Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/E292N5ZeAfZRjwsxki0buTjoA_0.roa
File: E292N5ZeAfZRjwsxki0buTjoA_0.roa (raw, json)
Hash identifier: 11I4hVZwhqLvGzZgcvLCA3cUGZXZywaYCVG9VkK1UxM=
Subject key identifier: 13:6F:76:37:96:5E:01:F6:51:8F:0B:31:92:2D:1B:B9:38:E8:03:FD
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 01857169D92D0A57778A29E707CEBB2AE829
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/E292N5ZeAfZRjwsxki0buTjoA_0.roa
Signing time: Mon 02 Jan 2023 07:37:20 +0000
ROA not before: Mon 02 Jan 2023 07:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28716
IP address blocks: 212.104.56.0/21 maxlen: 24
212.104.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 15:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d9:2d:0a:57:77:8a:29:e7:07:ce:bb:2a:e8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Jan 2 07:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=136f7637965e01f6518f0b31922d1bb938e803fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:21:99:f2:c3:6b:9e:19:13:4b:2a:e9:91:
c7:51:09:56:e0:6d:6b:77:63:35:3a:6f:b9:2e:93:
9b:7c:60:7e:00:90:e7:46:55:dd:98:71:f1:58:e7:
04:68:95:e8:d0:c2:95:a9:ef:f9:1d:1e:0c:57:34:
cd:a7:a9:f1:0b:bc:ee:17:38:7e:c7:15:af:22:b7:
0d:08:f6:6f:3f:f7:da:69:8e:c0:c9:b5:37:cf:9f:
63:6d:68:48:3e:e7:75:5b:4d:4c:cc:13:0b:6f:33:
af:ad:60:e0:fc:60:b9:85:49:46:8e:b5:8b:5f:5f:
f7:e7:97:0e:e6:13:fd:42:6c:8a:87:5d:a1:41:d8:
ff:5e:6c:62:ec:8d:ce:e6:ad:3d:9a:f4:dd:99:b7:
df:f7:90:32:5d:86:3f:df:8a:2f:5a:b9:d2:cd:84:
d4:4d:33:0c:ff:8c:b8:a6:d4:34:ae:5e:16:26:b2:
58:e2:b6:31:f7:b6:05:a0:3d:60:75:d7:b6:ba:d9:
a3:87:f6:fb:c0:90:c5:ab:45:54:56:52:57:b8:64:
82:a4:15:2f:36:05:b3:23:c1:22:d4:21:af:fe:e8:
7b:ef:bf:1c:a0:bc:57:b1:83:21:bf:21:2f:72:3f:
31:c6:2e:de:82:1c:2b:f6:70:5c:f7:f5:dc:e4:83:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:76:37:96:5E:01:F6:51:8F:0B:31:92:2D:1B:B9:38:E8:03:FD
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/E292N5ZeAfZRjwsxki0buTjoA_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:84:26:77:7d:91:79:4f:aa:37:20:8e:73:cf:8e:e5:2a:7b:
2e:e6:77:d7:1b:ba:38:9a:d8:53:e2:a9:c5:62:7e:46:9a:6b:
f9:11:16:e2:91:f6:6a:14:ca:da:0b:30:4f:da:b5:d8:22:9c:
e5:6b:6d:b0:18:9c:0c:59:6e:f1:de:ea:f3:67:5a:81:90:2e:
85:1b:3a:33:1e:d6:1a:82:64:fb:18:17:bb:e6:1e:5c:2e:ba:
67:42:a2:88:29:79:5e:f0:c6:88:79:1e:71:0a:42:02:eb:1d:
50:17:7a:f1:c5:9f:4c:b8:6f:88:ad:ef:fa:08:e5:9a:41:c1:
c8:e6:65:79:27:2d:b4:cf:d7:98:68:2f:2f:fa:ac:47:14:47:
41:a7:f9:8e:a0:21:9c:0a:e5:e1:8a:b0:e0:3c:6a:14:e3:c5:
70:ff:a3:7d:34:17:e4:e8:73:b1:90:2c:d6:05:75:0f:a0:d3:
b5:a5:a2:c7:f5:72:f9:dc:3f:57:34:56:e9:00:3c:d6:38:9e:
67:bd:d8:d2:2b:c0:e3:87:fb:67:6e:fc:cd:aa:74:ca:fe:92:
34:c3:81:76:a5:e1:66:fa:fc:5b:2c:66:33:ee:75:ca:7f:0b:
1e:d8:b0:2b:29:83:0f:59:13:50:b6:fe:cd:2c:45:bc:f7:a2:
f4:de:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:15 2024 by rpki-client on console-fra.rpki-client.org