Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/ERn6EA0GUvGPbJuH8Z5CnzdXo9w.roa
File: ERn6EA0GUvGPbJuH8Z5CnzdXo9w.roa (raw, json)
Hash identifier: WB/qwRnPQs4Vjfuda72hvUTRRx+x6ML9gTQyZq5DuqM=
Subject key identifier: 11:19:FA:10:0D:06:52:F1:8F:6C:9B:87:F1:9E:42:9F:37:57:A3:DC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01856F6707D3FFC7B4277840F8CC4D06EA6A
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/ERn6EA0GUvGPbJuH8Z5CnzdXo9w.roa
Signing time: Sun 01 Jan 2023 22:15:01 +0000
ROA not before: Sun 01 Jan 2023 22:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15787
IP address blocks: 212.69.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:07:d3:ff:c7:b4:27:78:40:f8:cc:4d:06:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 1 22:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1119fa100d0652f18f6c9b87f19e429f3757a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:38:eb:73:62:c2:be:65:21:00:76:36:7f:
2b:9c:9f:f6:54:65:ca:24:a2:aa:79:ef:ce:62:2f:
f3:04:a1:51:af:f6:42:d7:e6:d6:ff:2e:4b:1d:ec:
91:69:2a:da:5f:bd:3e:cd:73:28:fd:2f:e0:6e:6d:
57:76:d1:51:12:bb:2a:07:3f:61:40:63:4c:eb:35:
22:a2:44:73:44:00:c6:ff:25:e8:e4:99:ce:25:cb:
f0:23:aa:7e:df:ec:04:41:88:12:2e:3c:9f:c2:5d:
46:f2:df:22:dc:d8:1f:6a:ec:7a:26:3d:dd:9f:95:
8d:fb:57:9f:81:e8:e5:21:08:e4:7e:cc:c5:c0:00:
f0:e1:a5:a1:c1:d7:d6:a7:6b:f7:09:13:01:60:c8:
c7:11:97:76:c2:12:d5:64:44:60:c4:05:11:9b:89:
fe:63:51:ee:79:35:b7:29:cb:66:5f:fd:47:70:47:
c0:96:14:f3:89:fc:c8:cd:40:02:c2:55:60:cc:58:
bb:50:3f:b7:26:a1:d6:5a:4b:46:ea:77:e9:4e:ba:
1d:42:c2:03:8e:d8:62:bd:6c:15:8a:5d:41:f2:54:
cd:16:c5:a1:1d:ab:91:2c:84:7b:bf:85:90:fb:e4:
79:7e:a4:4d:75:08:b8:1b:77:96:fa:23:aa:f9:8f:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:FA:10:0D:06:52:F1:8F:6C:9B:87:F1:9E:42:9F:37:57:A3:DC
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/ERn6EA0GUvGPbJuH8Z5CnzdXo9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a7:a5:8f:1d:11:3a:c6:47:52:92:d6:2b:9e:7b:c9:47:c2:
c9:65:6b:a9:07:04:b4:d7:a1:45:ee:d0:ae:31:c5:83:ba:f5:
f2:0f:1e:c5:61:1d:8c:3b:c2:9e:fd:11:57:7b:cf:a3:d4:f6:
3d:a4:79:c1:2b:51:da:5f:34:2a:fa:30:e4:0d:6c:41:8b:06:
04:58:cc:da:91:c1:63:93:39:69:86:f7:11:df:06:87:31:34:
0f:12:97:35:07:82:ba:ba:f7:c8:74:2d:17:c2:56:e0:96:47:
8e:5d:2e:a5:c7:52:e6:b0:27:00:ff:96:41:61:d4:dd:40:88:
72:75:cc:20:4d:f2:f7:30:bd:8a:b4:5b:30:a4:fd:65:a5:68:
40:6f:d5:24:93:24:2c:89:4b:0d:25:e7:6e:1d:68:fa:a5:12:
40:b2:e5:9d:21:41:0f:54:aa:2c:e4:ca:f3:ea:ba:3e:c4:68:
c2:5c:6b:09:1b:7c:3d:78:43:5c:b5:59:c0:1e:cb:50:3b:58:
da:d9:8d:b2:56:5a:9f:85:36:7f:1e:46:d6:22:c7:86:9d:06:
a8:92:53:1e:a8:cd:3d:04:e5:75:ae:cc:b0:6f:1d:b1:dd:03:
7e:09:32:f9:0a:0b:6c:c8:88:61:fe:ba:9d:37:3b:1b:d0:5c:
bc:8b:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:05 2024 by rpki-client on console-fra.rpki-client.org