Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/Y3DHbGkGq7Q4PDdzTf6IdKUe3X8.roa
File: Y3DHbGkGq7Q4PDdzTf6IdKUe3X8.roa (raw, json)
Hash identifier: sOgQMR/NqN2c2QjeAlFyQMqKAnPLiREW2ADlo0XCjuY=
Subject key identifier: 63:70:C7:6C:69:06:AB:B4:38:3C:37:73:4D:FE:88:74:A5:1E:DD:7F
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 018A8A98953CCF01487789AAE1DA307E27DA
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/Y3DHbGkGq7Q4PDdzTf6IdKUe3X8.roa
Signing time: Tue 12 Sep 2023 18:12:50 +0000
ROA not before: Tue 12 Sep 2023 18:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:98:95:3c:cf:01:48:77:89:aa:e1:da:30:7e:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Sep 12 18:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6370c76c6906abb4383c37734dfe8874a51edd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:9f:f1:a1:33:20:52:a0:1f:0b:e5:17:20:
7c:3f:f2:48:d6:1b:87:32:1c:16:44:f0:39:26:19:
d3:8f:51:1d:1b:a6:2b:50:76:23:a4:56:b5:d5:aa:
b6:4e:a3:fe:98:ba:9d:e0:e7:a0:6d:0d:13:2c:82:
a1:ff:88:53:89:33:36:b1:7d:b3:b0:88:51:35:be:
63:9f:4d:f5:5b:5c:a7:3d:f9:a2:e6:21:3c:59:14:
8b:db:c8:92:34:0c:2e:9a:03:67:97:10:8e:71:b9:
81:bd:b4:9b:c8:3c:f1:a3:99:47:3b:82:2e:24:b6:
d6:8e:a6:1b:df:87:23:e2:75:86:3c:4c:b5:b5:1a:
fb:0a:ca:86:a6:87:78:91:01:6e:96:12:f0:e5:c6:
fc:09:c3:37:66:97:b7:9c:17:da:b5:cd:91:c8:e8:
d9:04:ef:83:8f:2c:5a:55:16:e0:30:5e:2a:af:e5:
f7:6b:95:b8:4f:0d:c4:4c:1b:c1:65:94:3d:f5:3b:
57:2b:8d:94:cc:99:a4:b0:11:a3:5f:e7:c9:f5:9e:
da:a4:36:8e:ec:3e:4f:0d:b9:0b:d9:70:e7:0a:86:
81:e5:6e:db:a1:6c:56:51:79:44:74:48:21:32:51:
98:3d:20:1d:31:7a:21:18:b0:ad:e4:e1:59:70:88:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:70:C7:6C:69:06:AB:B4:38:3C:37:73:4D:FE:88:74:A5:1E:DD:7F
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/Y3DHbGkGq7Q4PDdzTf6IdKUe3X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
40:70:d0:cc:ee:67:55:f9:a8:5b:1e:26:f0:ee:ae:d9:89:68:
66:82:f8:6c:73:d7:ac:10:e3:e7:c7:6d:84:84:c6:83:44:c3:
46:e5:55:20:cd:f9:f4:65:1e:e2:2c:83:0e:d7:61:68:7e:8a:
c1:b2:ab:16:51:50:c7:1c:71:aa:37:b2:fc:bb:9b:f6:63:ed:
6d:13:d1:22:c0:da:50:16:c3:df:4f:a5:28:77:70:be:db:88:
38:0c:81:72:ef:f4:a7:3f:66:08:d5:82:1e:ea:2a:cc:80:38:
50:5a:d8:bc:a5:82:3c:6c:68:cd:e7:67:95:92:92:69:96:f5:
6b:ca:d4:91:6b:81:a6:ec:cf:34:fe:00:3c:39:4b:d7:63:a1:
48:41:85:3d:bf:61:8f:63:d6:68:62:7d:4b:aa:02:2b:62:8a:
c9:01:19:67:52:ea:84:17:5c:3b:e3:72:2b:11:42:c8:0e:02:
b6:4b:40:eb:ea:51:d3:59:0b:6e:19:91:ec:80:b5:12:45:63:
3c:ae:06:f2:18:c4:07:85:44:cf:ec:44:6b:e9:64:3c:df:1a:
66:80:67:d2:6b:6f:c0:14:ab:44:8a:3c:11:54:bd:a9:4c:08:
0c:2c:75:d4:c6:3b:1d:f9:36:cc:b7:05:bc:76:2e:55:88:4f:
89:6a:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:20 2024 by rpki-client on console-fra.rpki-client.org