Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/SZCLjUiKgloidVh_MOc8g_izJYM.roa
File: SZCLjUiKgloidVh_MOc8g_izJYM.roa (raw, json)
Hash identifier: 9nG6C4uDFX/7XD47XbjV6wzddSPOEi90skK0FKZqqcA=
Subject key identifier: 49:90:8B:8D:48:8A:82:5A:22:75:58:7F:30:E7:3C:83:F8:B3:25:83
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 018CBEC6A48B281CF7BFF5F5EF7606C4994A
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/SZCLjUiKgloidVh_MOc8g_izJYM.roa
Signing time: Sun 31 Dec 2023 07:28:58 +0000
ROA not before: Sun 31 Dec 2023 07:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 212.57.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:c6:a4:8b:28:1c:f7:bf:f5:f5:ef:76:06:c4:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Dec 31 07:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49908b8d488a825a2275587f30e73c83f8b32583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:91:99:fe:04:96:84:a5:23:1b:ab:96:3b:
6c:1a:d7:00:72:a4:3a:b4:79:11:b3:92:2a:75:c9:
77:9b:06:66:76:19:e7:42:41:e3:bc:d8:0c:41:78:
85:51:12:96:9c:6e:b7:de:99:b3:71:6e:de:ac:a7:
17:33:8a:12:08:2c:95:37:4c:d1:a9:74:97:f4:a4:
d7:89:d4:d8:53:19:41:6a:53:a1:4c:c6:59:12:ce:
ef:87:37:d0:89:ca:cf:b8:c8:c3:fd:64:5e:24:66:
28:23:8e:03:d1:f8:d8:b9:16:84:4e:b1:cb:9d:53:
4d:e4:1d:b8:f3:69:23:39:54:42:ab:bf:e7:aa:79:
68:ab:5a:75:34:5a:78:74:16:c0:3e:5d:c1:6b:08:
2e:63:b3:0c:32:e5:f5:cc:63:f4:a3:9b:85:65:39:
f2:88:60:e1:fa:9d:ab:20:61:e0:4a:ba:2e:92:15:
cd:b9:7c:d5:cc:7e:da:d9:ba:f7:f0:c1:44:82:7d:
e0:8d:03:27:82:fa:58:36:66:76:b0:2f:45:89:47:
17:99:69:64:49:dd:ca:d8:74:15:d2:ff:7e:c2:93:
b3:cb:06:76:cd:ee:fd:5f:fa:17:8b:bb:13:0b:03:
97:42:9d:c1:84:35:e0:f2:be:33:81:18:cf:40:07:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:8B:8D:48:8A:82:5A:22:75:58:7F:30:E7:3C:83:F8:B3:25:83
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/SZCLjUiKgloidVh_MOc8g_izJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:20:1f:fc:c7:09:c4:8b:51:3f:71:6c:ee:f6:da:b7:d3:73:
4d:c8:41:c3:9e:c8:81:1e:e4:19:1a:6d:c2:7d:0b:3e:bd:e0:
77:cb:06:56:53:15:93:8b:f8:ca:ec:40:8b:72:18:c9:2f:6e:
c6:39:9b:59:66:d2:a4:23:12:12:0d:0f:be:af:7e:89:2d:6d:
ab:8e:b4:18:7d:d3:84:d4:6e:5e:bd:c1:1e:81:73:20:4a:a0:
bc:6b:09:44:bc:37:22:36:e9:ff:70:10:d6:51:b6:7a:72:6f:
66:2f:7f:34:ae:2e:ee:0b:5a:16:32:42:21:ed:05:98:c1:ec:
b6:6f:1b:7e:d7:6e:bd:39:3d:ca:f9:34:bf:96:71:df:f1:1e:
c1:52:36:72:e6:17:ce:39:13:16:9f:d2:1f:ec:a9:b4:33:ef:
66:fc:13:d2:3e:c4:f5:58:79:4d:78:44:be:dd:c3:82:cb:85:
68:98:02:8f:17:45:66:24:6d:ed:3e:a0:3e:33:f6:41:23:fe:
6e:05:90:ef:d8:ca:6c:72:cb:ec:c4:03:fe:93:bb:b3:be:03:
2e:ae:6f:35:2d:e7:13:10:d4:83:62:95:dc:6b:96:ee:4f:16:
32:23:a2:79:ba:bb:17:12:6d:04:35:74:88:05:a9:7a:5a:80:
9d:d1:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-fra.rpki-client.org