Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/W1OB2sbgagnJCMoQCdEs4vhBx50.roa
File: W1OB2sbgagnJCMoQCdEs4vhBx50.roa (raw, json)
Hash identifier: cutu64y0pTCvKvuVhOeV8zefH2rbnbOH00Smn+3G06U=
Subject key identifier: 5B:53:81:DA:C6:E0:6A:09:C9:08:CA:10:09:D1:2C:E2:F8:41:C7:9D
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893AA3F4AAAFF8B91EEB7B3B1EA30CA1A9
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/W1OB2sbgagnJCMoQCdEs4vhBx50.roa
Signing time: Sun 09 Jul 2023 12:32:50 +0000
ROA not before: Sun 09 Jul 2023 12:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209464
IP address blocks: 212.138.180.0/24 maxlen: 25
Validation: Failed, certificate revoked on Sun 27 Aug 2023 06:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:a3:f4:aa:af:f8:b9:1e:eb:7b:3b:1e:a3:0c:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b5381dac6e06a09c908ca1009d12ce2f841c79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:3c:ee:6f:0c:59:41:e6:4c:77:a5:d3:45:
7b:71:ed:c3:ea:28:2d:8c:8b:42:c3:47:d3:3b:42:
5c:1d:a5:47:cb:ff:e9:23:6c:ec:6f:4a:c8:07:40:
76:12:ba:93:0c:b6:2a:ac:63:ec:e0:14:bf:20:69:
cf:e5:0e:59:fc:f3:74:21:ff:43:fc:9a:e7:03:2f:
7e:78:fb:6c:26:32:b2:00:77:5b:cc:6f:2b:e3:54:
c5:5a:0a:00:15:05:b1:3d:45:50:25:5b:39:4f:aa:
3b:9f:08:89:6b:4f:9b:c6:64:23:2f:a2:f5:5b:bc:
ae:8b:e7:5c:8c:04:d4:81:36:d9:de:e7:f1:e0:dc:
9d:e2:a2:dd:3b:a6:3b:bf:18:59:0c:33:d6:f9:ca:
83:5e:fc:ca:5e:8f:ea:42:fd:d4:21:64:8a:db:cb:
ee:f0:eb:42:31:a5:93:66:3e:1e:68:28:cd:a3:20:
d0:67:4d:64:90:ec:a2:a2:73:93:cd:40:5a:1b:12:
10:3c:27:39:b7:04:5c:91:ec:79:32:2c:3f:5d:87:
07:32:a2:08:4e:94:a6:01:e7:80:44:71:cc:5b:64:
20:22:b0:8b:95:86:a5:1f:59:7b:25:c1:a7:6b:4e:
24:29:7a:b6:b3:e7:87:f8:f1:85:56:46:56:4a:7a:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:81:DA:C6:E0:6A:09:C9:08:CA:10:09:D1:2C:E2:F8:41:C7:9D
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/W1OB2sbgagnJCMoQCdEs4vhBx50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cf:1b:57:03:84:b1:72:01:61:67:79:0f:c8:b3:e8:49:f1:
f0:9c:68:a8:93:c3:33:d7:2d:c6:9c:07:db:fc:b4:10:96:77:
99:82:df:1e:3b:d5:ac:46:3f:7b:b9:5b:12:df:40:1e:01:1f:
e2:15:9d:6c:a6:e1:3f:3a:c0:f0:95:cb:f5:45:c3:4f:2c:b4:
70:b3:51:0c:3b:ef:61:97:fc:42:e6:c8:35:fd:d9:ad:5e:af:
ab:d9:b9:d7:1b:99:4f:75:68:7d:96:b6:cc:c9:8d:71:e7:11:
c8:19:1a:31:71:9d:f0:45:da:c3:67:a5:b9:70:c8:9b:36:0f:
24:0a:77:92:b9:18:a2:41:a1:73:91:53:3b:09:e2:5a:1f:7d:
8e:c1:f1:73:30:5b:a2:cc:af:50:65:3e:b5:40:1d:48:71:17:
00:c4:97:3e:c3:89:39:1a:47:ab:38:cb:ce:5d:ce:9a:92:9b:
fb:db:e9:a9:4b:3a:ae:de:4f:3f:1d:4b:22:79:37:45:45:51:
01:65:7b:bf:17:d7:39:fc:7a:c4:da:18:bb:a2:31:f8:5a:97:
ea:2e:87:21:5a:b4:58:14:1e:6b:cb:41:a3:20:be:78:b7:ff:
5c:d9:6f:d4:7b:9d:1f:d1:c0:0d:70:8a:07:ca:fa:47:3f:95:
8f:8a:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org