Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/esKiuOykw-oJM2TP1Egk50ckqI0.roa
File: esKiuOykw-oJM2TP1Egk50ckqI0.roa (raw, json)
Hash identifier: E0uGXAehhtesboWhOAPnsDS8g73AbtVs7HtYRBfH0GU=
Subject key identifier: 7A:C2:A2:B8:EC:A4:C3:EA:09:33:64:CF:D4:48:24:E7:47:24:A8:8D
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 0185737185CFFAD2E2D6C27470822AA6EBC6
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/esKiuOykw-oJM2TP1Egk50ckqI0.roa
Signing time: Mon 02 Jan 2023 17:04:57 +0000
ROA not before: Mon 02 Jan 2023 17:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42381
IP address blocks: 212.237.195.0/24 maxlen: 24
212.237.194.0/24 maxlen: 24
212.237.194.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 14:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:85:cf:fa:d2:e2:d6:c2:74:70:82:2a:a6:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 2 17:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ac2a2b8eca4c3ea093364cfd44824e74724a88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:9e:36:d4:2e:de:6c:94:d6:f1:a8:22:ab:
81:4e:f6:4b:5d:ba:8d:55:f5:96:83:51:51:05:86:
39:9e:d4:e7:18:15:57:da:40:17:74:1c:55:ac:42:
4d:17:33:48:69:95:07:1e:81:f1:98:5b:ac:39:e8:
26:64:87:d8:cc:a2:54:78:d4:19:1f:f7:49:0a:f0:
2a:a2:52:92:63:4e:68:3d:0b:fc:29:a1:7c:6d:8b:
e9:9b:ee:73:0e:3f:07:ef:f2:ca:81:36:aa:5a:b3:
88:0d:15:d9:e0:8a:d8:4d:21:9d:ea:ad:4c:48:c9:
5c:aa:3c:25:b2:55:8a:22:ee:04:a8:99:de:99:31:
4d:63:3c:89:d0:10:84:90:9e:93:dd:36:70:10:82:
00:f1:12:0b:eb:5e:86:1c:b4:6b:b8:bc:98:28:8e:
29:85:99:d4:59:20:1b:e9:f7:21:ad:22:e0:98:29:
58:92:1b:65:a3:df:91:04:fc:a5:6e:c1:44:70:90:
ab:3b:8b:08:7c:7a:52:8a:0e:81:85:a1:4a:3e:d9:
e8:05:e5:47:6a:57:b8:3c:c5:56:25:e4:fa:e3:d4:
33:eb:fe:41:7a:19:0a:ac:04:f8:bc:3e:57:3d:02:
05:e6:90:94:04:e2:f8:be:11:57:91:83:d2:3d:4b:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C2:A2:B8:EC:A4:C3:EA:09:33:64:CF:D4:48:24:E7:47:24:A8:8D
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/esKiuOykw-oJM2TP1Egk50ckqI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.237.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d7:eb:22:61:ae:e6:f6:82:f7:1c:d2:74:ac:ea:de:05:f1:
f5:96:a6:bf:20:11:df:97:93:db:c6:c3:46:17:34:2a:84:47:
2d:fa:d3:dc:9b:7e:bf:20:ab:15:90:3a:dd:b9:4a:90:36:40:
da:6a:8e:32:aa:42:32:7f:d4:16:b1:c8:39:6b:ee:96:ac:4a:
64:48:ae:82:ef:cc:93:58:4b:34:77:2d:97:77:9e:a3:a8:27:
7a:a7:39:df:f9:5c:b5:16:d3:23:af:36:fe:77:a3:9d:50:ef:
0c:d9:d1:b1:d7:e1:2e:90:5c:07:09:d4:00:a3:ea:64:ca:90:
a9:e1:ee:34:f1:25:19:c2:56:d8:11:08:bc:9c:4c:de:12:bd:
1e:24:4f:24:8a:3a:70:f0:f3:40:fa:63:f8:73:31:c2:8d:24:
d5:2d:79:04:61:88:15:5a:a5:b5:88:bd:df:74:c2:94:55:19:
73:11:4e:16:c0:9f:36:fc:61:f3:d9:54:27:11:9a:a3:2c:cd:
6e:80:4d:aa:0c:de:5b:61:67:50:e3:19:5d:53:a8:e9:07:e1:
66:62:34:12:21:d9:aa:a8:e6:5b:e8:09:48:57:90:06:d3:d1:
bb:8a:0c:3a:98:72:a9:b5:56:e2:5d:82:db:53:8b:90:66:07:
d3:ca:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:34 2024 by rpki-client on console-fra.rpki-client.org