Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/c34Rli-vL2R3MXirwdA7kq1_Nng.roa
File: c34Rli-vL2R3MXirwdA7kq1_Nng.roa (raw, json)
Hash identifier: 2WyGEnDpg8gBJptngo6DUA3XjrOWnKTISeNutc74Z30=
Subject key identifier: 73:7E:11:96:2F:AF:2F:64:77:31:78:AB:C1:D0:3B:92:AD:7F:36:78
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 01856CAF0BAD9EF7402DD4F9849EA897BE54
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/c34Rli-vL2R3MXirwdA7kq1_Nng.roa
Signing time: Sun 01 Jan 2023 09:34:49 +0000
ROA not before: Sun 01 Jan 2023 09:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199484
IP address blocks: 212.64.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0b:ad:9e:f7:40:2d:d4:f9:84:9e:a8:97:be:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 09:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737e11962faf2f64773178abc1d03b92ad7f3678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:a9:19:60:0a:37:7b:13:0f:6d:5e:f7:a4:
bc:1f:b2:26:57:e9:c1:f5:35:68:49:88:a2:25:d1:
a0:de:8c:63:d5:28:24:64:1f:4d:21:a5:23:e5:22:
b3:f6:e9:67:64:dc:7b:03:c6:95:44:4f:3f:81:39:
62:54:0b:d9:b5:73:f1:d9:be:26:cb:55:05:6d:de:
99:a2:cc:a1:da:fc:45:dc:cc:03:70:90:d3:66:1c:
b5:87:41:54:8f:f5:22:6f:72:a9:4e:87:33:0c:18:
d4:ec:17:56:70:33:cf:83:ed:d3:41:fa:ee:78:2b:
3b:85:d2:69:83:2d:66:9f:1a:96:85:52:fd:0b:a7:
4c:59:d0:4a:e2:74:a1:c1:fb:83:00:d2:dd:ee:28:
ab:81:a2:3f:57:df:61:84:8c:6e:0e:0a:12:11:ee:
1a:31:56:52:4f:7f:1d:6d:4e:a1:6b:4f:89:54:3f:
88:01:2d:28:92:20:ea:20:35:f3:a2:78:b4:11:08:
59:7c:fb:97:ee:cc:3c:de:fe:4f:2a:39:85:56:72:
bb:97:15:88:bb:ee:80:84:c3:c4:59:bd:45:84:be:
47:a1:a2:3b:a8:87:70:8a:63:40:2f:53:c7:b1:c5:
61:be:1c:99:66:b2:ed:22:ed:55:22:e4:c5:a7:ca:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:11:96:2F:AF:2F:64:77:31:78:AB:C1:D0:3B:92:AD:7F:36:78
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/c34Rli-vL2R3MXirwdA7kq1_Nng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.195.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f7:5c:61:35:ea:0b:0b:9c:67:62:1f:3d:28:92:6a:69:a8:
a0:fa:76:75:e7:4b:13:8e:00:7a:bf:88:69:66:ca:85:89:45:
3d:63:00:fc:59:bf:f2:44:72:13:2e:04:4e:61:ef:92:93:d7:
e2:7a:40:2a:9f:e4:aa:8d:a9:3b:f7:e9:26:02:8a:83:e4:04:
9d:03:3e:87:45:98:ef:cd:e1:fc:ab:42:bb:2c:89:93:5a:9b:
70:cb:9b:ef:3a:1c:df:08:fa:11:ab:1e:a3:10:2a:a9:25:d7:
e6:1a:7d:3c:58:aa:33:c5:82:26:40:21:85:90:e0:6d:50:09:
97:7c:a7:c8:0a:b3:bf:bc:97:c5:d8:56:0e:ca:8e:a6:ae:9a:
ce:8c:c8:de:3e:a2:05:69:9a:2a:84:dd:6d:a0:08:6c:0a:33:
5f:fb:c4:37:b3:aa:6e:27:a5:2d:27:d0:8a:78:5a:5b:c1:a8:
73:0d:7c:9a:87:5a:de:f4:9c:57:21:d2:f2:2e:f7:cb:fa:f6:
bf:5a:6b:33:4f:04:8e:45:1c:1a:94:a8:82:46:8b:71:79:1e:
41:8e:ab:20:e0:36:66:36:0d:35:7e:2e:95:a6:26:42:44:a0:
84:cf:4f:e3:01:e7:a4:36:59:81:2e:58:d8:8c:7f:3c:4b:3e:
a5:31:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org