Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/wbSE2CTxUe-HjyzBtAIFB6o-6BI.roa
File: wbSE2CTxUe-HjyzBtAIFB6o-6BI.roa (raw, json)
Hash identifier: 3+psKsqqabBVD24K01iw0eHzjtyoVfKx2gfdlJpkIr0=
Subject key identifier: C1:B4:84:D8:24:F1:51:EF:87:8F:2C:C1:B4:02:05:07:AA:3E:E8:12
Certificate issuer: /CN=0f5026e94fe0598f7eb6f46236a6397e62f01e7c
Certificate serial: 01856FF981DE4F9D87E78A4CAAE4B765CF98
Authority key identifier: 0F:50:26:E9:4F:E0:59:8F:7E:B6:F4:62:36:A6:39:7E:62:F0:1E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Am6U_gWY9-tvRiNqY5fmLwHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/wbSE2CTxUe-HjyzBtAIFB6o-6BI.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8264
IP address blocks: 212.197.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:81:de:4f:9d:87:e7:8a:4c:aa:e4:b7:65:cf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5026e94fe0598f7eb6f46236a6397e62f01e7c
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1b484d824f151ef878f2cc1b4020507aa3ee812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:7b:fd:19:8c:4a:c3:8c:c1:1c:a9:07:f1:
95:c7:97:fa:5e:92:38:fe:cc:4b:7f:66:71:07:c5:
44:58:e6:26:0e:67:48:69:69:42:6a:7d:2a:75:19:
c2:06:42:19:e3:a7:be:17:d5:5a:ab:86:81:07:a7:
b8:92:48:0d:ae:fa:11:e6:5d:87:25:57:70:c8:51:
a4:01:a1:f6:8b:76:cb:7d:dc:cf:22:17:bc:9f:6c:
ad:a3:c1:ea:14:76:79:50:a5:77:30:7b:4b:d8:ae:
e3:5a:50:a9:42:18:92:9b:8b:ca:96:e9:ea:4b:3b:
77:ef:d7:8c:c9:01:b8:a6:74:a3:ae:04:28:41:2b:
c2:01:80:7b:38:34:a0:2e:e5:f2:33:9f:aa:da:22:
08:ab:68:22:9f:e2:76:52:7b:e9:3a:f0:64:8f:b6:
6f:4c:f0:55:07:0f:f9:29:dd:91:65:4c:c5:c8:45:
1d:24:e7:cd:e1:b0:8a:9f:ba:f2:04:6b:68:a3:30:
ed:05:9e:ef:79:bb:08:a9:64:83:97:51:df:0a:fa:
4d:10:fe:58:bc:5e:ab:0f:27:51:f5:b1:02:7f:5c:
b8:19:dd:4a:78:a5:c8:04:74:1e:93:58:3a:d5:1a:
78:8c:10:1d:d8:f7:6a:d1:22:27:07:58:3a:14:69:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:84:D8:24:F1:51:EF:87:8F:2C:C1:B4:02:05:07:AA:3E:E8:12
X509v3 Authority Key Identifier:
keyid:0F:50:26:E9:4F:E0:59:8F:7E:B6:F4:62:36:A6:39:7E:62:F0:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Am6U_gWY9-tvRiNqY5fmLwHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/wbSE2CTxUe-HjyzBtAIFB6o-6BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/D1Am6U_gWY9-tvRiNqY5fmLwHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.197.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ab:21:27:33:bc:71:74:d0:2e:c3:9d:90:22:1f:c5:22:5b:ae:
32:bb:2c:c4:04:d5:82:fc:4e:80:eb:87:2c:e7:1d:6b:d7:33:
4c:4f:53:45:97:25:3b:e9:57:96:ad:3e:7c:5d:5c:90:d3:cc:
8f:98:63:22:0c:cb:31:a4:f7:06:fb:5b:20:4f:59:e5:71:9b:
cd:ff:24:7b:8c:ce:c0:c3:b7:3f:fe:77:1e:ed:e0:0e:f4:ee:
88:fb:5d:28:83:72:c5:40:4d:05:fa:c4:3a:6d:38:b1:3d:78:
5e:e4:5c:26:5e:c0:06:5c:27:d7:09:71:7a:eb:c6:c8:47:89:
16:c7:b2:7a:99:1e:1d:01:ad:d3:f6:65:22:57:90:27:7e:d0:
37:2f:78:20:77:ba:13:63:95:30:74:ed:f7:d3:3d:c4:35:9a:
94:0b:40:bc:bc:67:a7:5e:69:a1:b9:b0:3b:a4:2e:41:e2:eb:
b0:c9:d0:7d:2a:d6:e8:21:bd:26:59:46:15:38:6a:0c:26:c2:
00:c6:ca:1a:93:d1:b9:62:5e:8f:cb:b7:43:f4:4b:f5:91:85:
05:cc:51:a6:fb:01:c9:01:e5:e6:32:7a:4f:4d:4c:89:98:87:
d8:a0:3b:87:1d:0d:2b:3d:99:12:d1:80:4b:f6:c0:f2:55:49:
d7:05:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:37 2024 by rpki-client on console-fra.rpki-client.org