Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qCyAv_3E7iBLzg2Nm1lBBQEm28k.roa
File: qCyAv_3E7iBLzg2Nm1lBBQEm28k.roa (raw, json)
Hash identifier: 5kLsT1FMcQeyN+vpvIVSullCrmI9Jsg+GTnNGYsTrH0=
Subject key identifier: A8:2C:80:BF:FD:C4:EE:20:4B:CE:0D:8D:9B:59:41:05:01:26:DB:C9
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC80202A7600632C0EA5A4C91236684C9
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qCyAv_3E7iBLzg2Nm1lBBQEm28k.roa
Signing time: Tue 02 Jan 2024 02:30:24 +0000
ROA not before: Tue 02 Jan 2024 02:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24699
IP address blocks: 212.124.16.0/20 maxlen: 20
212.124.29.0/24 maxlen: 24
212.124.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 05:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:02:a7:60:06:32:c0:ea:5a:4c:91:23:66:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a82c80bffdc4ee204bce0d8d9b5941050126dbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:d1:a1:03:99:a7:b1:68:be:1c:69:ee:6c:
c0:c6:8a:c0:31:c3:ad:08:e9:58:35:2f:6e:fc:a7:
1b:6d:f7:fb:01:01:bf:3f:cb:4f:b9:d6:07:36:6d:
84:14:c7:2d:87:49:16:7c:4b:5c:22:a7:0e:db:89:
69:32:3f:57:73:a2:b9:3a:d0:11:fb:82:18:78:a1:
78:1e:7b:74:25:56:ee:60:e0:39:bc:14:b0:b1:01:
60:b5:14:02:28:7d:b0:0b:8e:fb:bf:8a:5b:6e:0e:
42:1d:9a:f3:0d:37:7c:44:55:90:f8:34:e8:81:c7:
2c:96:92:da:37:9f:b2:9b:be:1e:da:bf:d7:94:60:
77:89:5a:b9:41:32:6d:8f:5d:51:c6:11:e0:ec:d2:
27:e2:91:9d:8f:66:db:0f:d3:81:3f:bc:64:26:03:
87:c5:0f:10:f1:d9:12:af:c8:85:56:d6:e2:e3:f4:
f5:b4:fb:67:b3:19:f7:f6:8d:c7:78:9e:8a:83:5f:
b9:a6:38:92:26:13:2a:51:30:8a:30:58:dc:11:e0:
57:11:dd:77:ee:cf:c6:ca:38:39:46:b9:92:3e:53:
af:54:2a:cd:2c:3c:ba:5f:ca:37:9c:a4:a9:f8:be:
3b:f0:c9:3c:6e:61:4a:25:c0:f0:05:48:99:ef:bf:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:80:BF:FD:C4:EE:20:4B:CE:0D:8D:9B:59:41:05:01:26:DB:C9
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qCyAv_3E7iBLzg2Nm1lBBQEm28k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:66:2d:73:06:2c:eb:e2:70:60:af:06:93:69:59:48:7c:42:
d6:75:11:5e:9d:c3:bb:74:b9:d4:07:c3:57:2c:db:f3:d4:cd:
dd:4a:b4:f8:1d:01:33:81:f8:f3:65:85:74:0c:f3:50:b9:5f:
26:9c:d5:00:40:aa:59:de:c3:2e:61:78:77:8b:50:d8:a8:75:
d7:0e:64:2b:9b:10:f6:17:f0:62:b9:0c:6d:cd:00:fe:29:ad:
68:ac:bc:e1:40:f4:92:0b:33:00:80:a8:e6:1c:ea:64:e5:0a:
a2:42:05:4d:65:03:d5:f3:15:7b:2a:e9:7f:02:1c:23:7c:7d:
12:54:00:c6:3a:7b:13:83:70:90:f1:a3:8d:cd:91:06:36:04:
aa:80:74:64:12:93:4a:5e:75:f3:a5:d0:13:77:33:b8:02:fb:
0c:ac:a9:9d:74:43:21:c9:ee:08:82:17:d5:9e:3a:73:92:18:
82:0b:a6:c8:42:e0:5b:b5:e0:de:b2:51:80:9f:96:6b:c3:6c:
36:e7:2b:00:5d:96:32:74:ea:09:e3:8e:e4:ea:9d:e7:ed:2f:
8c:73:f6:84:a5:71:2f:45:31:b6:3f:1c:b9:64:c0:60:4a:75:
b8:4f:fc:f9:33:da:53:02:b8:3d:0c:d7:96:ef:71:a0:52:73:
9b:e2:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:09:47 2024 by rpki-client on console.sobornost.net