Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/uIOgGsbHunNVXOZp7DONDmoYrjo.roa
File: uIOgGsbHunNVXOZp7DONDmoYrjo.roa (raw, json)
Hash identifier: XQ49PFA2zTYQkK3gbSvhlELhArZJX/tdBLxkUkxVi+I=
Subject key identifier: B8:83:A0:1A:C6:C7:BA:73:55:5C:E6:69:EC:33:8D:0E:6A:18:AE:3A
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01856F670703BCC7F542C8F177CBCB120604
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/uIOgGsbHunNVXOZp7DONDmoYrjo.roa
Signing time: Sun 01 Jan 2023 22:15:01 +0000
ROA not before: Sun 01 Jan 2023 22:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8798
IP address blocks: 212.69.76.0/24 maxlen: 24
212.69.72.0/22 maxlen: 22
212.69.78.0/23 maxlen: 23
212.69.80.0/23 maxlen: 23
212.69.64.0/21 maxlen: 21
2001:4028::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:07:03:bc:c7:f5:42:c8:f1:77:cb:cb:12:06:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 1 22:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b883a01ac6c7ba73555ce669ec338d0e6a18ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:d7:cf:29:2e:fc:ee:55:a1:94:22:95:23:
09:a9:14:fb:eb:80:a6:f7:f2:0b:04:d5:1c:8a:ae:
c0:6c:5e:d5:3d:7c:73:9a:c9:1e:0c:43:af:15:8c:
6f:d4:34:21:76:bb:d7:97:c0:ef:b9:7f:3c:75:b0:
1d:27:9b:b6:43:35:24:b4:e1:cf:5e:63:d1:fa:c9:
52:fd:33:36:fc:b9:12:7a:34:b0:cc:ec:ae:55:22:
52:2d:0e:91:f2:22:3d:06:56:ba:03:59:ad:70:db:
12:3b:59:d7:a9:77:72:2c:4c:83:6c:cd:b3:84:c7:
76:41:b8:27:7c:34:24:a2:fe:e0:6c:89:0c:d8:57:
6c:cb:25:f2:a4:df:17:b6:80:7b:4d:7a:b1:68:b3:
29:ce:d3:38:ca:2e:2c:3b:8e:4f:e7:d3:4e:9f:5a:
43:29:15:d8:49:c8:91:88:01:c7:ea:61:2b:33:2c:
9f:d1:78:bf:b4:52:ae:25:c7:84:11:8b:c6:6b:4a:
30:cd:e8:16:c9:c2:39:60:ef:9d:d8:4e:03:8f:b6:
03:4b:03:d0:01:7d:12:f0:46:4f:4e:80:95:44:13:
52:8b:c7:ff:9b:92:3d:a5:90:90:8b:de:58:94:d1:
c6:a7:dd:50:1f:c5:df:c9:15:19:78:0d:98:47:06:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:A0:1A:C6:C7:BA:73:55:5C:E6:69:EC:33:8D:0E:6A:18:AE:3A
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/uIOgGsbHunNVXOZp7DONDmoYrjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.64.0-212.69.76.255
212.69.78.0-212.69.81.255
IPv6:
2001:4028::/29
Signature Algorithm: sha256WithRSAEncryption
99:b7:8a:66:7f:e6:58:4a:ac:d2:1f:63:4b:37:c4:16:5c:bf:
91:7f:5c:bc:9f:b6:d8:a8:3c:5d:93:8e:2f:30:96:ca:51:06:
28:4c:b3:46:ad:ef:ad:83:f8:3a:7b:2b:17:d8:68:0b:09:88:
c5:22:90:ff:59:5f:e3:90:39:83:c2:35:5b:1c:68:e1:1d:f4:
e3:41:da:eb:2d:8e:d2:31:dd:53:f2:fe:f3:17:8e:42:cc:c7:
92:a7:f5:a1:e7:e3:28:d8:d8:aa:29:dd:28:b7:27:cb:fa:14:
55:79:7b:7b:0c:4c:76:0a:b8:8c:5d:2e:6a:82:19:ab:b0:2d:
e0:6a:4e:e6:4b:48:a1:d5:f3:47:ed:1b:2d:b9:b2:28:93:09:
91:b5:ab:25:cb:79:af:21:23:11:ca:b9:6f:ed:ec:28:36:16:
b8:db:0e:a5:28:de:60:6c:a7:36:36:fd:cb:dc:00:05:2e:aa:
d4:06:b4:ff:cd:fd:2f:4f:59:ad:c6:9c:3d:88:dc:64:f0:cd:
25:b7:49:81:a8:e5:91:18:67:b6:51:b9:18:39:0c:a9:ae:d0:
18:b1:e5:3e:3e:b6:91:9e:f7:1e:e6:33:71:8d:8a:b0:ba:45:
0e:d6:80:e7:4c:e5:19:c4:07:e3:4c:15:98:7a:ae:2d:2e:64:
55:d9:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:23 2024 by rpki-client on console-ams.rpki-client.org