Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/J_2TBR6mMdzvpG-3wW_9sFxPkw8.roa
File: J_2TBR6mMdzvpG-3wW_9sFxPkw8.roa (raw, json)
Hash identifier: Uy7G2640yTJneU83p2H11ypD/VAMiBs16FFUStEa8VE=
Subject key identifier: 27:FD:93:05:1E:A6:31:DC:EF:A4:6F:B7:C1:6F:FD:B0:5C:4F:93:0F
Certificate issuer: /CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
Certificate serial: 018572CCAD9165B4FFA2F2EC50D72FF34245
Authority key identifier: 29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/J_2TBR6mMdzvpG-3wW_9sFxPkw8.roa
Signing time: Mon 02 Jan 2023 14:04:54 +0000
ROA not before: Mon 02 Jan 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.52.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:ad:91:65:b4:ff:a2:f2:ec:50:d7:2f:f3:42:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
Validity
Not Before: Jan 2 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27fd93051ea631dcefa46fb7c16ffdb05c4f930f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:b7:28:13:c8:3b:3a:b7:b0:9c:0c:49:46:
64:77:f2:f1:24:31:93:a4:4f:7d:c2:ab:86:a7:6d:
4a:9b:47:91:f5:cf:16:1c:22:51:a6:99:38:a2:7e:
51:9d:44:65:53:8a:0d:7d:cf:6c:26:f6:a1:ec:08:
fa:eb:8a:7e:15:f7:fb:64:ec:22:63:90:a4:19:95:
b0:d7:94:b6:ca:67:f0:4a:c7:8e:79:80:3c:37:4c:
83:b6:2d:af:25:b8:d4:1d:e6:80:8f:50:cf:53:41:
c3:27:b1:53:3d:18:50:d6:04:0a:7e:8d:d8:ae:f1:
77:2b:87:39:0e:97:06:1a:4b:81:83:35:07:be:f1:
ed:1d:91:24:e4:1f:8e:83:e8:e6:f2:c7:b6:5c:7d:
ae:b9:61:9a:7a:22:5b:ac:a8:96:71:56:a3:99:5d:
39:45:2b:1a:bd:42:92:c6:5f:5f:21:4a:41:f9:a5:
f1:4d:12:01:f5:55:0c:19:78:06:a6:10:4c:49:12:
7b:11:b5:02:82:9c:98:63:96:46:ed:2a:13:d8:cd:
05:12:9a:8a:37:5c:26:17:66:36:76:b2:8b:68:5f:
16:10:9d:ee:83:3c:98:12:24:06:c1:5c:7c:7e:a8:
69:de:a8:99:77:7a:77:71:b5:10:67:c7:8e:60:ee:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:93:05:1E:A6:31:DC:EF:A4:6F:B7:C1:6F:FD:B0:5C:4F:93:0F
X509v3 Authority Key Identifier:
keyid:29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/J_2TBR6mMdzvpG-3wW_9sFxPkw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.10.0/24
Signature Algorithm: sha256WithRSAEncryption
97:94:5f:0c:c2:68:fa:1e:c6:2c:d4:2b:90:bc:e8:79:ad:db:
8a:09:8d:02:ab:30:83:4d:78:42:85:17:a3:91:f0:e9:75:a9:
6b:84:c6:c1:a8:7a:62:ad:3e:a5:a2:2e:74:9f:76:e1:ff:98:
96:76:87:0f:0b:c3:5a:a8:1a:06:d5:ef:c5:61:8e:66:aa:f4:
e4:f3:56:2e:29:0a:aa:5b:2c:60:7a:0e:84:7f:86:b9:10:ce:
d0:ef:f2:8e:96:9b:0f:41:03:12:09:ec:fa:a2:9c:4c:b2:97:
77:09:aa:b4:79:35:15:97:81:25:78:76:5a:67:2b:b6:86:e3:
15:42:47:0a:23:a8:4c:58:e5:bb:9e:ba:7c:8b:f2:88:ec:3f:
33:ef:bf:76:35:55:b9:47:57:aa:cf:d9:c6:51:f9:56:d4:88:
b2:41:36:45:be:ca:06:dc:94:42:19:bd:25:52:e6:f2:c8:20:
f2:38:6b:2b:7c:33:9e:79:e5:a4:1b:43:d7:1a:ca:56:70:7b:
20:c6:e5:fe:a5:6f:26:f9:2b:e6:23:b2:11:2b:2f:02:c3:7c:
88:ad:02:9d:44:c2:94:f8:76:f9:3a:a2:e6:85:00:da:c3:4f:
50:0f:43:d8:7e:ce:d4:01:6d:ac:ee:61:6b:0d:ee:68:92:32:
3a:11:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:32 2023 by rpki-client on console-ams.rpki-client.org