Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/rorDPDK_5QMaJ4ca2Sj5Y_ybcwE.roa
File: rorDPDK_5QMaJ4ca2Sj5Y_ybcwE.roa (raw, json)
Hash identifier: nimDQZ/PRdYRfvEDxigZ955VOhGR0LNVeVrLpf1ZnV8=
Subject key identifier: AE:8A:C3:3C:32:BF:E5:03:1A:27:87:1A:D9:28:F9:63:FC:9B:73:01
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893A98F79E43B92E49CC7B7CDD1458E7DD
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/rorDPDK_5QMaJ4ca2Sj5Y_ybcwE.roa
Signing time: Sun 09 Jul 2023 12:20:50 +0000
ROA not before: Sun 09 Jul 2023 12:20:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30857
IP address blocks: 212.26.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:98:f7:9e:43:b9:2e:49:cc:7b:7c:dd:14:58:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:20:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae8ac33c32bfe5031a27871ad928f963fc9b7301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:e3:f5:cd:34:d9:fd:9a:94:1f:89:ed:03:
3c:dc:bf:53:6d:fe:3e:84:d6:b4:17:15:d3:1d:a9:
88:4c:c1:ce:8a:16:9f:8f:d0:3a:40:ee:0f:64:5d:
e5:14:f1:69:da:4f:ad:44:ab:af:11:ca:6b:d0:2f:
60:10:17:c3:8f:08:03:8b:1e:7e:3e:fe:9d:f1:2d:
b7:2b:d4:0c:5a:64:df:86:57:c5:a1:9f:2e:99:5a:
ee:18:c9:94:20:e0:71:6d:3c:12:d6:74:87:be:f2:
d4:a2:f6:e0:95:33:b2:fd:d4:4d:76:63:56:24:2b:
e1:de:c8:61:d3:db:f8:24:66:cf:25:1b:4d:4b:21:
44:98:58:76:80:c6:d9:ef:e3:db:4d:5e:1d:9a:63:
19:09:dd:b2:b6:03:9c:ee:f0:13:05:6d:83:72:1b:
69:1c:0f:cc:57:ab:f7:9b:09:7f:0b:b3:f8:0c:0f:
30:ef:0a:0d:3a:13:96:43:13:b4:23:a7:bf:ac:d5:
d5:a5:ad:b0:6f:be:4d:3c:ef:9b:6c:a3:2f:42:1a:
85:ff:df:cf:7d:61:7f:eb:90:86:28:56:75:ff:b6:
22:31:f1:4b:4f:ea:5e:7e:dc:fe:25:f9:86:35:9b:
f7:9a:59:a8:6a:6d:c8:fa:2e:2f:4d:e7:52:14:f7:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:C3:3C:32:BF:E5:03:1A:27:87:1A:D9:28:F9:63:FC:9B:73:01
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/rorDPDK_5QMaJ4ca2Sj5Y_ybcwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7a:ff:94:0b:50:37:64:bb:9d:94:1b:69:09:15:71:d9:93:
e0:ad:0e:d2:11:3a:2d:d5:79:6c:58:86:6f:f4:98:0e:4f:1d:
8f:15:4e:cb:44:57:07:91:83:42:aa:ec:8a:fa:3b:a0:be:a4:
8f:57:63:71:58:d1:e0:af:7c:43:a4:91:1e:d3:5f:73:36:ac:
93:c2:b4:eb:37:8f:ad:e0:b5:9a:2b:c1:50:a6:c2:71:24:b1:
f1:45:64:6c:42:7a:4a:3f:50:85:81:3a:88:bc:95:e2:de:09:
74:5b:c9:2b:1a:0d:82:d4:67:8f:5d:1b:e1:cd:56:43:08:73:
bb:5e:5c:55:4a:04:0d:11:eb:aa:ab:21:89:f8:f6:aa:f4:1f:
a9:b3:85:be:e8:f4:d3:9a:a8:44:76:38:40:7a:12:e0:84:93:
0b:3f:b1:e6:90:ab:dd:68:75:ca:d8:ac:04:fa:b7:69:a4:e5:
de:b8:ff:a7:18:65:0a:f0:3f:69:d3:a7:43:21:b4:76:29:d7:
8e:ca:8b:11:44:7b:af:5d:02:8b:b6:b5:16:ae:53:f5:ed:9f:
a4:f1:94:39:ac:0b:11:c2:6a:f7:12:3f:a1:48:2e:f1:c9:43:
a7:9b:2e:9a:8e:45:f2:c3:cf:cc:d1:86:0b:42:f2:fd:5f:f6:
60:82:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:04 2024 by rpki-client on console-ams.rpki-client.org