Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/RjnVY6A-1xp4uL0mgp42iXLk4QI.roa
File: RjnVY6A-1xp4uL0mgp42iXLk4QI.roa (raw, json)
Hash identifier: YPLohThAfbN8FI+ClUnfM4UoZPOowFcJZ3I8QkhQb0s=
Subject key identifier: 46:39:D5:63:A0:3E:D7:1A:78:B8:BD:26:82:9E:36:89:72:E4:E1:02
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018CC3B700D82BC518A2F2F42D665ADF0333
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/RjnVY6A-1xp4uL0mgp42iXLk4QI.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209464
IP address blocks: 212.138.180.0/24 maxlen: 25
Validation: Failed, certificate revoked on Thu 13 Jun 2024 21:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:00:d8:2b:c5:18:a2:f2:f4:2d:66:5a:df:03:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4639d563a03ed71a78b8bd26829e368972e4e102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:70:29:98:51:98:04:cc:4a:84:38:da:7e:
0a:4d:0d:d6:5a:01:9a:f7:d1:92:95:21:b2:1d:70:
f9:d2:72:d0:f2:f1:31:cd:88:a9:70:8a:3b:b0:44:
ec:5e:27:c0:f1:06:06:b8:91:9f:d1:18:ab:cb:b3:
8b:b8:e7:a5:f2:0f:9c:8f:13:76:1b:1a:f0:e1:da:
2e:37:0f:af:02:c1:fe:42:52:27:de:33:10:1b:00:
18:a5:7e:58:d4:1f:dd:6c:0a:c6:87:46:43:b1:53:
f0:9f:80:66:2d:c6:a0:7a:0f:1c:e8:e0:17:8b:55:
3f:eb:e2:42:24:ac:77:0f:7c:55:2c:a5:dd:74:33:
03:64:e1:c1:fd:45:f0:04:4b:de:32:99:a7:57:8d:
2e:ea:8a:0c:8f:09:b2:c0:8f:d2:d1:82:75:d1:e5:
2c:ec:14:1e:67:c6:32:40:45:3d:ca:5f:9e:4f:52:
01:59:5c:47:8a:3a:a4:d3:a3:ed:ba:3e:ea:f5:53:
68:4c:8b:66:71:10:12:9a:c2:81:7b:59:86:70:8d:
de:02:fb:0f:c3:81:68:5c:9f:b7:11:19:bf:5b:0d:
bd:9d:c9:9b:e8:20:e0:ff:5a:c0:f6:b3:73:db:a1:
8c:8d:e0:87:ef:95:34:10:80:89:ff:5e:65:69:10:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:D5:63:A0:3E:D7:1A:78:B8:BD:26:82:9E:36:89:72:E4:E1:02
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/RjnVY6A-1xp4uL0mgp42iXLk4QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6c:1c:d3:be:b5:e5:30:a8:ae:99:cd:d8:09:fd:15:b1:a5:
90:04:bf:63:05:f9:7e:30:83:60:41:13:c5:a5:49:b3:73:31:
67:cf:ae:ba:7a:06:e4:ac:d9:35:0d:7f:ab:88:40:83:38:26:
6b:38:2e:a5:2c:81:42:4e:80:2d:43:12:6b:1a:d3:23:bf:36:
b0:db:5d:22:73:c6:f0:2f:be:63:10:9b:9f:e0:54:76:0c:d9:
2c:93:32:ba:21:3a:d5:38:3a:08:91:40:ba:d7:bf:b2:41:10:
4a:cb:c4:07:86:17:d7:3c:75:7d:5e:f2:c3:d2:00:a5:ea:06:
1a:b5:4b:bc:8b:15:57:10:2c:ee:c1:95:54:7d:36:38:f3:97:
70:db:8f:41:cb:e0:3c:1c:b6:78:d3:78:a7:4c:71:6f:ce:94:
71:48:62:60:f0:2a:4a:34:85:22:dc:f2:85:9e:3e:3f:5b:07:
9d:4c:f3:08:06:08:06:c5:21:8d:c9:ad:bf:3b:6b:4c:48:d8:
0f:55:31:aa:35:c2:db:6b:37:a7:03:fb:98:0e:46:52:b3:28:
1b:e3:f4:3d:28:b5:d5:b1:95:93:0d:6a:99:00:a6:c9:98:8a:
24:c1:50:8a:22:57:be:b2:ed:2e:66:e3:a8:6c:49:44:6a:b7:
38:8b:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:48 2024 by rpki-client on console-ams.rpki-client.org