Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/rUH_IN7_jQvL0BCraP3cTOq83Jw.roa
File: rUH_IN7_jQvL0BCraP3cTOq83Jw.roa (raw, json)
Hash identifier: E5I3BLorPg72PkbnrjZtz/FjjzA+JsJ5rXFytBwifbI=
Subject key identifier: AD:41:FF:20:DE:FF:8D:0B:CB:D0:10:AB:68:FD:DC:4C:EA:BC:DC:9C
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 01857082C0E23DAB1D6776843045FF7ACBA6
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/rUH_IN7_jQvL0BCraP3cTOq83Jw.roa
Signing time: Mon 02 Jan 2023 03:24:55 +0000
ROA not before: Mon 02 Jan 2023 03:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207534
IP address blocks: 212.6.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c0:e2:3d:ab:1d:67:76:84:30:45:ff:7a:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jan 2 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad41ff20deff8d0bcbd010ab68fddc4ceabcdc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:1b:9e:39:cb:c1:f5:ad:98:39:5f:77:07:
fa:55:4f:d9:e1:29:6c:3c:d6:b8:a6:e1:ec:0c:11:
47:a1:68:d2:62:bc:5c:f9:9f:32:e5:86:71:37:97:
e5:6d:bf:ff:17:a8:bb:2b:ba:0e:6d:f3:9c:60:ba:
04:86:a1:c5:7a:cc:25:53:74:19:c6:d4:e8:5a:66:
ff:21:04:bf:6f:4c:4c:0d:45:d3:20:3e:6d:f5:f5:
5a:7f:41:23:fc:8a:c9:50:7d:65:a3:f5:25:b9:fe:
6b:a2:d9:35:42:bc:88:2f:3e:a8:2f:b6:ab:ab:0f:
db:4d:b8:79:c4:e0:d2:a2:7c:8d:c3:31:ae:79:4c:
b9:97:73:1a:74:f5:a2:44:aa:7c:38:5e:1b:ba:ab:
3a:c6:70:2f:89:ee:d2:3f:fb:5c:f4:bd:6c:e3:85:
0f:26:33:59:ad:e6:4a:b3:b9:f3:7f:4d:28:bf:84:
3f:04:84:63:4e:09:24:ab:4b:d1:38:98:ee:f4:14:
2f:9b:8b:7d:a3:ba:9d:c9:15:7f:40:39:bc:b8:1d:
82:68:f2:fe:b4:94:20:8c:98:e6:50:69:29:c3:60:
e7:c7:29:35:5d:fb:fb:79:95:a5:bc:cf:72:6f:6c:
28:6c:8c:5d:f0:b9:3f:8d:17:08:6a:8e:12:2d:c7:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:FF:20:DE:FF:8D:0B:CB:D0:10:AB:68:FD:DC:4C:EA:BC:DC:9C
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/rUH_IN7_jQvL0BCraP3cTOq83Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:54:26:ec:52:7e:39:9e:2a:42:e4:91:4f:56:e8:f5:f3:b3:
ec:c7:a6:26:6a:55:c3:8c:a1:22:78:13:45:59:68:c0:97:aa:
92:32:ee:4a:19:75:04:be:c2:57:af:6b:c9:e3:46:f9:fb:bb:
27:00:4a:48:75:8f:64:04:e7:a0:0a:14:37:49:47:72:f0:a2:
e5:7c:21:1c:3e:b5:42:dd:97:7c:3c:c8:a9:8d:52:2d:3d:26:
8a:13:9e:bc:76:97:62:71:2a:aa:ce:4a:34:f5:a3:4a:d4:12:
72:f5:3e:16:ee:c6:eb:4c:d8:8e:6c:bc:b7:5b:f5:9e:05:ef:
99:e4:3f:04:1a:84:12:b9:be:e2:52:ef:70:97:3f:bd:23:6c:
39:d7:50:3e:a2:80:90:27:eb:aa:2a:11:43:6b:d8:99:d6:fc:
6d:11:81:98:a6:fb:61:f6:7a:54:6f:92:36:d4:95:9a:92:8f:
06:7c:bc:b2:64:41:da:24:9d:14:54:fc:fc:ef:9a:6c:60:f1:
74:bd:3c:c9:f6:54:8e:69:75:dc:07:69:fb:8f:b8:48:5f:f0:
50:7a:e7:8e:f5:d6:fb:e0:17:3e:63:48:de:80:4a:21:66:ac:
3b:10:19:21:db:9f:a1:28:6f:6d:cd:08:8c:03:a5:86:09:88:
61:bc:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org