Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/hw2BzoKXYuR--3XZdBESkzsrGmI.roa
File: hw2BzoKXYuR--3XZdBESkzsrGmI.roa (raw, json)
Hash identifier: UCVYR9WUguKVdsSgrGJEmeQ8i+jVUt6E2VF0dbWrdkI=
Subject key identifier: 87:0D:81:CE:82:97:62:E4:7E:FB:75:D9:74:11:12:93:3B:2B:1A:62
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01886C62595EDFF4498DB3CE3CD80C96F5DD
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/hw2BzoKXYuR--3XZdBESkzsrGmI.roa
Signing time: Tue 30 May 2023 11:19:24 +0000
ROA not before: Tue 30 May 2023 11:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 212.68.164.0/22 maxlen: 22
212.68.172.0/22 maxlen: 22
212.68.168.0/22 maxlen: 22
212.68.176.0/22 maxlen: 22
212.68.180.0/22 maxlen: 22
212.68.184.0/22 maxlen: 22
212.68.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:62:59:5e:df:f4:49:8d:b3:ce:3c:d8:0c:96:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: May 30 11:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=870d81ce829762e47efb75d9741112933b2b1a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:46:de:1a:aa:d3:15:6d:75:c5:b8:85:05:
cc:6f:c5:b9:b4:92:ad:fb:40:01:e5:b3:bc:22:ed:
90:09:23:8a:a8:19:dc:f3:e2:d1:26:38:cb:ac:d3:
77:5d:64:9e:20:a4:b8:95:a1:72:87:3e:66:de:f6:
29:99:a0:9e:92:f0:ef:ea:3c:9b:11:f2:e4:c0:7a:
6c:9f:30:4d:88:00:9a:40:ea:39:2c:e9:50:f1:12:
05:a5:1d:76:ab:f1:1d:4c:ba:75:10:2f:b7:d3:51:
46:df:c0:3b:d8:8c:a1:2b:7f:a8:80:90:4a:27:cd:
d0:01:c7:e3:93:c1:76:77:2f:69:fd:ba:2c:c6:26:
1e:8b:6a:f9:77:0b:89:9e:07:0e:93:5c:9c:5a:5e:
b5:c9:a9:b5:d8:30:1c:11:2b:51:7c:96:25:97:64:
fb:ff:41:fc:21:bd:79:f1:00:ce:02:93:7a:a0:fd:
d6:7a:15:c2:19:22:dd:02:c8:a7:b0:86:d2:ec:86:
69:38:1a:c8:5a:a9:b2:93:b8:08:35:8e:f8:4b:c1:
1f:3a:40:9a:85:00:c7:90:d3:9c:d6:71:07:b9:3f:
97:e6:de:41:c1:00:91:1d:d2:94:39:63:90:ae:06:
2f:34:9a:6c:0e:cf:6d:c8:a1:e7:02:3f:99:90:80:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:81:CE:82:97:62:E4:7E:FB:75:D9:74:11:12:93:3B:2B:1A:62
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/hw2BzoKXYuR--3XZdBESkzsrGmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.164.0-212.68.191.255
Signature Algorithm: sha256WithRSAEncryption
43:d6:bc:fe:5f:07:ca:c7:22:65:26:7c:17:a9:6d:5e:33:b3:
66:9e:d1:c3:74:04:a7:50:ed:da:48:14:d1:f4:2d:2a:b1:19:
16:c1:6f:07:3a:d9:f7:95:c1:99:8d:41:d7:c9:20:78:cc:4d:
72:65:f3:22:e3:5e:74:43:b7:a6:dc:48:d0:7f:c8:f2:c5:4a:
46:58:8e:a7:a1:a9:4d:2f:cf:34:08:e3:02:c8:1d:a8:51:a6:
6b:fe:29:9b:db:c9:05:c0:d7:51:b3:78:b6:ef:53:10:c3:61:
6c:2d:be:8d:21:73:1b:6d:65:70:7a:32:1e:16:d4:8a:5f:9b:
41:7f:cf:28:bc:82:53:dd:13:c0:86:32:4e:aa:9b:e2:58:b2:
8a:38:ae:85:29:fe:5a:92:c8:bb:cf:9e:59:e5:9e:4f:0e:05:
cf:18:80:8d:d6:e9:3e:dc:c7:60:40:c4:56:8f:65:4c:e2:a1:
fe:76:dc:b8:12:67:74:26:30:61:4f:9b:99:d0:ac:97:4b:6b:
db:5e:ef:dc:4d:8c:6f:4a:47:63:d9:33:6b:99:78:63:20:59:
48:4e:e4:a4:b4:e1:91:bc:21:bf:19:7b:f1:e8:55:34:8d:0e:
f4:4f:9f:cb:f2:34:96:93:70:13:2a:e1:0b:0e:15:c1:6d:7b:
01:6a:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org