Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/UhPNlmVmh8AgsCFFzEa_Hb09KLE.roa
File: UhPNlmVmh8AgsCFFzEa_Hb09KLE.roa (raw, json)
Hash identifier: 2732ZjrXoefzQfamK4P8LLN+j9w9pdg0Rz37rResIRY=
Subject key identifier: 52:13:CD:96:65:66:87:C0:20:B0:21:45:CC:46:BF:1D:BD:3D:28:B1
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0187BD3AD51381D90AA8E16244C1C8243752
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/UhPNlmVmh8AgsCFFzEa_Hb09KLE.roa
Signing time: Wed 26 Apr 2023 11:02:42 +0000
ROA not before: Wed 26 Apr 2023 11:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12462
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3a:d5:13:81:d9:0a:a8:e1:62:44:c1:c8:24:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Apr 26 11:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5213cd96656687c020b02145cc46bf1dbd3d28b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:48:9e:c1:f5:d1:25:2c:25:ed:d3:e7:1a:
18:29:2c:e7:2f:8f:03:88:8e:62:d6:76:61:57:f6:
a9:1f:34:7a:53:ec:92:1a:9d:d0:8a:6d:c9:56:24:
7b:a5:b2:57:60:b9:59:fa:02:00:9b:d6:c6:3b:a8:
c7:23:0a:77:24:31:7c:d5:ab:76:85:8c:6d:04:3d:
4b:95:3b:05:c7:03:c1:1b:92:20:d9:c0:20:8f:cf:
61:34:d8:1c:db:2b:62:59:f0:e3:fb:07:7d:95:0c:
6e:37:f6:a1:74:82:7a:0c:44:31:09:39:57:3e:c3:
fb:8f:a7:e1:7c:c6:78:36:b2:5f:77:11:d8:59:f5:
08:61:12:4f:dd:0e:e9:62:c6:ea:16:5f:c1:47:89:
6c:59:79:ae:b0:a8:2d:93:cc:3e:04:97:da:24:ed:
64:67:2a:87:4b:5f:1b:3a:1d:27:d1:45:08:ed:c3:
9d:3f:ba:ff:c5:97:56:cf:fa:8d:8f:51:08:4a:e8:
93:9d:2b:60:23:2c:ca:b7:de:36:61:ee:97:76:ab:
bc:a0:df:67:5f:b0:0a:51:8e:83:31:0b:e2:f1:31:
72:0d:b7:e4:f5:f4:d9:4d:b0:86:40:43:d2:a6:59:
2e:e1:c6:97:9d:5b:44:82:99:ca:c8:6f:fe:25:27:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:CD:96:65:66:87:C0:20:B0:21:45:CC:46:BF:1D:BD:3D:28:B1
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/UhPNlmVmh8AgsCFFzEa_Hb09KLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ec:f6:92:d7:d8:ca:28:69:85:bc:e3:e5:f2:53:3b:ae:ca:e0:
a6:bb:5c:ac:ae:3c:35:db:1d:41:95:98:c9:fd:8d:a8:cd:16:
bc:1a:a2:96:93:f1:24:76:7e:45:d9:cb:05:da:9f:eb:e4:5e:
2a:96:ff:d9:99:2b:1f:9e:7a:b4:b0:6e:6d:d7:0b:e4:19:1e:
7a:85:46:08:85:0c:26:83:4a:92:13:93:6f:80:9b:69:b7:ca:
2f:9e:e3:10:2c:4a:a6:bf:03:71:2e:41:4b:fd:20:4b:0b:86:
73:81:66:a4:2d:b2:62:60:57:d3:d4:ee:06:95:e1:97:73:74:
8f:ce:01:1c:08:c2:0a:ed:3b:17:9c:be:a9:2a:1f:a2:16:82:
ef:4e:5b:4d:a8:b1:7a:c2:69:79:df:90:85:4e:7b:d8:91:be:
84:0d:02:b5:4c:cf:af:41:28:7c:c7:1b:4a:dc:d8:20:04:dd:
d1:f1:f4:4d:7a:bf:57:c0:32:a8:d6:66:82:d5:bb:59:5d:87:
fa:25:7d:d4:c2:bf:01:69:92:45:15:48:89:10:5a:2f:38:11:
c8:3f:ca:ac:7a:fd:7a:cd:8c:eb:ad:b5:9b:34:a8:86:e7:89:
af:1c:d7:ec:bd:4b:b2:ef:60:60:eb:8c:5a:96:91:ff:76:fe:
3f:64:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:43 2023 by rpki-client on console-fra.rpki-client.org