Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/y8vVXSFUC5w-EtQ1ZVaiywOFXyk.roa
File: y8vVXSFUC5w-EtQ1ZVaiywOFXyk.roa (raw, json)
Hash identifier: Q2e0Y+s3lPQYT1dNMneQPuY+tAwTjVvlo+hnYp0jgi0=
Subject key identifier: CB:CB:D5:5D:21:54:0B:9C:3E:12:D4:35:65:56:A2:CB:03:85:5F:29
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 018CC9BCB7A6300D24D0B5CC3AD6EFADD824
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/y8vVXSFUC5w-EtQ1ZVaiywOFXyk.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0:2::/48 maxlen: 48
2a12:bc0::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 May 2024 16:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b7:a6:30:0d:24:d0:b5:cc:3a:d6:ef:ad:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbcbd55d21540b9c3e12d4356556a2cb03855f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:ec:a5:a2:bd:cf:9f:b2:82:a5:7a:e8:03:
d5:1a:a0:d9:fe:e1:28:02:d7:ee:11:8c:a1:e3:c2:
14:ed:c7:df:b3:4a:c5:ca:07:8c:f5:ad:e0:fa:6e:
f3:37:a4:a6:4e:4a:89:7d:8c:8f:39:14:70:54:1a:
73:8a:6d:f3:94:59:89:c4:be:00:d2:bd:ec:dc:aa:
d9:7a:25:ff:ad:77:e4:dd:0f:df:65:c5:3e:6a:6f:
59:60:4a:06:f8:9a:e9:a8:f6:45:aa:bc:35:b0:f2:
13:65:de:21:4e:88:69:1b:28:13:ea:ee:77:78:a4:
8a:5f:ca:f9:c4:9b:62:27:16:5b:ab:fc:b8:8b:07:
73:f0:59:cc:25:86:8e:78:1b:a4:31:ae:2e:79:a4:
41:83:78:41:ca:1d:7d:53:34:84:e4:d7:a0:cf:48:
7e:16:7a:bc:45:03:22:47:b9:d4:58:0c:f5:57:15:
75:16:17:30:94:82:7a:b4:61:02:05:b0:01:db:aa:
47:e2:97:c4:67:bb:95:29:40:73:06:e4:bd:68:0f:
09:df:c1:39:7b:d0:56:f6:3e:52:62:73:08:94:b6:
ae:6e:42:62:93:3b:17:88:94:3a:73:de:41:5f:48:
7e:56:5e:4b:e5:50:e2:84:1c:b6:c4:4b:58:ab:6e:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CB:D5:5D:21:54:0B:9C:3E:12:D4:35:65:56:A2:CB:03:85:5F:29
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/y8vVXSFUC5w-EtQ1ZVaiywOFXyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:94:43:51:87:af:5d:ec:e0:86:2a:dc:de:c7:f6:09:50:9b:
a8:b9:87:1a:35:d5:f4:48:2b:e9:5e:8c:b8:e0:28:eb:5b:9d:
06:9c:f4:c2:6e:8f:a9:48:63:07:e3:55:95:0b:8b:b6:2d:3b:
14:28:bb:9e:cd:6b:ff:e6:ab:b2:7c:8e:66:25:1b:f9:58:64:
c4:8f:89:e3:2b:db:5c:1d:70:e5:fa:57:4c:9e:af:11:bb:a6:
4c:21:b3:1e:be:2f:19:87:ae:ac:79:a8:a9:76:8e:48:27:b1:
27:cd:ef:fe:05:1c:61:5f:f0:b9:b2:34:f7:f5:22:a3:e3:27:
b7:bf:e2:94:4f:79:92:ae:4f:95:00:f4:74:47:16:da:be:33:
9b:e5:21:11:d1:ea:2f:c4:b9:17:8a:84:be:35:4a:e3:7d:bc:
6c:b1:0a:bf:2b:a2:a5:ca:f6:43:36:bd:14:b0:8f:eb:0e:ff:
cf:81:32:c9:8c:33:fb:89:f5:a2:f8:2b:85:16:44:f0:c6:d5:
fb:26:23:e7:a7:25:85:e6:e3:5d:8f:8e:bc:f2:fa:1f:2f:00:
b3:eb:57:39:f7:96:81:c0:4f:12:48:39:89:a1:0b:4d:55:fd:
7f:70:9b:13:91:9b:ad:69:2e:80:b7:2d:47:41:2e:2d:b9:c5:
44:2a:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org