Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/_Z8PqcX_suJ5qxwA0svF1Z0eci0.roa
File: _Z8PqcX_suJ5qxwA0svF1Z0eci0.roa (raw, json)
Hash identifier: fRP5+Y4SYh/JRi7nGi8mdF6KWNnFVIOHTT0nQw3zkl0=
Subject key identifier: FD:9F:0F:A9:C5:FF:B2:E2:79:AB:1C:00:D2:CB:C5:D5:9D:1E:72:2D
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB89B3C593C5CDF02A68D679F0A5AC
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/_Z8PqcX_suJ5qxwA0svF1Z0eci0.roa
Signing time: Mon 02 Jan 2023 00:04:48 +0000
ROA not before: Mon 02 Jan 2023 00:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56856
IP address blocks: 212.21.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:89:b3:c5:93:c5:cd:f0:2a:68:d6:79:f0:a5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd9f0fa9c5ffb2e279ab1c00d2cbc5d59d1e722d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6f:d4:7c:ff:f7:63:72:84:af:a2:53:89:4c:
4b:df:2b:28:34:f9:b4:cf:bd:14:a4:45:9f:82:ff:
8b:5c:16:47:23:da:44:91:aa:c7:8c:e5:7f:51:f7:
1f:49:70:95:0b:12:73:d0:ec:32:f3:ab:04:28:f7:
6e:dc:fa:99:7d:76:20:5c:91:3b:54:42:f7:2c:1b:
73:19:37:6d:7c:5f:cc:78:89:91:81:1a:03:31:69:
a3:b4:a0:40:1d:cc:0e:eb:5a:04:ab:88:1b:51:79:
e1:ed:29:98:56:a7:92:6c:3e:e9:6c:b6:d6:a9:26:
54:1a:d1:d1:79:97:59:ab:4d:43:37:a7:a6:b9:0b:
d1:22:be:b0:a6:d9:d0:42:38:5f:04:ac:b4:8e:e3:
59:6f:0b:97:f9:7e:2f:45:a4:f2:ad:2f:a9:a4:fe:
99:2f:ae:fb:25:bb:19:3d:37:0a:92:e8:e2:f3:67:
60:de:e7:09:85:0e:fa:d1:cc:8d:63:fd:73:89:bb:
75:9b:76:57:64:c5:24:b9:b2:1e:60:46:24:24:7a:
c5:d0:de:e5:8a:0d:3d:ef:f6:02:7f:31:8a:5f:9f:
68:60:15:0e:33:24:74:8a:a7:27:a0:3c:45:6c:07:
75:10:45:f2:f9:37:10:3f:45:ec:3c:af:5a:73:0f:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:0F:A9:C5:FF:B2:E2:79:AB:1C:00:D2:CB:C5:D5:9D:1E:72:2D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/_Z8PqcX_suJ5qxwA0svF1Z0eci0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2e:14:0b:cf:32:87:00:5f:91:17:dd:c1:3d:4e:3e:f2:ee:
53:17:7b:dd:90:1a:a1:ec:39:24:17:c0:f9:90:1e:64:15:3b:
96:ca:68:4e:f9:1a:d9:06:80:b1:eb:29:0b:c6:71:ca:97:b6:
ce:cc:20:df:a7:3c:64:cb:dd:f1:42:23:ea:e3:c0:88:2b:53:
df:03:c6:19:34:55:64:1a:b9:1a:96:4e:fa:4e:08:fb:19:1a:
fa:34:fc:64:b4:f7:46:7a:82:77:d8:1a:f9:00:f4:f0:dc:66:
2e:69:0e:9c:c7:2f:52:bb:cc:5a:a8:06:a9:5c:c7:c6:33:ba:
70:26:8b:80:b9:4a:8b:d1:d9:7e:ce:e2:f9:41:86:2b:42:15:
ff:aa:ba:8e:af:b4:6e:fb:17:37:2f:d4:68:8b:00:a7:5d:19:
a3:b5:38:70:bd:92:c9:3c:76:b2:bf:f1:2b:02:6c:d0:cf:60:
58:88:6c:e9:c5:af:df:bb:15:c4:ff:41:3e:5d:12:a7:7a:11:
12:67:20:71:64:70:f4:e9:9b:78:50:d3:c1:75:2b:63:a0:b2:
ba:6b:27:5f:46:31:71:e2:7f:43:e6:b5:5c:a7:2f:32:cd:ed:
29:6a:7b:a4:39:13:c0:bb:cc:7c:3e:b1:59:5a:d2:a0:86:07:
53:b5:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:29 2024 by rpki-client on console-ams.rpki-client.org