Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/N-4weqiAFs0k20_PlpbDDc6uCCE.roa
File: N-4weqiAFs0k20_PlpbDDc6uCCE.roa (raw, json)
Hash identifier: AzSX8hqJ64+F34vOSTnbAU8pEtGms0sEEyp/kMfcmOk=
Subject key identifier: 37:EE:30:7A:A8:80:16:CD:24:DB:4F:CF:96:96:C3:0D:CE:AE:08:21
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB8FBD37BCAC43FDE5BD223E4B506E
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/N-4weqiAFs0k20_PlpbDDc6uCCE.roa
Signing time: Mon 02 Jan 2023 00:04:49 +0000
ROA not before: Mon 02 Jan 2023 00:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200361
IP address blocks: 212.21.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8f:bd:37:bc:ac:43:fd:e5:bd:22:3e:4b:50:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37ee307aa88016cd24db4fcf9696c30dceae0821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:b9:e1:18:37:a2:46:94:8f:66:fd:13:a3:
cb:e7:e7:b5:c9:72:ef:b1:51:44:29:7b:7e:e2:f0:
e9:2e:b7:e3:3f:74:1d:d2:08:8b:f1:37:93:22:44:
e3:9c:ba:fe:ec:c2:91:1f:3c:3e:f5:30:21:34:68:
ad:a3:3a:26:5b:22:ec:e4:14:86:ea:df:fd:73:1d:
33:98:78:c2:8d:f5:e6:ec:f7:1d:b0:c1:e5:c0:e4:
11:ff:35:16:5e:23:a8:23:e4:7f:d9:b3:b8:21:4f:
ae:42:54:7b:2b:e1:ba:a7:36:49:23:fc:6a:8b:65:
79:8d:b7:aa:9c:32:90:50:ba:ce:5d:28:b6:5f:43:
dc:cd:1d:4d:52:f7:08:05:42:46:d6:ba:29:3e:9b:
ed:ab:62:9b:3b:16:1d:42:83:6d:44:59:a9:77:f1:
36:57:e8:0b:2a:26:d2:28:74:81:ac:8a:49:ab:14:
f3:ad:c2:8d:78:4d:4f:71:08:0c:4e:c1:ed:53:cf:
7c:91:94:d6:43:9f:d6:b8:49:87:87:a3:74:da:a9:
e8:6d:e9:44:0a:03:4d:0d:b3:71:f4:d3:a2:84:db:
24:37:24:b5:19:99:64:3a:55:9c:87:44:37:70:db:
c8:b4:d3:7e:25:d6:74:2a:f2:c9:63:71:ea:9f:a9:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EE:30:7A:A8:80:16:CD:24:DB:4F:CF:96:96:C3:0D:CE:AE:08:21
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/N-4weqiAFs0k20_PlpbDDc6uCCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.134.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f2:cd:de:0d:79:67:2c:38:fb:40:8f:8f:42:c4:1f:bd:b7:
ba:7a:52:7e:8b:95:50:e1:ea:41:b3:22:ab:fc:6d:dd:36:6f:
97:40:cb:b0:74:12:d5:6e:d4:56:06:e1:87:b5:cc:76:fd:8a:
16:e1:98:15:d2:c5:ef:e1:1c:9a:5e:39:8c:e6:67:c8:ee:b0:
17:e4:6d:9d:0b:29:35:2b:6a:ee:0a:74:75:70:bc:62:df:e4:
a5:f0:80:fd:32:3d:48:5b:18:85:d6:08:01:17:a8:50:02:1a:
b9:37:d7:5d:9c:22:25:61:fb:05:10:ca:51:71:69:6e:87:94:
51:04:1c:4b:31:1e:f4:4c:47:79:9e:33:17:77:2f:aa:35:94:
16:9e:65:fc:de:b1:38:ef:3e:4a:f4:06:ad:c1:73:38:a5:2c:
1f:be:fb:ca:f2:ab:08:73:8a:87:39:2a:33:3b:77:7b:c8:2f:
0e:2f:ae:36:c9:b6:e2:61:35:18:55:39:76:16:12:44:d5:32:
6a:43:a9:f0:69:2c:db:14:73:65:cb:18:eb:59:30:d2:d6:df:
f5:4e:b4:e5:e4:2a:6c:fb:e5:6d:8e:77:7a:90:df:90:e0:5e:
7a:ab:6b:52:bc:9b:23:40:eb:4d:58:db:bd:09:af:b5:2a:b2:
6f:c4:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:29 2024 by rpki-client on console-fra.rpki-client.org