Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/a62dnL782wVRdq26Rzv1asvNkwU.roa
File: a62dnL782wVRdq26Rzv1asvNkwU.roa (raw, json)
Hash identifier: KGbOCkWvwuNqMq3stCUAX7RAv3uNsSv8hca27+eLLq0=
Subject key identifier: 6B:AD:9D:9C:BE:FC:DB:05:51:76:AD:BA:47:3B:F5:6A:CB:CD:93:05
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01882F53169959A537903231D92E229C96D8
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/a62dnL782wVRdq26Rzv1asvNkwU.roa
Signing time: Thu 18 May 2023 14:45:54 +0000
ROA not before: Thu 18 May 2023 14:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.120.0/22 maxlen: 22
212.113.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 08:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:53:16:99:59:a5:37:90:32:31:d9:2e:22:9c:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: May 18 14:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bad9d9cbefcdb055176adba473bf56acbcd9305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:c5:38:08:fa:24:11:bf:fa:e8:19:a9:31:
61:3d:67:6f:45:f1:a0:11:6c:d1:c7:54:f7:3e:0f:
09:6a:97:c1:4a:9c:27:f9:c8:a1:39:58:f0:8a:ae:
d7:92:ad:cb:0b:af:6c:07:56:70:b0:fa:da:5c:56:
61:7e:93:f1:d0:72:05:79:f7:76:66:f4:3b:60:85:
8f:60:03:f8:92:33:76:0b:a5:b8:5f:8e:22:6c:d2:
83:84:62:66:05:38:47:c8:e4:69:23:8e:f8:27:b8:
ce:61:81:a2:20:18:7b:f8:ef:2d:81:2b:81:01:ed:
8c:98:8e:36:50:3e:76:82:82:79:3e:21:15:ae:b1:
f2:16:b1:88:00:8f:74:aa:c1:da:ae:0d:50:0b:89:
5d:bf:a0:05:41:0e:62:58:4b:b4:9a:ce:24:be:fa:
d0:e7:5a:1e:0a:64:27:01:5c:63:1a:cf:d1:04:9a:
30:62:85:8a:9a:7b:11:c6:f2:5e:33:e3:a2:b2:09:
fe:cb:a9:c2:2a:31:cc:76:6c:51:a7:a1:ac:97:ac:
dd:b3:6a:c6:2a:f1:ff:d5:33:89:01:b9:ef:62:47:
38:14:29:30:42:45:97:14:23:bf:3d:ff:da:be:0c:
24:60:34:e8:a4:34:4b:ee:b9:8d:a7:c4:1a:bb:82:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:9D:9C:BE:FC:DB:05:51:76:AD:BA:47:3B:F5:6A:CB:CD:93:05
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/a62dnL782wVRdq26Rzv1asvNkwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.119.0-212.113.123.255
Signature Algorithm: sha256WithRSAEncryption
3b:86:62:64:25:49:52:31:6c:83:b0:be:d4:f4:5f:a9:2a:56:
9b:16:7f:93:c0:da:a0:a0:1c:d6:7c:4b:d1:69:69:e9:39:0c:
a8:a1:36:a9:00:23:88:17:7d:94:a1:ea:7e:66:e0:13:18:88:
60:5d:ff:50:74:df:61:70:73:40:7f:41:ac:52:91:b6:27:fb:
e6:14:dd:93:5f:81:62:b2:25:8d:2e:08:ea:ee:23:3e:0d:5e:
da:23:f1:30:64:40:b5:e4:95:d5:17:96:7f:d3:cd:b8:b3:00:
dc:a6:e6:03:7b:dd:d2:da:a5:5c:bf:4d:3f:0d:05:8a:55:9e:
6f:b5:7a:5c:d5:cf:a8:60:85:af:b4:5c:0e:31:9e:50:da:a6:
67:c3:a1:a0:e7:b9:55:8d:9f:b6:54:da:49:dd:56:43:50:35:
b8:82:92:ee:21:7f:16:2f:13:83:28:ba:69:23:dc:cd:95:6a:
6a:86:00:c1:f2:30:42:b5:d6:a6:05:fd:f6:1e:de:f5:3d:82:
e5:c3:1e:1c:09:6c:52:e6:1c:21:ee:a1:96:72:93:3d:5a:93:
2d:51:f5:26:3e:21:0c:12:88:9f:ee:b7:2a:2f:99:f8:37:9e:
c9:63:e5:e4:ab:8e:46:e6:af:3f:dd:cc:57:2c:c8:c4:cd:7e:
1f:ed:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org