Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/T1hloOjBIr3rNxD-66JHG5Q5W04.roa
File: T1hloOjBIr3rNxD-66JHG5Q5W04.roa (raw, json)
Hash identifier: r7iEkt6h+MYjZbH9lpQm4wZn/vAfvvCLJJY6guc1kLs=
Subject key identifier: 4F:58:65:A0:E8:C1:22:BD:EB:37:10:FE:EB:A2:47:1B:94:39:5B:4E
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DD30535DF18EA69BA8AF4BAD64D75
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/T1hloOjBIr3rNxD-66JHG5Q5W04.roa
Signing time: Sun 01 Jan 2023 22:04:57 +0000
ROA not before: Sun 01 Jan 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205902
IP address blocks: 212.183.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d3:05:35:df:18:ea:69:ba:8a:f4:ba:d6:4d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5865a0e8c122bdeb3710feeba2471b94395b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:f8:02:21:08:0f:17:f2:70:93:2d:80:33:
50:c8:f9:4c:53:ad:f2:dd:4d:45:61:89:11:fd:ad:
ac:39:83:c6:9a:db:33:56:e0:4f:09:14:98:ce:a7:
44:bf:d2:f5:b5:9e:38:0d:00:94:f6:fd:0d:fd:cd:
15:00:7e:c4:17:bc:65:c4:4b:46:36:37:20:a3:35:
0f:b8:a2:d3:97:3d:36:03:10:35:34:79:b0:a5:c3:
96:97:5f:bc:cc:a8:b9:a7:93:34:cf:56:de:d2:c0:
a3:01:39:65:35:15:bd:97:4d:17:44:83:e6:c6:30:
ec:c8:25:58:b2:68:cd:02:32:5d:6c:2e:c0:cd:30:
95:ba:bd:ad:65:ae:87:6b:57:6d:51:d4:0e:d4:1a:
d9:33:7e:05:64:d4:ea:fa:e9:da:fa:fc:ad:87:21:
54:0a:a5:aa:4c:f7:33:2a:c8:f2:52:55:8f:46:d1:
d6:17:81:17:84:cc:47:02:93:39:69:6e:99:94:eb:
09:4e:8e:e7:32:3f:5f:c9:7f:5a:92:bc:6d:be:38:
40:9f:65:5e:55:7a:bd:b9:7b:64:40:31:4d:44:76:
06:71:3a:0a:5e:71:b9:07:0a:5d:54:ec:78:6e:ee:
e6:33:73:fc:9b:2a:de:5e:86:b3:83:54:cc:e5:43:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:65:A0:E8:C1:22:BD:EB:37:10:FE:EB:A2:47:1B:94:39:5B:4E
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/T1hloOjBIr3rNxD-66JHG5Q5W04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.27.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3b:1b:e5:0c:32:60:e9:8c:16:af:5a:16:be:91:92:7b:fc:
c7:be:3a:48:b4:91:bf:93:bf:92:1a:f2:e9:45:2b:9c:e7:bc:
4b:3b:eb:57:d1:50:11:77:19:9d:61:04:c0:89:8e:a8:96:e1:
4c:6f:ef:4c:ba:d6:f2:6b:c1:91:f4:11:37:7b:ef:9e:8e:21:
9d:26:38:06:40:25:8f:a4:11:01:3e:2e:07:5d:3d:d6:0f:e7:
7d:cb:78:11:5a:01:73:78:f6:a1:b5:fe:a1:ec:b2:6d:37:7d:
24:38:31:31:96:56:92:b2:af:aa:f6:f9:c3:89:24:94:0e:55:
61:ea:fe:83:e6:d1:81:82:a9:83:ba:46:9f:59:a0:65:ca:20:
34:10:67:53:aa:53:21:84:f0:f0:87:10:79:bf:8f:e3:70:bc:
8d:e9:e5:a2:e7:a8:d9:9f:26:68:92:f9:b5:35:ed:34:b8:7c:
7b:74:b8:0e:83:3a:a6:8e:d7:7e:8e:52:3d:6f:6a:f6:47:30:
56:ee:dd:d4:01:ba:96:09:a9:55:05:04:38:bd:ee:92:8f:8f:
f5:0a:08:72:a8:bd:fc:81:d4:10:02:b5:29:2c:c5:8e:08:d7:
86:f5:13:51:d3:33:10:14:8f:75:d4:bc:96:dc:ab:66:36:af:
4e:36:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org