Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/dRcN5c6ATOzdVH0DLVK0MVR0CXs.roa
File: dRcN5c6ATOzdVH0DLVK0MVR0CXs.roa (raw, json)
Hash identifier: zg3fxScBB8wtU8tPWlYAcPZlhZGgrqM4kPw8OTtDK7w=
Subject key identifier: 75:17:0D:E5:CE:80:4C:EC:DD:54:7D:03:2D:52:B4:31:54:74:09:7B
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018752907FFEE9DB3E9E92603C28E1062674
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/dRcN5c6ATOzdVH0DLVK0MVR0CXs.roa
Signing time: Wed 05 Apr 2023 17:56:54 +0000
ROA not before: Wed 05 Apr 2023 17:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 212.113.117.0/24 maxlen: 24
212.113.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 08:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:90:7f:fe:e9:db:3e:9e:92:60:3c:28:e1:06:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Apr 5 17:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75170de5ce804cecdd547d032d52b4315474097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:7e:40:85:39:ab:a1:84:58:c2:fc:c8:30:
13:27:33:f3:47:8b:43:a0:47:e5:bd:d3:b7:b7:60:
bf:1a:ed:0c:4f:f2:24:98:ac:6a:4e:fb:ef:3e:3d:
60:99:eb:33:bf:8d:1b:18:e9:14:b4:38:82:2d:c7:
00:69:62:1e:17:fb:a1:cc:3d:72:1f:29:a4:07:0e:
71:be:b8:59:4d:4b:22:b7:eb:8c:e6:96:ce:e0:23:
cf:c6:6e:8d:a6:37:08:95:5b:65:0e:d1:d8:c4:d4:
0b:f9:b8:e8:43:dc:ea:3a:ec:04:79:27:f0:3d:1a:
ce:86:54:8c:bf:0b:bb:b0:ad:a8:b0:f8:b7:59:2a:
83:93:61:f4:bf:7f:13:2c:89:e9:f3:d9:05:78:d4:
91:f5:ad:08:0e:96:00:e8:82:61:85:9f:4c:a6:0b:
72:60:93:29:fd:8c:1d:04:a0:c8:10:80:c9:80:05:
29:68:d8:09:84:ef:60:98:87:22:36:48:88:01:07:
70:70:46:7d:3a:f3:55:7b:bb:2a:e8:85:86:74:a6:
45:43:1e:65:91:4a:88:27:b4:d5:2a:6d:db:ad:23:
a4:b3:e7:a1:e4:93:f4:f7:ae:65:35:90:53:8f:0f:
a1:38:0b:05:1c:b5:94:1c:47:ef:a0:ce:8d:81:3a:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:0D:E5:CE:80:4C:EC:DD:54:7D:03:2D:52:B4:31:54:74:09:7B
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/dRcN5c6ATOzdVH0DLVK0MVR0CXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.117.0-212.113.118.255
Signature Algorithm: sha256WithRSAEncryption
76:04:c1:91:31:48:62:15:0d:cc:5e:04:5d:dd:52:39:e4:97:
26:da:2e:05:89:32:01:ff:9d:b7:ea:7e:0d:88:6d:78:fe:33:
0c:c8:21:5a:84:c7:26:09:b0:ab:3b:93:a8:2d:78:71:4d:fe:
25:18:97:a7:54:28:c6:d9:7b:80:0b:a2:51:13:91:21:13:db:
07:59:f5:9f:95:11:54:e5:e0:c2:a6:f0:97:4f:0f:ed:88:f0:
c7:e4:83:60:61:26:c9:7c:cb:43:99:d7:8e:16:81:f6:e1:9b:
c5:ad:e9:6a:9d:b7:dc:c0:58:2e:ea:ba:04:a0:d3:8e:4d:39:
2e:7d:a6:f3:b2:e3:7d:5c:dc:27:09:3f:44:1b:23:43:d8:48:
cf:83:51:58:23:06:29:fa:0c:6f:dd:35:e6:65:23:fc:3b:00:
a3:14:fb:f0:6a:95:a3:a6:a8:3d:fb:eb:43:7b:1b:d3:1c:8c:
d3:14:01:a4:ab:d5:44:e5:44:4e:a0:ae:65:fa:85:b3:f3:37:
eb:9a:66:17:e1:5e:3d:b3:b3:88:b7:bf:11:ad:ff:94:78:7a:
0d:d6:79:ca:87:27:31:0a:12:7c:8d:7e:9d:39:00:f7:17:e1:
48:5d:71:c2:92:cb:03:b2:f0:4f:05:f5:19:06:8a:98:c8:d4:
96:e7:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org