Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/4S23bger9no1WZimZTnbjiS_MH8.roa
File: 4S23bger9no1WZimZTnbjiS_MH8.roa (raw, json)
Hash identifier: PhLhT8CyD1SpNXr8r3/1Z1HBaFUxKmw+EXCFFsh0Ljk=
Subject key identifier: E1:2D:B7:6E:07:AB:F6:7A:35:59:98:A6:65:39:DB:8E:24:BF:30:7F
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 018AE20A646999E44C16AAE45B22B2935D05
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/4S23bger9no1WZimZTnbjiS_MH8.roa
Signing time: Fri 29 Sep 2023 17:44:06 +0000
ROA not before: Fri 29 Sep 2023 17:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28917
IP address blocks: 212.233.68.0/22 maxlen: 24
2a13:6d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:0a:64:69:99:e4:4c:16:aa:e4:5b:22:b2:93:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Sep 29 17:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e12db76e07abf67a355998a66539db8e24bf307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:27:4e:3d:86:90:aa:96:df:c6:6e:5d:4c:
12:00:79:39:b7:ce:0f:a8:87:9e:70:c0:dc:e4:7e:
cb:3a:e6:17:6c:8b:c3:55:14:8d:ab:0f:82:cc:b8:
a9:c8:07:76:e3:c8:75:49:13:85:53:2b:de:4a:39:
37:dd:76:44:40:26:e8:7c:8f:c0:3e:08:3f:1c:be:
fa:95:12:aa:ba:07:69:c3:e4:89:f4:6c:64:33:e3:
84:b8:41:a0:2b:4d:1a:7a:6f:3c:59:a9:e3:b3:bd:
f5:78:39:a5:5f:a1:87:59:d7:1d:72:69:d3:5d:02:
ff:1e:b2:12:65:43:23:fd:2e:ae:86:69:03:f4:de:
b5:16:2e:27:77:ec:c6:81:e9:14:f2:d2:74:a4:83:
41:97:a3:89:9f:9e:20:a3:fa:b4:46:71:8c:77:c4:
73:56:27:95:6c:16:1c:15:42:e7:cb:13:6e:5f:5a:
5c:d0:bb:d7:9d:1f:58:4a:4b:a2:6e:10:f3:29:a2:
d5:25:71:b7:f0:24:a8:f7:9c:99:e1:dd:da:b3:53:
03:18:37:92:f3:9f:ed:c8:a6:bf:1b:9a:6d:0a:59:
00:47:f1:ad:30:1f:aa:0f:df:45:9d:75:d7:6e:89:
99:c5:3e:a6:df:4a:3f:8f:8d:b8:60:14:ef:32:33:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:B7:6E:07:AB:F6:7A:35:59:98:A6:65:39:DB:8E:24:BF:30:7F
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/4S23bger9no1WZimZTnbjiS_MH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.233.68.0/22
IPv6:
2a13:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
ac:60:d2:9e:c4:e3:f0:bb:ce:34:1e:50:70:81:3f:3b:ec:79:
8d:7b:8a:17:35:ef:21:a3:fe:d9:2f:77:7f:2e:e2:a3:49:30:
a0:56:d8:cf:aa:d9:b4:e8:89:dd:7a:81:90:c6:e7:68:46:26:
ea:05:65:72:7b:ca:45:8d:33:1d:7b:b8:f2:6c:74:04:53:24:
4e:ce:f2:f7:7a:ad:aa:02:df:b9:c2:18:83:4e:31:8b:a4:d4:
20:fa:b5:43:85:33:ca:c1:61:a7:53:bf:46:b9:62:c5:8a:01:
82:74:29:4b:8b:b4:ee:4e:ae:cc:b5:00:f0:19:1d:d2:6f:cf:
4d:c8:85:97:99:71:5f:ec:7b:d6:61:e0:1d:17:6c:97:20:58:
2f:9a:88:f0:9a:8b:f8:e2:87:e5:35:f6:23:60:96:41:58:5e:
60:a8:e2:d4:eb:63:98:c5:15:27:31:6f:8f:d7:05:a4:6e:a0:
8d:5b:55:c3:c3:3a:f4:ef:d2:76:0b:68:d4:66:7a:28:ac:ef:
93:5c:3e:9a:fc:0f:8b:eb:00:2a:f0:56:0b:3c:45:9f:8c:e0:
cf:25:2e:1b:48:95:ce:59:47:ad:3e:08:c9:18:04:e1:37:aa:
52:9f:01:2b:98:06:50:ef:d6:34:15:51:93:55:3d:a7:ba:5b:
32:67:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:16 2024 by rpki-client on console-ams.rpki-client.org