Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/AK0zyXEdLg4gQtLncKpIdg9DwCs.roa
File: AK0zyXEdLg4gQtLncKpIdg9DwCs.roa (raw, json)
Hash identifier: uw/+q2ADa4h7iTprauhy2y4rh3WYG7EaWrOh8nc1cjA=
Subject key identifier: 00:AD:33:C9:71:1D:2E:0E:20:42:D2:E7:70:AA:48:76:0F:43:C0:2B
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01856FB12AFC57E8CF02461DAA6136DDF734
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/AK0zyXEdLg4gQtLncKpIdg9DwCs.roa
Signing time: Sun 01 Jan 2023 23:35:59 +0000
ROA not before: Sun 01 Jan 2023 23:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9312
IP address blocks: 212.81.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:2a:fc:57:e8:cf:02:46:1d:aa:61:36:dd:f7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 23:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00ad33c9711d2e0e2042d2e770aa48760f43c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:34:af:ae:21:05:af:51:f4:e8:a1:14:cf:
f4:00:3e:54:ef:8a:b1:0d:29:35:3b:97:83:08:98:
32:4e:46:80:7b:3b:d3:3c:d2:f3:12:b0:1b:50:d0:
cc:de:8e:b9:e4:93:5f:31:ce:d5:79:90:44:6b:45:
9d:be:6f:02:a5:e4:a2:3a:d0:44:28:ae:c4:5d:c7:
e8:61:57:2d:0c:3f:e5:6f:e5:5d:91:ad:93:e0:e3:
3e:5c:98:51:8d:ce:de:32:18:3c:d0:47:dc:5a:ef:
eb:d5:1b:1f:9d:58:92:99:74:42:e4:3d:85:66:59:
84:c2:52:38:a3:4d:6f:e3:b0:30:42:26:0b:96:39:
12:75:5c:0d:dd:2a:c7:50:34:13:97:f8:d3:4c:85:
74:5c:70:80:14:97:eb:fe:59:eb:90:4c:19:f1:40:
f2:9b:b9:7f:d6:79:fb:75:b5:b9:7a:79:d0:59:78:
75:96:5e:87:d5:1d:90:5b:f3:79:be:42:53:ce:d7:
0b:89:6f:4e:65:7b:d9:5c:46:95:d4:27:b0:65:4c:
0f:7e:ea:6c:e5:58:ea:db:5d:06:be:88:ca:b3:5d:
36:9d:c6:c5:d8:06:42:47:fa:2a:a4:c4:49:b4:39:
96:67:90:d3:4a:23:ac:53:c3:cc:ee:5b:a5:27:8a:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AD:33:C9:71:1D:2E:0E:20:42:D2:E7:70:AA:48:76:0F:43:C0:2B
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/AK0zyXEdLg4gQtLncKpIdg9DwCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.44.0/22
Signature Algorithm: sha256WithRSAEncryption
70:68:40:35:9b:cf:31:8b:51:80:bd:66:4d:3c:73:03:02:fe:
d3:68:31:7a:a9:ae:de:56:35:83:ab:78:d8:66:0b:b0:27:46:
52:c2:38:bd:6b:2b:49:7d:43:c6:df:d3:ae:b5:ab:0f:f5:22:
56:48:42:6e:25:07:fe:2e:e8:50:08:19:06:f0:94:1d:84:54:
26:fe:45:e0:91:28:d5:8d:c0:52:35:e3:43:ca:17:1e:d4:12:
3c:ea:44:11:4d:b5:3c:9a:ed:ec:54:d8:a0:72:f5:83:49:21:
0d:a1:c3:e0:4a:fe:f6:8d:90:c1:89:16:9e:97:49:f7:71:24:
54:fd:30:eb:ca:19:f5:07:b4:ae:dd:8a:be:dd:a7:73:48:e8:
d6:30:dd:f8:aa:2c:b1:73:b9:81:38:71:e3:aa:78:94:89:fd:
4f:37:f5:35:00:39:15:b2:fb:0d:17:49:53:ea:e3:80:e8:d0:
13:5b:9c:24:9e:6f:b2:45:42:9b:13:80:25:bc:ae:87:09:75:
a1:ff:99:db:eb:b2:23:43:8d:7b:4e:56:c8:87:5f:8d:da:90:
b5:1e:8f:09:4a:c1:23:e4:89:35:61:2b:d1:d9:eb:9c:d0:36:
84:4e:03:90:82:ab:7c:2e:3b:ed:f4:e5:a7:70:cf:7d:d0:06:
46:f5:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org