Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/O5-jHs9dNxuY9jv7P4rIGcfMSio.roa
File: O5-jHs9dNxuY9jv7P4rIGcfMSio.roa (raw, json)
Hash identifier: /dnAMWYcDQni3K45LgR90EBwqhCXjahTzkE3aFotzyk=
Subject key identifier: 3B:9F:A3:1E:CF:5D:37:1B:98:F6:3B:FB:3F:8A:C8:19:C7:CC:4A:2A
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0189BC8BB2C8AA2C7F14B72A6A5CA753C56A
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/O5-jHs9dNxuY9jv7P4rIGcfMSio.roa
Signing time: Thu 03 Aug 2023 17:56:58 +0000
ROA not before: Thu 03 Aug 2023 17:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:8b:b2:c8:aa:2c:7f:14:b7:2a:6a:5c:a7:53:c5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Aug 3 17:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b9fa31ecf5d371b98f63bfb3f8ac819c7cc4a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:ac:2f:ec:93:be:69:35:41:26:de:48:f3:
50:5b:18:b9:b3:b9:8c:52:e1:95:09:0d:58:a4:51:
f1:00:6e:9d:88:6b:e8:02:8d:05:de:1c:b7:d8:72:
3e:4f:27:cd:8b:6f:0b:c8:bd:7c:d6:2e:99:34:4a:
53:56:e4:3f:4c:9e:ab:d8:a1:55:d1:dd:0b:0c:39:
80:0b:b9:f9:22:bf:43:63:80:28:6f:55:6d:e0:06:
80:98:34:52:1b:39:29:a3:dd:7f:25:bf:2a:83:d4:
ac:68:47:1e:65:b8:1a:14:b4:39:67:98:9b:04:45:
38:34:ac:96:f3:b8:82:ed:c4:17:77:9e:a0:01:2d:
49:4b:5a:be:c6:ee:5c:16:16:40:90:e6:04:28:13:
d2:62:cb:57:8c:59:b9:7e:6d:bd:fb:39:d2:61:02:
5a:01:f7:5b:4d:1b:98:bf:c6:2a:2d:33:3b:78:79:
bd:7f:2a:1f:0b:68:92:44:7c:f8:81:9a:a2:cd:11:
d0:47:7a:16:58:4a:0d:61:0a:48:b3:ae:66:de:3c:
2e:ec:86:b4:a1:cf:b9:bb:bb:92:62:ff:2e:88:79:
59:99:b9:57:d6:2e:13:1a:da:cc:04:4c:4f:95:71:
10:65:a6:d7:77:84:33:25:c9:94:3a:33:f9:77:64:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:A3:1E:CF:5D:37:1B:98:F6:3B:FB:3F:8A:C8:19:C7:CC:4A:2A
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/O5-jHs9dNxuY9jv7P4rIGcfMSio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7c:b6:ef:3f:6a:eb:d3:94:5e:6c:e4:ff:c8:96:70:d4:46:
f8:bd:13:77:0a:61:0d:fc:96:7b:b0:fd:e9:21:5d:56:1e:23:
4c:16:51:d3:f0:78:9b:11:dc:55:0d:a3:37:00:ca:e0:8b:a0:
c4:64:5d:6b:17:37:68:70:d4:de:4c:5e:dd:3c:38:7f:d7:96:
b2:1b:ee:9c:d6:5f:4d:68:fa:7b:e8:eb:64:90:f2:3b:2f:9c:
4b:16:5d:fa:92:55:7f:56:2f:ea:50:88:c7:82:a3:69:a9:82:
32:ae:69:3a:fb:32:cc:59:f9:7d:0a:56:36:95:c2:72:96:33:
95:4a:f9:da:10:61:17:c0:42:b7:76:45:9b:6e:07:35:51:a5:
db:ef:ac:c2:4a:8b:42:0f:b2:87:67:c8:08:a1:c0:07:10:4a:
96:fb:9a:da:f9:23:5e:77:51:ac:59:3a:b8:1a:cb:30:7b:1a:
51:09:ee:2c:05:bf:ff:bc:09:f9:7e:e3:7d:6b:28:09:35:99:
d9:ac:ea:1f:ff:53:c2:2b:6f:da:81:6f:d4:a0:18:8d:56:07:
2e:a6:05:57:68:62:17:75:98:48:9b:71:a4:06:b2:d6:14:89:
cf:ac:b2:86:22:cf:84:62:d3:20:9c:1b:6c:bd:b7:c1:d7:c9:
45:1b:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 12:27:49 2023 by rpki-client on console-fra.rpki-client.org