Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/yRTDEOIcwnt_BV78NlogYurKb9w.roa
File: yRTDEOIcwnt_BV78NlogYurKb9w.roa (raw, json)
Hash identifier: C3p1RVRU92C671+pm6RCX9bnNJTXJoZPD1JPlK9FDzQ=
Subject key identifier: C9:14:C3:10:E2:1C:C2:7B:7F:05:5E:FC:36:5A:20:62:EA:CA:6F:DC
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 01856FF05143E0F3610031F297C45C274333
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/yRTDEOIcwnt_BV78NlogYurKb9w.roa
Signing time: Mon 02 Jan 2023 00:44:58 +0000
ROA not before: Mon 02 Jan 2023 00:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51679
IP address blocks: 212.46.50.0/24 maxlen: 24
2a12:c40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:51:43:e0:f3:61:00:31:f2:97:c4:5c:27:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Jan 2 00:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c914c310e21cc27b7f055efc365a2062eaca6fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:2f:7a:7b:2a:0a:20:1d:71:93:f1:21:17:
9f:32:0b:bf:bf:05:ff:39:b1:67:99:c8:09:57:cf:
dc:c7:16:95:aa:ef:0a:8f:94:1f:61:3d:00:23:0d:
61:5a:66:b7:7d:79:f1:4b:89:29:20:33:ed:83:59:
68:1f:85:9a:94:57:48:59:12:ac:bb:fd:61:60:96:
0c:8d:bb:ce:c5:0e:c3:eb:54:ee:0a:82:05:b0:3c:
2e:f5:8d:66:7d:4e:d4:9c:1b:75:0f:25:ca:a5:88:
b2:c6:8c:eb:fa:3e:d9:45:c1:9d:05:a1:08:ba:9d:
48:d7:7e:95:1d:c3:ab:c6:dc:a6:c9:d6:4d:b2:0e:
22:66:a6:4e:80:2b:8a:0d:d4:80:45:f1:aa:24:5d:
11:dd:2f:26:f2:ef:f7:62:75:22:17:80:40:30:98:
90:41:95:12:38:7c:cb:33:59:0d:11:a4:e7:f3:a8:
16:63:06:6d:c6:9e:c2:da:16:9d:d6:77:91:f1:bb:
59:f0:6d:35:1d:94:e5:94:03:7c:c4:0e:d4:92:9d:
a7:39:77:6f:b4:4d:4e:0f:dd:8b:18:c8:e6:12:e0:
6f:a3:0c:54:f4:5b:3c:71:b1:a9:68:6a:10:56:2b:
73:6a:62:6a:55:1a:55:f8:f8:96:6e:ce:99:70:60:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:C3:10:E2:1C:C2:7B:7F:05:5E:FC:36:5A:20:62:EA:CA:6F:DC
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/yRTDEOIcwnt_BV78NlogYurKb9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.50.0/24
IPv6:
2a12:c40::/29
Signature Algorithm: sha256WithRSAEncryption
5c:c8:35:0e:81:fa:a1:37:aa:71:f2:0d:bc:e9:bc:6c:75:f6:
d4:6a:0f:87:8c:56:db:6b:d5:1c:31:b5:6e:90:d5:34:72:a9:
b8:fa:01:89:6d:c8:3a:ad:e7:f5:c3:c8:11:dd:d4:8d:f4:fd:
5c:34:98:09:74:9f:e3:51:e8:ad:7f:ab:03:2b:66:f7:2c:2f:
28:91:3f:cb:df:89:f0:81:d9:4e:d7:0c:ce:b8:04:6e:88:8d:
26:ba:34:41:93:1a:0d:5d:97:67:fc:e4:bd:ee:02:e5:dd:f4:
b8:cf:37:e8:89:36:58:af:e6:fb:41:37:66:0e:03:1c:6d:99:
09:7c:6c:30:6f:ca:c7:65:94:01:1d:1f:0c:da:53:02:17:6d:
99:7c:a3:fd:b4:b5:53:a0:4b:20:de:dc:e3:c4:96:b4:c9:ba:
ec:cc:03:8a:bc:2c:e2:9a:23:08:a2:b7:b3:d4:95:93:e0:14:
c8:81:e5:3c:3b:e3:e2:bc:d7:7b:1c:5e:d6:e4:a5:0e:be:74:
0a:dc:e4:01:84:3b:32:ee:87:2c:a9:7c:da:80:51:4e:72:2e:
81:03:ed:40:94:6f:2f:94:ee:2d:3a:98:e5:78:fe:3e:81:f7:
9e:8e:c8:8a:29:61:ba:5a:dd:19:29:bb:7f:34:be:67:c5:92:
51:ef:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:51 2024 by rpki-client on console-fra.rpki-client.org