Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/Be-ir0JeN3YK6NWj4Hz9JTMU8tk.roa
File: Be-ir0JeN3YK6NWj4Hz9JTMU8tk.roa (raw, json)
Hash identifier: YG2q+nF02g2MAc4PAcIOWS17CXQla0oH9fzj09pld4A=
Subject key identifier: 05:EF:A2:AF:42:5E:37:76:0A:E8:D5:A3:E0:7C:FD:25:33:14:F2:D9
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 018CC8DCCEF63BAA97069AB2632701CA106A
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/Be-ir0JeN3YK6NWj4Hz9JTMU8tk.roa
Signing time: Tue 02 Jan 2024 06:29:23 +0000
ROA not before: Tue 02 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9110
IP address blocks: 212.233.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ce:f6:3b:aa:97:06:9a:b2:63:27:01:ca:10:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Jan 2 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05efa2af425e37760ae8d5a3e07cfd253314f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:c2:db:f1:f8:1d:57:d6:be:89:dc:4c:4d:
1f:8e:26:dc:39:5b:f6:93:a4:c6:b6:be:f0:77:1d:
88:08:fb:be:be:45:63:4b:8e:55:1c:fc:3c:ac:30:
bd:7c:e3:7b:f5:92:4a:ec:ac:bd:5e:74:d0:1f:e3:
a3:69:ed:c9:f5:9f:13:4c:21:dd:47:21:03:2b:a2:
1f:30:9c:8e:94:f2:bc:eb:cd:4a:9a:08:f7:1a:c9:
10:6f:9b:72:9d:24:08:27:f3:80:77:95:b5:c7:57:
3f:83:5f:bf:62:ab:de:44:b6:1f:ea:05:55:7d:a4:
a1:a5:05:15:c5:78:6d:9a:26:d6:60:62:e9:70:0d:
53:fc:1f:a8:29:65:35:bf:46:0a:9b:6a:ba:6c:3a:
4a:c2:68:7b:73:e4:3b:b0:ed:1e:7d:3e:38:a8:bc:
6b:4d:ac:24:30:da:ee:13:fa:96:af:1b:ea:d1:37:
85:c0:80:ad:1a:44:54:26:bd:bd:a4:d8:22:75:db:
8b:de:38:f7:df:90:c3:6d:4e:2f:5c:69:94:ac:3f:
7b:9f:6c:26:fe:00:4f:db:03:a7:ba:49:bc:c6:f3:
ae:f0:22:d4:5b:98:4f:c7:63:43:a1:ca:41:91:e1:
d0:50:c7:60:d6:e8:ed:f1:d6:9f:88:d3:6d:23:c6:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:A2:AF:42:5E:37:76:0A:E8:D5:A3:E0:7C:FD:25:33:14:F2:D9
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/Be-ir0JeN3YK6NWj4Hz9JTMU8tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
63:04:16:c3:08:68:a3:c5:1d:92:22:39:b1:29:55:9b:9b:fc:
36:33:1b:80:d3:21:9f:05:d3:73:02:1f:4c:01:dc:d9:32:1c:
d6:e2:27:32:e5:07:dc:93:0b:1a:b7:51:ca:ba:00:b1:5f:00:
51:80:6c:ea:71:a6:70:7e:94:9a:e0:45:d7:e2:01:fb:83:77:
73:e2:91:f8:ff:0a:e2:cf:83:4b:79:81:0c:e7:64:d7:a0:61:
c6:ee:a9:b6:2a:8c:92:a6:e4:e1:c5:2a:dd:86:3f:05:ff:b2:
d6:13:1c:fd:11:c0:c3:c7:67:ff:80:df:52:e0:10:8e:22:db:
9e:ed:ba:9b:17:02:d9:df:73:a6:85:4b:98:e8:83:13:fa:02:
97:66:3f:c5:9e:07:58:14:48:b7:93:fe:7f:af:73:2c:a3:f0:
12:b8:71:c0:90:8f:c7:cd:71:11:60:74:eb:08:b4:e1:dc:e6:
10:e6:c7:3f:32:a1:d8:b2:38:ea:0d:53:a2:2d:86:89:72:39:
6c:67:c1:ea:71:b0:4b:ef:e2:b4:3f:37:10:85:83:e5:92:9b:
0b:d1:19:c9:1e:03:c5:6d:ed:bf:a7:5f:4f:0b:f7:a2:4b:2f:
aa:a6:5f:b5:85:29:b6:22:e4:87:8b:04:b1:11:16:94:87:42:
18:aa:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:16 2024 by rpki-client on console-ams.rpki-client.org