Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/Laf2h2Icumx2RRxucGmPgQSTESk.roa
File: Laf2h2Icumx2RRxucGmPgQSTESk.roa (raw, json)
Hash identifier: ENR5u+QOnEQ0bgMQOP+qW6udY7lT0FxWOMWURDfVInY=
Subject key identifier: 2D:A7:F6:87:62:1C:BA:6C:76:45:1C:6E:70:69:8F:81:04:93:11:29
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 018A6507DA8F751611BC9E128C30C960E54A
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/Laf2h2Icumx2RRxucGmPgQSTESk.roa
Signing time: Tue 05 Sep 2023 11:08:47 +0000
ROA not before: Tue 05 Sep 2023 11:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31367
IP address blocks: 212.69.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:07:da:8f:75:16:11:bc:9e:12:8c:30:c9:60:e5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Sep 5 11:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2da7f687621cba6c76451c6e70698f8104931129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:c2:94:fe:94:35:3d:98:48:46:a3:2a:c7:
38:bc:d1:2a:2a:d0:3a:bb:92:72:bf:a8:61:a7:ea:
59:c7:98:69:db:95:ee:14:3f:af:08:d5:dc:9d:7a:
9a:2a:81:05:a1:0a:2d:3f:81:f2:26:84:d1:cf:97:
95:aa:6a:95:63:cd:f1:c9:55:38:75:2a:0e:5f:01:
29:19:8c:aa:7c:98:41:bf:d2:89:a3:ab:7e:4c:f4:
74:7d:46:f1:f9:03:23:13:b5:d7:61:03:79:d9:3d:
61:9f:93:66:62:36:b8:22:06:5b:4a:5b:bb:8b:25:
67:b8:3a:5d:11:d7:5f:aa:bd:e3:3f:6d:89:36:28:
83:83:bb:6e:be:e6:07:32:22:ec:43:ab:15:13:0b:
d4:f7:d1:74:68:8f:4b:4e:92:ff:06:6e:4b:44:49:
8a:74:58:bd:51:e7:51:83:11:66:7e:e5:00:2c:fc:
a0:01:18:76:1c:af:9f:38:49:85:1a:77:e9:88:18:
63:d6:75:fb:a6:59:a6:37:20:57:54:c8:4f:24:19:
7d:53:9e:40:03:f3:53:fb:2e:34:f0:f8:24:52:89:
61:43:5a:48:13:d0:d0:cf:04:70:ee:ac:18:0f:63:
72:cb:27:de:16:f9:3f:0e:14:6f:db:0d:02:0c:0f:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:F6:87:62:1C:BA:6C:76:45:1C:6E:70:69:8F:81:04:93:11:29
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/Laf2h2Icumx2RRxucGmPgQSTESk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:89:15:19:ad:81:14:7b:4b:8b:0c:bd:3e:79:06:f8:94:fa:
09:54:67:e4:04:0a:6e:6f:39:21:43:65:53:68:86:87:47:32:
6c:79:5c:23:83:88:a3:b4:85:c2:35:d9:82:d1:d6:13:78:e7:
17:0a:a6:a9:63:6e:9a:5b:d8:1c:3d:a4:e3:c5:9a:2c:c0:c8:
2b:04:59:35:71:4a:66:2e:bc:76:e5:31:53:ff:7b:c8:b4:98:
e9:0f:45:2d:00:58:ea:ee:23:a5:b2:9d:b0:5a:3c:52:b4:91:
58:8c:b8:d7:d8:b0:05:de:0b:7b:46:32:78:1b:34:f5:b2:a6:
ef:52:41:61:f7:36:30:fc:a9:c6:b0:c0:9c:44:f1:a9:4c:df:
ee:0a:80:ac:3a:ce:99:a2:ad:d9:38:3f:6c:74:57:3f:3f:37:
60:6d:16:46:fa:68:5b:6b:c7:ff:f0:69:a4:e4:e6:f7:e4:4d:
51:38:b1:76:0d:79:74:c6:ec:e7:2a:e5:1f:6d:e9:6b:0f:4e:
83:89:7e:02:26:20:af:29:fc:bb:68:ce:64:94:e5:e9:bb:25:
c9:b9:61:c2:1d:31:96:a7:83:63:69:d0:df:1b:09:66:b2:37:
4f:3f:23:fb:e0:60:d5:66:86:1d:1b:1f:48:42:8f:fa:8c:65:
c2:f6:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:36 2024 by rpki-client on console-ams.rpki-client.org