Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3yZ6cI8MV6YjIp_REWQRkEXa_xM.roa
File: 3yZ6cI8MV6YjIp_REWQRkEXa_xM.roa (raw, json)
Hash identifier: GTeUejH6KvLrVmN6uQjEd3MIgHQXEP4iMzqI2LacLB0=
Subject key identifier: DF:26:7A:70:8F:0C:57:A6:23:22:9F:D1:11:64:11:90:45:DA:FF:13
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018B9959B908F81EE3CBA3F3A0E29E43DCB7
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3yZ6cI8MV6YjIp_REWQRkEXa_xM.roa
Signing time: Sat 04 Nov 2023 08:01:15 +0000
ROA not before: Sat 04 Nov 2023 08:01:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199599
IP address blocks: 212.67.16.0/24 maxlen: 24
212.67.19.0/24 maxlen: 24
212.67.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:59:b9:08:f8:1e:e3:cb:a3:f3:a0:e2:9e:43:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 4 08:01:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df267a708f0c57a623229fd11164119045daff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:9c:b3:38:8e:35:5a:df:6e:31:92:e9:a1:
1c:eb:5a:f3:39:f3:32:b7:5b:c1:03:a9:60:de:1f:
78:f5:48:57:75:8d:35:3f:c7:05:68:6d:f7:ed:00:
90:ad:c4:71:2f:0b:a3:94:64:39:ff:2b:7f:19:88:
d8:23:6b:9c:9b:d0:e3:31:2f:47:b3:11:14:a2:4b:
52:5c:2a:ca:6e:2b:74:73:59:64:ce:07:d1:9e:74:
ef:cd:cb:f6:36:c4:29:25:e2:94:a5:90:a5:e6:f2:
74:b7:c5:8a:bb:e6:90:0f:a6:6b:a9:72:77:79:58:
dd:94:2f:9c:91:78:b2:8f:87:bb:ea:f0:14:0f:10:
02:6c:df:f9:70:8a:13:13:a5:ad:01:06:04:42:a0:
79:9b:1f:77:c9:20:ee:82:12:4f:b9:48:a5:87:60:
e0:da:96:af:a7:4c:24:b3:b4:97:c8:05:74:ec:e4:
62:3c:0d:8b:65:8d:d9:ab:cf:f9:1b:1f:cb:8f:8b:
6e:8e:b5:5f:85:1c:e3:a7:ea:17:f1:b9:c4:51:63:
2a:72:89:d7:b3:31:23:72:0a:3b:71:62:ae:38:0b:
20:d6:5f:6f:dc:d7:66:99:1d:d4:58:6e:bc:c9:c0:
8d:6c:47:db:c0:2d:75:21:df:4a:2f:f4:30:ef:f3:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:7A:70:8F:0C:57:A6:23:22:9F:D1:11:64:11:90:45:DA:FF:13
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3yZ6cI8MV6YjIp_REWQRkEXa_xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.67.16.0/24
212.67.18.0/23
Signature Algorithm: sha256WithRSAEncryption
75:b3:95:f1:45:b6:b2:6b:fe:5c:36:65:98:bc:c3:d8:cb:68:
14:4c:ea:d9:ff:33:da:a4:31:59:51:27:fe:64:84:a8:cb:cd:
cf:12:d4:59:1f:ad:ed:ff:75:66:9a:56:9f:7b:c9:aa:18:e9:
e4:22:5f:1e:07:b0:21:b9:75:b4:59:7d:f9:af:ea:94:48:be:
d5:3c:9c:7c:19:26:34:bc:33:95:b9:0c:30:8d:13:ef:65:f8:
7e:0b:8e:00:74:fb:c9:9a:9f:72:cf:c6:41:1a:2a:31:d4:29:
af:fc:03:52:38:01:39:a1:cd:34:6a:48:d3:9e:89:21:e7:47:
3f:32:12:62:a0:41:c0:99:eb:79:d8:7f:19:bf:36:55:c1:28:
75:65:55:f0:35:0e:d6:58:83:81:ba:41:c2:61:89:aa:25:a3:
56:f8:9b:00:ea:93:01:5a:45:10:b8:95:f4:2e:29:ae:c8:7d:
1a:f1:85:14:59:b3:f3:8d:96:87:36:3a:df:31:45:90:9a:42:
5c:4b:44:2c:77:dd:95:3e:ac:d7:c9:48:9d:13:98:ca:54:ee:
00:59:b6:46:53:4b:9b:95:f4:28:f1:62:c5:bb:67:d5:22:ee:
f2:3a:38:c3:ff:e3:f1:e0:df:31:15:55:e7:b6:e6:ab:c6:6f:
ff:fc:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org