Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/0Ms3g0117uHTZtAwCtNdizbAvyk.roa
File: 0Ms3g0117uHTZtAwCtNdizbAvyk.roa (raw, json)
Hash identifier: APrKiMyfl3oZIzymi91lR2OmhFnFPARwXkAcVOmq3XI=
Subject key identifier: D0:CB:37:83:4D:75:EE:E1:D3:66:D0:30:0A:D3:5D:8B:36:C0:BF:29
Certificate issuer: /CN=344e6acc79ac4b655437f8c6f9764682d9ec2240
Certificate serial: 018964C05AF7DA9D5AAA4D0066F786AF82A7
Authority key identifier: 34:4E:6A:CC:79:AC:4B:65:54:37:F8:C6:F9:76:46:82:D9:EC:22:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/0Ms3g0117uHTZtAwCtNdizbAvyk.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.6.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5a:f7:da:9d:5a:aa:4d:00:66:f7:86:af:82:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344e6acc79ac4b655437f8c6f9764682d9ec2240
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0cb37834d75eee1d366d0300ad35d8b36c0bf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:20:58:2b:ef:4f:b5:30:d9:6e:5a:79:21:
3b:2d:d6:3e:19:98:59:c6:4f:7e:1f:82:d5:04:70:
4a:f6:10:1f:87:91:8b:8e:43:cb:f5:a3:1c:5d:88:
e5:eb:89:33:f9:9b:49:5d:10:94:78:88:00:5e:c6:
05:2d:6e:df:f7:d4:19:d4:1d:17:06:87:3a:da:b1:
ef:cf:ca:ae:d1:c5:7a:7a:e2:b2:1d:41:c6:38:cb:
cf:86:71:e6:51:69:62:21:43:c0:b8:16:59:4e:d6:
3f:bc:bc:33:59:50:e8:ec:5d:f8:75:25:2c:a0:c3:
94:09:22:63:c2:fa:1a:46:f7:3b:e1:48:ed:75:11:
bb:25:13:9b:33:7f:74:48:b5:c1:a6:a6:6e:e7:5d:
82:1a:8a:6c:25:b8:94:03:cb:ab:39:c6:f0:55:94:
7e:99:4b:d4:48:39:cc:91:2e:51:98:d3:fb:cf:2b:
c7:3c:21:cd:9e:87:a6:a1:12:55:31:b6:28:7a:f9:
f1:e9:53:73:58:01:68:1a:c1:ca:e9:88:64:99:5e:
ad:50:dc:23:d3:e0:84:72:33:99:49:1f:57:23:45:
70:32:b2:d6:85:bc:f4:ec:9e:cb:98:e1:ca:9c:c3:
89:03:52:a2:46:59:2a:ff:a1:3d:83:0b:b7:d0:5a:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:37:83:4D:75:EE:E1:D3:66:D0:30:0A:D3:5D:8B:36:C0:BF:29
X509v3 Authority Key Identifier:
keyid:34:4E:6A:CC:79:AC:4B:65:54:37:F8:C6:F9:76:46:82:D9:EC:22:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/0Ms3g0117uHTZtAwCtNdizbAvyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:60:ec:a3:b2:64:18:d7:79:d4:2d:ed:17:2b:f6:10:b8:24:
6f:b4:07:4b:84:10:9b:cd:a2:19:db:92:fe:5c:cd:86:87:93:
e7:07:88:8f:85:21:4f:ab:5b:5f:01:9d:ca:1b:1e:e9:a9:65:
0c:af:d0:d0:9c:e1:5c:60:3b:36:f0:1f:5c:f5:2d:20:2a:c8:
55:e2:75:64:74:69:07:6f:73:f0:b1:89:a1:fe:3d:8c:23:c9:
5b:1c:fb:c1:e1:35:2c:23:92:55:1d:d5:30:5e:e2:22:5d:e9:
78:ae:0a:7c:88:e2:a5:ee:0a:4f:6a:97:86:78:a9:cd:4a:7a:
8c:e3:9d:7e:65:61:90:e5:25:ac:e5:c3:35:a9:49:d1:31:98:
c2:7d:d4:8c:e4:9f:9d:32:5f:82:ee:5f:de:11:63:05:5a:4f:
e5:b8:55:70:02:d6:b9:38:e2:6a:b5:95:96:f1:a7:ff:4e:4a:
77:e8:10:fb:31:42:29:79:9b:15:ad:ff:4c:19:ad:9d:ce:26:
99:48:4f:a9:60:01:97:d3:3a:06:7e:35:6a:cf:0b:8b:3d:18:
77:cc:37:ec:dd:28:b6:e7:b0:89:c1:83:97:80:9c:3c:43:b4:
b3:34:f7:e5:a8:89:1d:3a:ab:b1:af:c4:0c:37:b1:48:92:fc:
3a:80:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:36 2024 by rpki-client on console-ams.rpki-client.org