Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/ORTvpkmIMC5cx8MVWL21RSYO9No.roa
File: ORTvpkmIMC5cx8MVWL21RSYO9No.roa (raw, json)
Hash identifier: +TrECGsmLZhVxkLu6iS0sp6XamV6AOgKwDLMEaYud1M=
Subject key identifier: 39:14:EF:A6:49:88:30:2E:5C:C7:C3:15:58:BD:B5:45:26:0E:F4:DA
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01875A596B228EDC29913248D3E52090FF39
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/ORTvpkmIMC5cx8MVWL21RSYO9No.roa
Signing time: Fri 07 Apr 2023 06:13:42 +0000
ROA not before: Fri 07 Apr 2023 06:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199855
IP address blocks: 212.14.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:59:6b:22:8e:dc:29:91:32:48:d3:e5:20:90:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Apr 7 06:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3914efa64988302e5cc7c31558bdb545260ef4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:2f:b3:36:7a:25:b1:3b:ea:b1:a5:1f:d2:
49:e1:5f:ea:44:9f:54:ba:66:5a:08:aa:ad:cf:a9:
d8:90:b5:8e:a0:70:df:12:c3:2d:a9:36:f2:5d:79:
ae:30:2d:ff:d3:6f:d9:ce:8f:e2:aa:77:e5:1a:c9:
1e:2b:2c:c8:33:53:cd:20:9a:c9:0c:d0:1f:11:71:
3e:8d:6c:9d:2c:0c:cd:00:32:d4:23:f4:52:46:d8:
45:78:04:73:9c:39:96:5f:1b:1c:73:16:ce:0f:a5:
d2:6b:ef:52:c6:b0:66:df:79:50:a4:d2:da:08:f0:
eb:13:fe:c0:73:95:a5:e1:94:7d:c7:e3:16:89:9a:
93:ae:55:af:80:5e:bf:18:41:32:d3:37:6a:76:7f:
df:bb:42:4a:ee:1a:37:e8:b0:dc:13:be:31:e0:9c:
c9:7b:df:76:90:f0:8b:84:30:c7:41:81:b8:15:d5:
dc:cb:ee:da:84:af:7f:0a:85:0e:8c:62:6f:57:37:
33:98:9b:21:41:87:3f:cf:e3:af:a0:2e:94:15:99:
75:45:10:13:78:39:16:fc:3a:43:fe:81:3b:ad:2b:
ec:0c:60:51:a1:c6:7d:6b:a7:f2:ff:7c:b4:53:d8:
a9:22:4b:fc:d8:08:5b:ab:87:96:88:ea:a3:cd:1c:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:EF:A6:49:88:30:2E:5C:C7:C3:15:58:BD:B5:45:26:0E:F4:DA
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/ORTvpkmIMC5cx8MVWL21RSYO9No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.14.55.0/24
Signature Algorithm: sha256WithRSAEncryption
75:20:85:35:0d:c1:2d:ce:33:9b:28:d8:f6:a7:a2:40:93:4b:
fb:9b:43:ef:81:76:3d:49:d5:22:30:df:7b:9d:f6:70:99:86:
4f:1b:6f:e3:24:7f:80:04:e2:8c:9c:87:f4:4f:11:b1:0a:db:
89:8e:c8:d8:d2:3e:09:23:a2:4b:b1:d7:75:11:e1:e5:d6:7d:
f9:ad:09:0e:2e:c2:14:d5:88:a2:d2:4b:2d:67:0a:ad:93:26:
de:c3:47:81:ac:8d:88:7d:9a:dc:3d:c6:3f:df:a4:03:0c:3d:
92:a4:94:5a:d3:68:47:27:7b:43:cb:70:4d:e7:f4:79:02:e5:
78:62:cd:af:50:00:d7:17:14:8e:1b:60:9a:99:27:8f:2a:d9:
43:a9:9f:78:4e:d6:c0:74:a8:ea:19:f9:65:4c:d7:b0:f6:21:
da:79:60:d5:3b:c0:f6:e9:97:8c:95:27:8a:45:c2:34:b6:33:
fd:b7:89:76:ca:12:68:3f:44:d0:ff:6b:b1:ff:53:c6:33:73:
44:57:6b:d0:72:6a:64:f2:75:96:e7:15:54:43:84:05:9c:a0:
75:c8:70:ee:63:a6:e3:8a:e1:90:4d:3b:b3:1d:0a:4c:14:c4:
b4:b9:f1:79:ed:0f:6f:09:7f:af:9b:67:21:dd:69:08:40:3a:
85:b7:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:11 2024 by rpki-client on console-fra.rpki-client.org