Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/teqqT3glaxa7LElx-8HNZJleNT0.roa
File: teqqT3glaxa7LElx-8HNZJleNT0.roa (raw, json)
Hash identifier: BtHvMCkjqQLn9Zmdi4NuVnn/jc9m+yz/HEKoXNTdbtc=
Subject key identifier: B5:EA:AA:4F:78:25:6B:16:BB:2C:49:71:FB:C1:CD:64:99:5E:35:3D
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 018BA9403014D5E84D74FCE0FF12D3D157E5
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/teqqT3glaxa7LElx-8HNZJleNT0.roa
Signing time: Tue 07 Nov 2023 10:07:17 +0000
ROA not before: Tue 07 Nov 2023 10:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42008
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/30 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:40:30:14:d5:e8:4d:74:fc:e0:ff:12:d3:d1:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Nov 7 10:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5eaaa4f78256b16bb2c4971fbc1cd64995e353d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:4d:b0:63:af:46:3a:72:66:fb:a6:22:3a:
ba:d8:67:6e:1d:be:a1:a7:ad:e5:93:13:9b:44:3e:
bd:1a:4a:a0:6d:27:9d:11:95:67:ad:80:4f:bc:83:
42:ab:d2:91:e1:68:68:60:98:d9:ad:76:c9:52:a3:
a2:e3:d3:92:30:99:d0:52:0d:28:74:9a:13:1b:43:
23:cb:ca:50:65:f7:bf:70:4f:a3:9b:58:f2:88:09:
8a:af:11:5d:a7:41:bb:2b:2b:0a:34:a8:d4:24:cd:
5c:60:8e:74:b1:15:4f:e0:76:b1:89:a6:1d:d6:cb:
fd:2e:7a:f7:2e:ca:fd:6a:ef:62:55:29:79:f1:24:
a5:a9:67:ea:35:c1:dc:06:e6:cd:05:e2:3a:0c:41:
d8:d0:25:16:fe:75:fe:9d:be:81:a7:86:a2:06:77:
65:f4:6d:2d:0b:fb:45:c8:49:61:c4:74:fb:14:de:
c1:67:c9:24:61:78:88:5a:2e:9d:49:18:4c:01:b5:
8b:43:99:0d:d5:a1:5b:5a:8e:e2:02:6e:d7:29:f2:
08:40:0d:7b:46:3b:c3:49:0b:1f:93:b6:ea:ed:ec:
bf:d8:4c:fe:7c:7b:84:cc:5c:73:88:3d:06:ce:06:
32:7f:7e:07:ac:00:85:a9:db:af:0b:ad:70:da:01:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EA:AA:4F:78:25:6B:16:BB:2C:49:71:FB:C1:CD:64:99:5E:35:3D
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/teqqT3glaxa7LElx-8HNZJleNT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/30
Signature Algorithm: sha256WithRSAEncryption
19:ac:51:af:2f:d2:de:5f:e8:b0:ec:d3:08:d1:f0:78:db:0f:
4c:23:5f:33:ea:ef:2a:d9:00:12:eb:41:02:33:d3:94:c8:34:
30:df:92:1d:df:60:47:38:39:d9:12:9b:e6:17:40:f2:be:3b:
37:0d:45:35:34:2f:e1:8f:e3:19:32:72:c4:03:5d:b6:29:a4:
ca:a4:16:cd:5a:e5:91:88:c9:51:33:c8:95:dd:01:c5:db:83:
77:5a:86:e9:36:fd:c3:45:92:98:9a:8a:60:59:38:d2:ba:56:
2a:07:56:4d:82:e3:f4:73:45:d8:e3:12:d4:ab:f7:20:7a:3e:
8a:c6:3e:34:6d:f3:3e:2f:3e:ba:75:93:34:b7:b4:2c:9c:42:
b3:33:36:69:b4:9c:ae:79:ef:f6:0c:fd:5f:08:5b:cb:62:84:
9e:a4:b7:09:b6:7e:a2:0b:01:2c:ae:ad:68:a1:a6:de:6a:2a:
cf:3d:50:31:19:90:c4:af:21:d4:fb:94:4a:d7:a7:69:40:89:
d2:3f:75:27:a4:36:60:59:6b:52:be:56:b5:85:35:91:d2:6b:
06:18:a3:ed:c6:29:a5:67:08:96:e4:f9:89:68:91:29:09:fd:
37:39:6d:c9:56:3f:3e:5f:18:aa:04:f5:82:ca:13:69:d4:b7:
2b:8e:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:34 2024 by rpki-client on console-fra.rpki-client.org