba:25:
b0:04:46:9e:8d:70:50:59:a5:8b:b9:e0:5a:11:d5:83:f4:60:
fe:00:e1:f4:70:24:cc:24:b5:89:5d:aa:af:b3:8c:4d:92:ba:
16:77:77:b5:f3:d6:ba:ec:72:21:f4:04:5e:11:ff:fa:7d:74:
5d:f0:d1:f5:3a:03:d7:fd:70:c3:1b:30:54:c2:8b:fc:29:87:
50:57:67:39:f8:e5:a2:e6:3c:b8:9a:b2:5c:d5:d3:51:43:63:
90:46:cc:9a:dc:a6:ab:8f:33:f3:e9:3a:7c:d9:0d:83:5c:87:
95:30:2a:31:71:9b:ba:d0:d2:09:f0:24:6d:06:bf:0d:a6:3e:
32:4c:ee:0c:0b:db:df:e6:c5:bf:aa:86:f3:cb:c4:9e:1d:9e:
46:71:c2:31:ac:ab:26:93:47:34:7a:21:f6:54:c1:1a:8c:d7:
b5:07:a8:19:da:4f:d5:00:ad:97:46:68:71:9c:84:81:9f:2b:
db:2a:24:fe:3c:08:2c:44:e0:d6:4f:e8:12:e1:98:78:e9:89:
85:23:73:5c:a8:07:2f:78:6a:fa:7a:47:8b:dc:d5:47:69:8c:
a3:87:74:50:a3:f7:4a:1a:35:81:dc:14:76:0d:a0:52:1e:f1:
10:38:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:28 2024 by rpki-client on console-ams.rpki-client.org