Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/LreC2LVjVnJWrlpSCcO6mSIOUAg.roa
File: LreC2LVjVnJWrlpSCcO6mSIOUAg.roa (raw, json)
Hash identifier: D0bte1SNJij2+IB91q2euAIf9UqQzRRYpg9xXaueSsc=
Subject key identifier: 2E:B7:82:D8:B5:63:56:72:56:AE:5A:52:09:C3:BA:99:22:0E:50:08
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 0189C50DB82B91FEFF4710BB11FC691F1D7B
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/LreC2LVjVnJWrlpSCcO6mSIOUAg.roa
Signing time: Sat 05 Aug 2023 09:35:57 +0000
ROA not before: Sat 05 Aug 2023 09:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210474
IP address blocks: 212.23.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:0d:b8:2b:91:fe:ff:47:10:bb:11:fc:69:1f:1d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Aug 5 09:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eb782d8b563567256ae5a5209c3ba99220e5008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:40:78:09:24:d3:12:31:bf:bd:90:23:01:
0a:99:ba:5e:89:3f:2e:8e:90:ad:33:21:d6:d4:3a:
cf:d9:40:71:51:c1:20:e1:c6:cf:46:b0:fa:b9:9c:
26:a4:20:95:1b:7b:cd:44:b7:8e:21:49:56:e7:c0:
a7:dd:32:d5:2f:37:3b:18:e5:8c:52:18:f9:62:25:
96:37:7a:55:8b:87:0b:44:3e:d9:98:27:1e:72:d5:
76:85:0b:42:1d:93:c1:50:0d:1c:43:01:5a:4d:dc:
28:16:a2:15:f2:1b:b6:bb:68:24:4c:fd:37:6a:30:
c0:75:3f:87:8e:39:a9:df:13:cc:f8:89:d2:40:6e:
bd:6e:89:39:8e:66:2a:f4:39:e1:55:66:8f:da:26:
71:ef:31:fb:a7:93:8b:5b:1e:22:39:66:f4:83:65:
75:bf:32:41:3e:47:e6:2a:05:a9:b6:ac:fb:e2:e7:
3a:10:69:b9:b0:93:5e:68:e8:c5:10:55:56:f7:fe:
e1:a4:f9:10:fb:cc:f7:70:1b:78:f4:6e:6b:34:be:
3f:97:bb:bd:4b:3c:68:b8:e1:73:81:28:ec:1d:44:
d3:77:77:1a:7f:aa:82:c6:b2:ac:ce:f1:83:93:06:
30:b4:47:ae:be:4d:d6:82:66:d3:a9:63:cd:cd:5d:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:82:D8:B5:63:56:72:56:AE:5A:52:09:C3:BA:99:22:0E:50:08
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/LreC2LVjVnJWrlpSCcO6mSIOUAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.216.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9c:5e:8a:9c:72:c9:3a:03:24:b4:77:99:15:12:be:4e:e2:
36:7b:a8:0b:5c:30:89:04:77:ba:7c:6e:8c:06:f3:27:ca:c8:
ba:e3:34:1c:3b:19:c5:43:a1:86:7c:d1:22:80:ae:9c:ad:dd:
0c:fb:f3:b4:f3:14:c9:40:d2:dc:dd:3a:18:53:0b:00:69:bd:
da:92:49:50:74:dc:f7:ab:67:21:0c:a6:71:ba:c8:f2:57:ed:
f6:a7:e5:c3:30:f9:9f:4a:3c:1c:e7:32:5e:14:fb:e5:f6:25:
00:ce:83:0c:39:e1:48:53:a4:8e:c5:41:9b:4b:85:ad:05:22:
ba:09:e8:b7:57:07:37:e8:79:f7:5d:57:ee:0b:91:45:09:22:
07:0e:a0:da:c7:29:58:95:13:71:77:99:88:3a:51:ce:fe:8a:
36:0e:43:76:17:d1:c9:df:75:d8:5c:e0:22:e2:bc:2d:53:da:
93:00:d4:41:00:7c:f4:f6:02:fb:11:8c:cb:82:4b:f9:47:50:
9f:d0:23:1e:db:79:7b:e0:a9:57:be:6f:0a:8b:98:3d:ae:ac:
1a:e3:6d:0f:8c:14:a6:ac:df:65:37:dd:b2:c9:c5:db:74:a1:
7b:9a:11:88:95:ab:74:d8:7c:51:51:92:27:c5:34:0a:d7:81:
70:87:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:33 2024 by rpki-client on console-fra.rpki-client.org