Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9qdy6LyP7H9J0aqDsrMnoN5RUsI.roa
File: 9qdy6LyP7H9J0aqDsrMnoN5RUsI.roa (raw, json)
Hash identifier: obyvQhAbFSlHEoqoLRvZnD5afic2TvX1SlSk08qaX8c=
Subject key identifier: F6:A7:72:E8:BC:8F:EC:7F:49:D1:AA:83:B2:B3:27:A0:DE:51:52:C2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9795FD8DE6EC652FEB85672E07B37
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9qdy6LyP7H9J0aqDsrMnoN5RUsI.roa
Signing time: Mon 02 Jan 2023 00:54:58 +0000
ROA not before: Mon 02 Jan 2023 00:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51830
IP address blocks: 212.36.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:79:5f:d8:de:6e:c6:52:fe:b8:56:72:e0:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a772e8bc8fec7f49d1aa83b2b327a0de5152c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:68:71:8e:d4:20:b2:69:89:92:5c:ed:2e:
b0:fc:13:92:61:7d:9b:7c:96:85:5c:c9:32:63:b5:
36:be:17:77:c8:e8:3f:ce:75:c4:67:b9:15:21:b4:
65:4d:36:fb:d1:77:88:ef:dc:39:8a:a3:9a:08:00:
4d:a0:94:a2:5e:0d:9d:ac:fa:24:25:22:e3:c4:96:
6e:b0:60:e4:11:4f:56:6b:18:7a:c6:05:5a:f1:f9:
f9:20:5c:98:56:6d:6d:30:6c:64:71:4b:72:5b:b5:
db:99:da:90:da:38:6b:d9:83:e8:9d:c7:ff:8e:c7:
25:fc:7a:3b:3c:e2:e3:9b:43:9a:08:c5:8d:e8:e9:
01:17:d8:90:9c:66:b6:eb:02:e6:df:e9:78:39:c1:
83:9b:24:23:0f:c7:4f:39:c3:f3:e2:c5:49:d2:00:
56:26:79:c9:34:a4:e7:f9:0e:bb:58:8d:42:ee:40:
1e:fd:bb:8a:84:c1:0c:01:a2:6b:a7:cf:d3:a4:2b:
7a:61:4b:54:21:a5:fd:18:c8:c7:2a:81:eb:13:68:
30:95:91:4b:d3:3a:4a:45:07:7f:6d:71:1b:71:54:
cd:4d:58:67:90:48:62:06:80:c0:78:46:1e:21:3d:
c0:b7:5c:f1:ac:e9:fd:e4:f6:66:5a:04:35:87:db:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:72:E8:BC:8F:EC:7F:49:D1:AA:83:B2:B3:27:A0:DE:51:52:C2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9qdy6LyP7H9J0aqDsrMnoN5RUsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b7:01:95:7e:67:31:1d:b8:33:f2:64:f0:bb:0b:e3:6c:48:
f5:ad:85:91:57:36:6d:c4:1d:11:7a:d0:3c:66:cb:f6:20:76:
07:dd:d9:81:6d:a2:af:26:d3:30:7b:91:b2:cc:a6:ea:81:db:
e9:5a:24:80:93:34:c2:b4:cd:78:18:b2:f9:16:c3:ce:36:f1:
08:96:3d:04:52:ff:3e:36:fe:42:68:37:0c:eb:c6:f2:5d:1b:
5e:c7:8a:47:90:72:80:bf:0b:52:96:b6:56:6c:dd:10:6b:cd:
4c:17:87:98:0c:69:3b:07:71:c3:01:6b:35:68:57:f8:1e:c0:
a2:4b:4f:2e:a0:63:d8:4e:7d:36:1c:09:b3:9d:01:3c:f6:0c:
9a:45:87:90:a4:ec:53:42:9f:88:ab:d6:a5:d7:c1:89:00:86:
0f:12:d9:e8:1b:12:1d:1c:91:b0:c0:0a:60:17:ef:e9:8b:79:
44:58:72:ac:29:99:31:ad:a5:50:7c:37:73:ab:e7:bf:86:83:
be:94:81:ea:bc:f2:26:b6:46:a2:20:77:60:0a:31:ff:3a:4c:
cc:f8:e7:75:24:88:89:68:79:83:7f:9c:0c:9c:72:ed:6e:6f:
e9:bc:fc:db:b1:e3:06:03:fc:b9:8a:cd:4d:5b:80:6a:f6:ab:
5c:40:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org