Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/WUD6EgeTmJ39l9PfhyAgrCFyo5M.roa
File: WUD6EgeTmJ39l9PfhyAgrCFyo5M.roa (raw, json)
Hash identifier: vziQUR2lIImti+CJwGII3oBjwvnJQiQUfLXkKniXTlo=
Subject key identifier: 59:40:FA:12:07:93:98:9D:FD:97:D3:DF:87:20:20:AC:21:72:A3:93
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 018571958A1282EE7CAEA945CF8615459BA2
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/WUD6EgeTmJ39l9PfhyAgrCFyo5M.roa
Signing time: Mon 02 Jan 2023 08:25:03 +0000
ROA not before: Mon 02 Jan 2023 08:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 212.101.204.0/24 maxlen: 24
212.101.205.0/24 maxlen: 24
212.101.211.0/24 maxlen: 24
212.101.212.0/23 maxlen: 24
212.101.207.0/24 maxlen: 24
212.101.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 06:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:8a:12:82:ee:7c:ae:a9:45:cf:86:15:45:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jan 2 08:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5940fa120793989dfd97d3df872020ac2172a393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:6f:0e:3f:26:26:e7:01:e1:4a:52:7d:09:
b7:59:be:9c:5f:87:06:7a:72:8b:5d:ea:fb:1a:29:
df:e7:2a:90:a5:73:73:63:e5:ef:7b:5b:c8:ad:a8:
67:b6:85:0e:4d:c1:d7:14:97:1f:f2:5a:b1:87:3c:
c6:03:bb:ba:ab:44:f0:08:de:31:2f:59:76:39:bd:
ab:cc:bb:88:0f:eb:70:08:40:15:8c:0f:11:68:a3:
44:92:b3:7d:e7:bc:72:ce:98:0e:48:28:de:52:44:
39:92:f6:a5:f1:1c:77:6c:55:d9:cd:8d:4c:ca:4c:
d8:87:24:b8:52:b3:d3:9e:c3:2b:cb:b5:f4:28:77:
40:7c:01:c1:6a:d2:b2:c9:2b:e2:9d:2e:ae:88:32:
f3:54:b9:52:42:67:9a:60:67:af:e9:2c:b5:e4:59:
ea:9a:35:e7:da:7a:62:64:98:bb:f3:09:a1:f0:76:
01:d2:29:7a:f4:2a:2e:3f:e6:a9:c9:de:92:57:1e:
c4:f5:d1:e3:cb:85:36:32:77:b2:09:bb:fb:dd:b6:
71:06:f6:34:09:da:af:d8:e0:de:7f:5c:07:11:a2:
3d:a7:f7:bd:15:d1:f7:e9:1e:3d:1f:5a:b1:60:83:
8f:ce:18:02:f2:c4:3a:a8:3e:fd:6f:29:21:6b:0d:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:FA:12:07:93:98:9D:FD:97:D3:DF:87:20:20:AC:21:72:A3:93
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/WUD6EgeTmJ39l9PfhyAgrCFyo5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.204.0/23
212.101.207.0/24
212.101.211.0-212.101.214.255
Signature Algorithm: sha256WithRSAEncryption
a5:d6:63:29:3d:49:bf:aa:67:2a:b3:e2:a4:b5:ec:9c:91:0a:
2a:56:49:91:7f:05:8e:9d:5e:08:39:c3:84:62:fd:ad:af:e3:
d8:d0:e2:23:03:4a:61:33:1d:4e:69:5a:47:61:e6:92:9f:62:
05:9a:78:26:40:af:5d:99:98:8a:50:40:8c:51:af:e2:c6:c2:
2a:d4:0b:b8:78:7b:14:6f:61:b5:78:92:40:3e:bd:96:28:5d:
fb:37:2d:62:4e:bd:df:e3:0a:d1:07:7f:a0:c2:a0:27:d8:00:
46:c4:db:e7:db:5a:c8:2b:e0:20:06:fc:4a:5c:2f:a6:04:54:
12:7f:32:e5:41:94:49:69:a5:74:3b:db:72:1d:ee:fa:19:0b:
86:66:63:f2:0a:96:c5:55:f0:75:4c:d0:c9:4f:6c:a5:4d:68:
86:83:09:59:5f:16:1c:e8:58:c6:bc:8f:e7:90:59:df:dd:a6:
e7:1b:49:33:46:57:b8:23:f8:fd:83:a7:e2:c6:60:72:3d:2b:
a8:bb:fb:88:07:f2:de:28:82:f1:c3:2c:12:c7:77:54:70:a4:
2e:6d:83:2d:c5:94:0c:61:2d:3e:14:5f:ff:fe:4a:e3:15:c2:
9d:98:cd:50:c1:6c:2f:d2:83:4f:85:45:b3:28:4d:5b:79:8d:
3a:c4:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org