Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/ixn9JQMTA7f_xjK2FsLYzud5itY.roa
File: ixn9JQMTA7f_xjK2FsLYzud5itY.roa (raw, json)
Hash identifier: a7ZTIVRbPGP/0IL4/qo5f0OFK95RLBtI9uoho1LDxWY=
Subject key identifier: 8B:19:FD:25:03:13:03:B7:FF:C6:32:B6:16:C2:D8:CE:E7:79:8A:D6
Certificate issuer: /CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
Certificate serial: 01856F94C300BB3A17C7CE19028404E2B54A
Authority key identifier: 4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/ixn9JQMTA7f_xjK2FsLYzud5itY.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.52.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c3:00:bb:3a:17:c7:ce:19:02:84:04:e2:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b19fd25031303b7ffc632b616c2d8cee7798ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:4e:fe:e6:ef:1b:03:ef:c5:6f:8c:43:b5:
13:bc:36:70:51:da:91:96:12:33:00:e0:85:2a:90:
6f:42:00:83:5e:e3:03:d7:1a:53:7b:6b:7a:a8:3e:
73:c9:21:a9:94:8d:06:fa:62:87:5d:19:84:ea:fb:
83:95:e7:0a:52:7f:0d:f6:ad:ab:99:61:77:ed:77:
c4:78:b1:1d:b3:0b:7e:99:59:f5:fc:59:b5:b7:1d:
23:5b:6c:7a:5e:3f:75:a9:c9:d4:d2:5b:30:e7:d0:
b9:a3:3a:5e:ed:93:07:58:cf:ae:35:3b:bc:75:d1:
70:2d:93:6e:fa:50:c6:dd:25:4b:25:52:4e:f7:83:
3a:36:27:01:74:0c:7a:6a:f6:85:9a:c5:03:8e:9e:
82:c1:1e:92:56:42:29:6d:33:57:d0:a1:94:c0:44:
29:d1:41:ec:d2:92:95:56:05:fc:ca:5f:c3:f5:93:
98:62:9f:01:83:70:b5:d7:5a:49:19:00:01:d7:38:
42:28:5d:d3:59:a5:37:e7:71:3d:13:c2:9d:d4:35:
5e:f4:7a:91:82:d1:d2:95:06:59:19:40:df:a2:eb:
df:67:84:9f:8a:ed:b4:3a:19:91:d0:38:0f:35:6a:
2b:9d:61:ac:13:e5:02:c7:82:bf:c7:29:fc:9b:2b:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:FD:25:03:13:03:B7:FF:C6:32:B6:16:C2:D8:CE:E7:79:8A:D6
X509v3 Authority Key Identifier:
keyid:4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/ixn9JQMTA7f_xjK2FsLYzud5itY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.9.0/24
Signature Algorithm: sha256WithRSAEncryption
85:21:7c:7e:ce:d6:5d:ab:5a:bb:b7:ae:4c:b5:ba:67:71:62:
3d:fe:57:3f:11:c3:53:46:6d:20:07:00:7c:6a:e8:0d:60:9a:
13:25:41:f7:c4:db:0d:f1:f7:7d:d0:8e:8b:30:98:e4:05:31:
00:1d:59:68:62:3b:e7:b7:22:11:2a:a9:2d:d0:b6:05:9f:a8:
5a:35:25:7e:3d:2f:e7:15:c9:7b:72:94:76:c1:81:ed:da:35:
ba:89:ee:a7:7d:f8:7d:89:d5:a8:f3:a8:7e:34:c8:b2:d1:ab:
07:90:b6:07:7d:7f:98:81:fd:38:bd:37:8c:34:f1:00:21:db:
a0:7f:25:f6:4e:11:40:16:ad:6b:e2:e2:79:ef:c7:f3:31:26:
5b:6a:06:57:cd:de:8a:f1:c1:ba:02:9e:0a:37:31:41:c0:8b:
e4:46:3a:2a:0b:59:28:02:3d:20:7a:21:d4:b9:00:d3:c3:5b:
5c:d7:f2:34:57:c0:46:07:2a:71:2f:0d:84:6d:ef:1c:d9:e8:
ae:d9:7b:00:bb:b6:a7:4b:cb:95:9c:e3:10:5d:5e:64:90:7b:
a6:0d:07:1d:f2:4d:6c:08:db:b5:05:a2:80:42:6d:1c:29:23:
b2:38:3a:2f:23:56:88:6f:68:76:0a:c7:46:37:59:ba:eb:e4:
d3:7d:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:26 2023 by rpki-client on console-ams.rpki-client.org