Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bRYSa-Gdd3skaPTGmRkLiZpSoBs.roa
File: bRYSa-Gdd3skaPTGmRkLiZpSoBs.roa (raw, json)
Hash identifier: DhtTfwHAd0fy6EbT7XHLAJolg7PQnYeKtjws/LvrWdA=
Subject key identifier: 6D:16:12:6B:E1:9D:77:7B:24:68:F4:C6:99:19:0B:89:9A:52:A0:1B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF974FCBDBE2AA4C5F92ADC3D16F9E7
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bRYSa-Gdd3skaPTGmRkLiZpSoBs.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48064
IP address blocks: 212.50.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:74:fc:bd:be:2a:a4:c5:f9:2a:dc:3d:16:f9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d16126be19d777b2468f4c699190b899a52a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:bd:39:03:26:d7:8a:dd:8b:b8:e8:e5:25:
70:65:21:1d:c4:bf:c8:43:96:ba:c0:4d:20:c2:6c:
d3:33:00:84:64:aa:b1:01:55:85:94:66:ea:2f:7a:
b6:80:04:21:84:05:38:ee:b8:d2:d9:73:21:e7:d7:
c2:eb:fb:8e:7b:86:d8:24:35:03:29:50:56:9b:2f:
8e:f8:4a:50:77:ba:76:a4:c9:fc:6d:c7:53:db:fb:
ff:72:4b:bf:67:13:17:f1:fb:d4:fc:9d:cf:8e:46:
63:31:1a:42:b6:10:ff:6f:36:92:2c:e9:66:32:db:
dc:ca:4b:cc:cd:2c:a2:92:7a:c8:2b:81:61:71:d4:
22:af:6e:23:7e:9f:b2:db:3f:8a:d7:6e:de:24:93:
9e:e3:bb:65:66:5d:6f:fd:2e:96:7c:61:9e:db:6e:
a8:e6:dc:f9:9d:45:f9:d6:1e:9a:91:d5:ea:5c:24:
ca:69:e5:2a:bf:b4:55:44:23:53:6a:1f:90:a0:17:
5c:df:8d:41:6b:48:e8:7f:11:9b:88:86:ec:92:a6:
f5:07:35:1d:ac:72:68:af:5d:cb:5e:8b:39:eb:bc:
4b:25:5d:80:99:81:8e:69:d5:40:d6:75:29:16:52:
a6:9e:16:20:44:1c:bf:7d:b7:c2:f2:e7:7e:8b:94:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:12:6B:E1:9D:77:7B:24:68:F4:C6:99:19:0B:89:9A:52:A0:1B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bRYSa-Gdd3skaPTGmRkLiZpSoBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.50.17.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f6:4b:b6:84:c2:cf:c2:df:f4:b8:a9:a2:f5:10:1e:d5:74:
68:b9:6f:e9:68:c2:b0:7e:d0:7f:ee:2b:c6:29:50:2b:68:fe:
15:e1:fa:7b:e3:58:9e:0f:86:2f:04:ae:3c:0f:39:92:ff:e5:
32:1d:53:43:4b:5f:78:76:ad:36:91:36:80:9a:b8:ac:c9:ea:
73:b5:5e:17:29:1d:9f:93:e8:64:d4:0f:e7:e1:7d:86:cc:08:
25:9b:e2:03:63:5e:40:00:0c:e6:4e:d7:0a:fc:1b:eb:71:81:
67:ec:e1:59:48:54:17:4e:b6:81:9f:8d:90:f2:0b:7a:96:41:
d0:a9:c0:a1:82:55:01:08:28:d7:eb:00:75:6f:f6:46:e3:1a:
76:db:b8:64:ba:1d:3a:20:b2:76:c8:f7:79:8c:25:34:33:a8:
1a:0b:6e:40:5a:88:ce:07:5f:0c:ce:37:f4:bc:9b:05:11:6b:
0b:3a:9c:ce:26:b8:0f:12:21:46:0a:14:c3:cb:50:44:49:9c:
98:97:c2:1a:b9:6c:1e:e4:43:80:46:3b:d0:40:5c:81:4f:d8:
d6:ba:dd:8a:47:a0:63:f0:6e:6a:1e:6f:42:14:fe:b9:42:3f:
a2:1f:f4:c1:4a:82:56:fd:02:42:91:30:4a:cb:44:b4:a1:ba:
e4:72:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org