Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_tPCIDc1JCDKcqeXQxfA2avKDYA.roa
File: _tPCIDc1JCDKcqeXQxfA2avKDYA.roa (raw, json)
Hash identifier: Eb1NHoMs7EztvAlW+RJITUSRky9xSdWAiNeFotKjt0Q=
Subject key identifier: FE:D3:C2:20:37:35:24:20:CA:72:A7:97:43:17:C0:D9:AB:CA:0D:80
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018BF1D13698159EBD5122FA73671B80AB8C
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_tPCIDc1JCDKcqeXQxfA2avKDYA.roa
Signing time: Tue 21 Nov 2023 12:18:21 +0000
ROA not before: Tue 21 Nov 2023 12:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 212.23.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:d1:36:98:15:9e:bd:51:22:fa:73:67:1b:80:ab:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Nov 21 12:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed3c22037352420ca72a7974317c0d9abca0d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:3a:70:ab:ca:96:20:24:ac:5c:33:ea:9e:
a5:10:dd:aa:b0:ae:0a:74:e7:df:c8:19:23:17:c9:
d4:8a:a1:2c:3d:12:18:cf:d1:60:5e:a3:50:8b:4e:
1f:a9:c1:ed:22:5c:f6:a4:bc:5b:0f:f6:12:88:88:
7a:09:29:9b:e0:a2:e2:ed:31:11:e5:ac:ac:6c:0d:
d1:7f:1b:f6:75:9d:90:61:94:87:74:03:ca:00:8c:
2e:9e:e8:3f:ab:23:99:05:7f:e0:56:55:05:66:1c:
42:54:99:ae:db:3a:a2:ed:28:d6:83:e6:b9:e1:d6:
fe:4c:41:2d:14:6d:63:6f:61:79:a2:13:36:32:47:
cc:74:a4:95:7e:c0:6a:10:60:c1:66:27:76:91:1b:
50:2f:49:06:4d:49:c7:8f:7b:0b:dc:eb:7d:db:15:
b7:1c:3e:03:34:82:c0:1a:36:0d:0b:b8:3b:f3:99:
39:9d:0f:0e:32:e9:3e:54:6d:51:2a:af:25:12:b1:
a5:17:96:60:75:01:a2:bb:b0:58:60:68:ba:0d:37:
f2:30:77:30:57:78:9a:9d:0c:bb:eb:b6:2c:8f:0e:
ff:93:c5:7f:f1:16:a3:73:36:91:88:5d:a0:47:07:
40:97:fa:d0:f8:4d:c2:5b:e7:2b:c3:eb:c1:10:ae:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D3:C2:20:37:35:24:20:CA:72:A7:97:43:17:C0:D9:AB:CA:0D:80
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_tPCIDc1JCDKcqeXQxfA2avKDYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:57:2a:2d:35:7c:72:6c:b3:3a:8a:01:16:ec:2e:9c:18:ac:
e9:94:10:9f:30:62:bb:00:2d:d9:8d:10:0b:84:03:e2:ee:79:
58:a8:03:6f:83:ae:ac:a6:c0:df:b2:d2:14:f1:74:5e:1e:0b:
fb:f4:2d:31:44:24:3e:ae:57:68:f8:33:da:47:45:9d:85:02:
bd:13:c9:43:6e:53:d0:5a:37:6b:d3:15:31:aa:d0:13:d0:4a:
b7:3d:b8:80:f0:57:4d:5e:52:b7:ec:99:b5:c1:a3:8a:d4:ab:
01:9d:d4:b5:b4:29:96:85:e7:16:58:8f:1b:c7:fb:45:00:aa:
3e:3b:af:1e:f1:9e:89:01:eb:68:22:3c:8c:1f:0c:79:87:c5:
52:71:7b:a3:9a:42:53:5b:ba:e3:79:b0:f9:1d:37:2b:ca:34:
8c:3e:c1:86:ea:69:ba:90:d7:ac:35:cc:2c:e1:33:85:3a:a1:
65:09:8b:7c:f8:11:31:ae:f9:34:19:54:d6:56:0e:48:79:90:
c6:00:05:75:af:6f:11:71:bc:dc:ad:21:bb:73:ca:ad:40:21:
5f:cb:8e:5c:25:e7:a9:a0:1c:98:9a:1f:f1:f4:93:3a:4d:8e:
9f:67:cb:b0:79:97:1f:fb:5b:1d:a9:a7:84:ee:06:15:c9:b5:
79:a6:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:06 2024 by rpki-client on console-ams.rpki-client.org