Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/L-nAhwW1EwD0skiY4gt9jR8Y4Tw.roa
File: L-nAhwW1EwD0skiY4gt9jR8Y4Tw.roa (raw, json)
Hash identifier: iOXBewDgmHL7TYLzlsCUX3tA3dW/jMzyZd9CAg66ReY=
Subject key identifier: 2F:E9:C0:87:05:B5:13:00:F4:B2:48:98:E2:0B:7D:8D:1F:18:E1:3C
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018B925AF38DEEB57D49944E8CFFA30E9111
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/L-nAhwW1EwD0skiY4gt9jR8Y4Tw.roa
Signing time: Thu 02 Nov 2023 23:25:16 +0000
ROA not before: Thu 02 Nov 2023 23:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 212.18.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:5a:f3:8d:ee:b5:7d:49:94:4e:8c:ff:a3:0e:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 2 23:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe9c08705b51300f4b24898e20b7d8d1f18e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:65:a0:f0:12:0e:a2:4e:34:43:5e:e4:b0:
29:e6:0b:76:ab:fe:e8:4f:1b:68:f6:8a:6c:cd:f4:
46:e7:0b:70:e5:cd:be:67:45:8b:e8:98:ed:6d:53:
93:cf:6e:1c:87:89:dd:49:8e:ad:54:46:e9:77:ca:
8d:e5:a4:fe:3c:10:9d:3a:cd:a7:ca:3b:07:1a:2d:
a2:0e:06:e5:3e:5b:be:2e:54:63:d0:7e:91:98:2c:
63:39:9c:78:02:65:cd:45:4c:cd:c9:7e:6c:31:74:
28:c7:3a:7f:36:31:9e:50:ae:8b:02:0a:ed:4d:88:
b8:79:76:76:04:22:05:d3:4b:70:85:25:3e:26:e6:
0b:95:7e:c6:f5:d7:31:23:75:bc:5f:96:0d:12:ac:
f4:57:15:21:d9:16:d5:3c:52:1d:12:f8:8c:9a:67:
a8:d3:bc:f2:1b:c8:95:e7:bd:4e:dd:43:30:63:eb:
f2:f8:54:4e:87:94:89:f6:0c:b9:27:08:42:b5:f8:
20:2a:40:40:e9:9e:5c:37:6c:d8:80:a7:f2:fb:0a:
c5:89:78:1f:43:c6:41:0e:45:bd:d0:93:5e:9c:e2:
ca:b5:4f:16:63:c0:53:bd:62:62:a9:a6:5b:50:de:
23:ba:78:38:e4:f0:c0:37:37:b7:8c:08:06:ed:c1:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:C0:87:05:B5:13:00:F4:B2:48:98:E2:0B:7D:8D:1F:18:E1:3C
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/L-nAhwW1EwD0skiY4gt9jR8Y4Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:96:74:d6:0f:4e:7b:08:ec:5a:7d:8c:b1:75:53:cd:ff:17:
7b:17:1e:d8:75:42:f3:82:6a:8a:5b:72:b2:b2:f7:56:66:58:
35:22:8d:72:c2:5a:0e:b3:51:b3:7a:5c:51:3a:b2:b0:6a:d6:
7d:f6:57:98:45:0e:83:dc:ba:1b:2f:fe:0b:e1:5d:7c:48:77:
81:12:0b:ba:6b:f7:28:66:e4:16:2c:34:92:af:5e:7d:90:d6:
09:00:0c:04:2d:d6:fa:a3:33:7e:40:a7:e1:77:ba:5e:26:41:
1d:f3:6f:54:40:23:4e:de:02:fd:17:64:98:d9:4a:e3:40:f1:
fc:96:cf:a4:cd:d2:b9:04:8e:0b:25:dc:3b:0e:ed:ee:b7:9e:
91:01:df:6c:49:f6:7c:13:12:98:e3:cc:8f:ab:27:f6:f9:24:
cd:90:e9:6a:a6:23:05:c4:dd:84:ea:54:33:da:02:3d:ab:a4:
9f:11:d2:f8:59:d4:5e:31:d9:5d:0c:4f:fa:37:84:e1:ef:7e:
10:f1:b8:c5:dd:d9:0d:6f:31:5d:24:79:3a:83:89:bc:6d:fe:
90:14:24:3d:47:b2:da:ed:6a:a6:9e:20:f5:ed:2f:3e:f2:f3:
d3:16:cc:71:6c:8e:cc:66:b8:71:c5:9e:77:bf:34:eb:05:48:
4c:cf:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org