Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/xXcyAb9KPf1c0Qdcl5qvcFDMciE.roa
File: xXcyAb9KPf1c0Qdcl5qvcFDMciE.roa (raw, json)
Hash identifier: l9MMOQSDnVkNaYzhNyk8AKqmXZzp9ROzkGs4ieALy8o=
Subject key identifier: C5:77:32:01:BF:4A:3D:FD:5C:D1:07:5C:97:9A:AF:70:50:CC:72:21
Certificate issuer: /CN=8da152983240e90495f7605c442547d90283e1e0
Certificate serial: 01856D8193647ED17D366652A02A328097C3
Authority key identifier: 8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/xXcyAb9KPf1c0Qdcl5qvcFDMciE.roa
Signing time: Sun 01 Jan 2023 13:24:46 +0000
ROA not before: Sun 01 Jan 2023 13:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.52.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:93:64:7e:d1:7d:36:66:52:a0:2a:32:80:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da152983240e90495f7605c442547d90283e1e0
Validity
Not Before: Jan 1 13:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5773201bf4a3dfd5cd1075c979aaf7050cc7221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:18:3f:4c:d1:3a:51:92:6c:2a:8d:6f:31:
df:33:a4:c1:67:b7:72:e2:d3:02:90:53:7f:f3:ee:
58:17:35:55:0b:ea:60:76:67:f9:8f:24:91:1d:57:
d7:59:7f:9e:46:23:f7:83:32:00:92:01:e8:44:5b:
24:33:f9:0f:49:fb:0b:88:82:87:c2:a1:72:5d:7b:
8b:a1:60:a8:17:f5:d9:2a:1d:98:48:a5:1d:95:44:
e5:05:02:c4:a3:9a:2a:34:f5:88:0b:a6:ae:9b:47:
d7:c2:fe:5d:27:e6:a7:5b:9b:3b:ee:d5:80:92:ca:
71:7d:8a:55:c9:f0:66:12:d1:88:0f:2a:c0:cc:98:
28:68:4b:ed:e5:5d:44:fe:53:b3:f3:9a:74:96:5b:
20:1f:c9:d6:5c:4a:47:5f:be:91:a2:4d:5d:dc:bf:
ca:38:81:a6:a4:ce:29:c2:18:7e:c3:1b:58:05:63:
3d:64:98:a9:ac:bb:74:f6:05:9a:ed:0d:d6:1d:ac:
40:ba:63:2a:82:40:c5:9e:cc:78:3b:2c:04:a5:6a:
18:95:34:69:f8:68:93:9c:83:37:fb:4e:af:da:3e:
9d:cb:67:f8:fc:c8:b5:89:a1:28:96:55:c5:73:7f:
3f:f5:36:64:bb:83:f0:f8:4b:20:37:4f:a8:78:93:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:32:01:BF:4A:3D:FD:5C:D1:07:5C:97:9A:AF:70:50:CC:72:21
X509v3 Authority Key Identifier:
keyid:8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/xXcyAb9KPf1c0Qdcl5qvcFDMciE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5b:51:cd:ea:08:11:a1:9a:c8:14:4c:56:32:be:71:85:de:
be:c2:14:bc:64:06:02:5e:24:cf:19:e7:0c:03:6b:75:b3:6a:
b8:5f:a9:d0:b8:4f:fb:d7:cc:ef:a9:94:37:24:38:88:65:63:
de:c8:0d:6f:51:c8:b9:a0:f3:0f:26:f4:e5:de:ec:9e:6d:13:
42:70:c7:d0:df:eb:06:11:35:62:4e:d4:d8:97:bf:85:f5:61:
6c:a9:a4:2e:a0:9a:f3:97:e0:e4:0b:c2:4a:69:8e:39:8d:38:
51:18:87:3f:f9:f6:89:2e:4b:a1:a5:65:73:06:f1:58:d2:1a:
e5:44:d6:7c:77:51:3b:5b:06:b0:10:dc:be:10:ab:30:0e:a9:
86:d8:7c:4c:18:56:a1:eb:b5:96:2a:7b:9d:3e:38:2f:4c:4b:
9b:07:53:49:d4:e6:8c:c8:30:1c:ca:7a:6b:e5:33:2c:35:4e:
bd:ec:6c:02:1c:a6:0b:90:56:24:2a:e6:a0:67:b1:07:67:9d:
c4:05:ff:bf:5c:e9:6b:12:72:38:23:47:12:52:88:6c:51:3e:
f3:bd:92:45:76:c4:09:af:a7:7a:99:79:6a:fa:c5:ab:f6:be:
68:47:0b:dc:1e:5d:bd:7e:f3:9e:3e:a8:fc:a4:84:8d:90:68:
89:76:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-fra.rpki-client.org