Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/Bd5t9J1VkEvr0kmsoRHQ9Gc-OF0.roa
File: Bd5t9J1VkEvr0kmsoRHQ9Gc-OF0.roa (raw, json)
Hash identifier: 48myPtMJFClaUjowrQcKvhG44/cLmw0A8umJqOib/jo=
Subject key identifier: 05:DE:6D:F4:9D:55:90:4B:EB:D2:49:AC:A1:11:D0:F4:67:3E:38:5D
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 01857102CEBDE6479C0869D546F65A330C01
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/Bd5t9J1VkEvr0kmsoRHQ9Gc-OF0.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210474
IP address blocks: 212.23.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ce:bd:e6:47:9c:08:69:d5:46:f6:5a:33:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05de6df49d55904bebd249aca111d0f4673e385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:0c:53:95:85:e4:03:29:5b:28:8b:a1:f8:
aa:85:62:1e:16:3f:66:d1:91:6c:99:c5:fd:51:a5:
bd:b0:13:bf:2a:e6:e8:0b:af:76:8d:41:ef:87:48:
7f:5b:9c:3c:6f:d1:7a:ac:c2:14:35:c6:0a:a8:ba:
34:9e:87:d1:5a:01:92:62:ec:99:96:08:a1:b9:2a:
7a:23:4b:bc:6b:12:ec:b9:58:af:d6:0b:db:67:49:
0e:67:3d:d0:04:40:a4:f9:e4:6d:b8:c6:30:2b:d5:
76:ec:2d:d6:4f:a5:04:21:78:db:f5:39:c5:85:be:
c1:f7:d0:73:00:bb:32:7d:85:f6:cf:1a:09:8c:6e:
75:2e:8c:b9:a6:6e:09:6e:92:60:51:9e:99:6d:bc:
1a:79:13:96:88:4e:64:7b:27:a2:7d:34:fb:59:d7:
90:0c:09:44:5b:e4:ec:90:ce:c4:94:18:22:70:67:
57:e2:42:41:66:f0:dd:d0:d0:9a:fb:9e:50:60:9d:
89:6d:b3:eb:e8:60:71:5e:75:3b:7a:b4:cf:e9:fa:
65:53:7c:96:8f:4c:e6:6e:8f:a8:8a:7f:3a:27:55:
15:e6:cd:e9:51:5e:05:08:3b:e1:e6:d0:8a:58:0a:
bd:ff:c6:28:73:c0:21:26:ee:90:ad:48:0e:b1:25:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DE:6D:F4:9D:55:90:4B:EB:D2:49:AC:A1:11:D0:F4:67:3E:38:5D
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/Bd5t9J1VkEvr0kmsoRHQ9Gc-OF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.216.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:fc:82:b3:7c:cd:66:1a:3b:63:9c:ef:a5:7b:36:be:d6:
0a:98:88:a1:1b:10:8b:4b:a7:79:0d:f9:bd:e8:ad:44:1e:da:
7e:86:7c:76:2e:3e:32:59:b5:2f:af:de:9d:f8:08:45:2a:83:
78:eb:3b:d4:0c:42:88:3a:7f:86:26:86:3c:92:b5:94:0a:49:
3b:51:ee:70:fe:5c:c6:70:ad:66:d1:5c:76:b8:90:41:5c:00:
52:56:20:56:67:a1:61:81:9b:22:08:31:38:58:40:62:77:1a:
be:6f:64:7c:ec:ef:db:c8:57:38:11:93:1b:5e:59:48:86:7f:
5b:00:5f:95:97:93:eb:46:5f:2c:30:72:e1:fd:90:a8:07:e5:
2a:99:c8:25:2a:f2:2a:17:c8:2b:09:8e:e5:0b:44:1e:0f:e6:
81:7d:6b:93:88:20:40:f1:31:aa:af:ac:3a:f6:09:e2:fd:50:
ef:9c:c2:82:1e:0b:23:a0:d0:9f:8a:40:3b:69:f9:0b:1a:d2:
d5:6c:2a:3b:b4:7f:6f:f4:83:bc:91:20:8b:59:16:f6:7f:83:
bc:40:ab:f8:55:e4:03:75:5f:fd:40:33:f9:4e:60:9f:c7:09:
92:45:f2:4d:d7:75:83:ed:8c:53:c0:ce:62:61:64:ae:e8:86:
e4:26:52:50
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 5 09:59:02 2023 by rpki-client on console-fra.rpki-client.org