Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DwyANRp9l_AuF_kwcn6UwA1h6jI.roa
File: DwyANRp9l_AuF_kwcn6UwA1h6jI.roa (raw, json)
Hash identifier: YT6nzw8QziD2ekIxqP5YtO20VgJHyah97sISKZw85G4=
Subject key identifier: 0F:0C:80:35:1A:7D:97:F0:2E:17:F9:30:72:7E:94:C0:0D:61:EA:32
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01856FB12AA900CEB26715EA100E28FD1B51
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DwyANRp9l_AuF_kwcn6UwA1h6jI.roa
Signing time: Sun 01 Jan 2023 23:35:59 +0000
ROA not before: Sun 01 Jan 2023 23:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8888
IP address blocks: 212.81.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:2a:a9:00:ce:b2:67:15:ea:10:0e:28:fd:1b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 23:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f0c80351a7d97f02e17f930727e94c00d61ea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:86:32:e9:43:c1:d4:3d:a8:25:70:a7:32:
62:2c:6e:b9:71:06:c7:dc:df:16:e3:39:4c:e4:b1:
d2:3e:fb:5e:22:1c:f3:cb:09:66:ad:06:39:20:41:
32:35:b2:24:5c:90:b9:a6:6d:4a:15:f2:78:61:43:
d6:30:89:68:91:a2:31:77:e8:47:d9:65:65:a1:e9:
64:1b:7a:41:3d:51:86:ec:5f:79:6a:d8:b0:ad:cc:
dc:47:29:d6:e0:99:4c:4c:0d:0b:eb:86:88:2d:51:
cf:a3:31:b2:9e:9f:2b:83:65:aa:c3:b8:90:c0:62:
52:a5:98:7b:cf:b1:52:4a:8a:14:70:ff:43:dd:23:
a3:b4:75:cc:bb:34:31:e5:75:2c:9e:4f:b9:ed:2e:
f5:42:41:f0:76:32:5d:a3:d5:a2:b3:60:1a:a8:a3:
49:d9:4d:b4:6a:e6:00:7c:43:79:5e:af:51:4d:4a:
4c:6f:7c:f1:e8:76:64:63:53:2f:d4:26:60:59:0c:
ec:be:80:24:87:c8:92:bb:43:20:b7:ad:ca:51:0f:
48:d8:9d:f2:50:02:f4:ed:30:4c:2d:8f:a5:f4:02:
c3:1c:f6:06:23:b2:7d:73:c2:d0:53:0b:18:bf:e8:
7a:aa:b0:24:3f:ee:a8:05:2f:26:a8:23:f1:56:39:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:80:35:1A:7D:97:F0:2E:17:F9:30:72:7E:94:C0:0D:61:EA:32
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DwyANRp9l_AuF_kwcn6UwA1h6jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.44.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c4:2f:f7:d8:c0:31:c9:d4:b2:58:4a:82:10:10:84:19:30:
11:3d:2a:f0:1c:e1:8f:4a:86:67:f7:df:6e:da:19:07:9b:37:
65:f7:5b:17:d7:2d:34:94:40:9a:80:35:31:fa:a7:f0:43:22:
73:82:ca:5f:65:ec:2e:2f:3e:f7:7b:e0:c7:04:1c:5b:b6:8d:
dc:d8:84:b3:6c:c8:43:e4:25:83:53:98:7f:1a:4a:1c:39:08:
68:38:5e:37:88:43:44:4d:86:48:b5:7e:6d:40:10:9e:6c:3f:
d6:12:30:4e:8e:7c:f9:e6:18:ab:80:c3:fd:88:15:73:af:ba:
95:c1:e5:01:b2:37:bd:c4:96:25:83:e5:eb:0e:a8:97:e7:32:
23:94:2c:1e:4e:df:d1:27:19:12:a3:28:38:64:7f:c0:5d:ab:
81:63:46:61:40:b0:77:fa:0e:b1:c5:55:88:1b:99:fd:50:9a:
89:87:0d:56:cd:d2:c6:12:3f:9b:11:17:bd:76:44:f0:80:c2:
50:dd:95:8c:b7:21:ef:bf:da:fe:9a:b3:63:5e:84:73:c7:6d:
9a:76:79:63:55:10:b4:03:49:97:03:cb:4a:65:e2:a6:03:a6:
74:21:2c:d1:e4:06:d8:26:c8:c3:31:d9:b2:5a:0b:88:13:75:
db:5d:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org