Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/gC39yoAO6m37YdX9SRVT68vdmOg.roa
File: gC39yoAO6m37YdX9SRVT68vdmOg.roa (raw, json)
Hash identifier: atHta4OYopWCwr1zLzT3jAYAYj8hHOCurwQIzeCuolY=
Subject key identifier: 80:2D:FD:CA:80:0E:EA:6D:FB:61:D5:FD:49:15:53:EB:CB:DD:98:E8
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CB50983F6DA966C0526FC913B2F4C
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/gC39yoAO6m37YdX9SRVT68vdmOg.roa
Signing time: Mon 02 Jan 2023 16:24:44 +0000
ROA not before: Mon 02 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60845
IP address blocks: 212.121.139.0/24 maxlen: 24
62.96.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:b5:09:83:f6:da:96:6c:05:26:fc:91:3b:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=802dfdca800eea6dfb61d5fd491553ebcbdd98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:53:3d:0d:92:04:f2:84:b8:08:18:99:7d:
d1:f3:4b:c3:52:ac:1b:2f:69:ba:47:97:f6:b1:12:
17:41:0e:2c:31:ff:9d:42:b8:ab:b9:c0:8f:20:bc:
32:85:cd:a6:ec:d4:9e:26:0d:ee:6c:7a:80:8f:0a:
8d:05:08:3d:4c:52:a5:55:74:a4:2f:48:fd:94:11:
8d:15:94:1e:10:56:72:20:f7:9f:cf:17:35:6b:ef:
62:13:a1:ce:76:d2:24:bf:24:26:08:80:35:02:82:
96:50:e3:3f:88:49:c1:00:ca:5a:25:12:6a:77:58:
5e:9a:19:c4:f2:04:25:05:3f:15:9d:9d:57:82:5c:
ea:6e:54:57:b5:cb:e3:af:1c:05:43:bd:cb:90:1c:
15:df:eb:a0:00:53:34:f4:91:9a:3c:1c:66:a1:d7:
a9:1d:08:65:f9:50:c5:23:58:66:4e:bd:c3:72:98:
3e:f8:f8:de:b3:ed:62:5e:5b:83:25:05:a0:68:2f:
1c:a1:63:02:c1:14:09:7f:0e:ad:ef:5f:59:ca:5c:
0a:cd:0c:25:33:19:69:d3:d1:6a:21:0f:2f:47:bb:
ae:9c:91:83:39:95:95:20:0d:60:e6:f9:e8:a9:62:
6e:fc:07:10:ee:94:ee:69:8c:28:3c:ea:40:4d:74:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:FD:CA:80:0E:EA:6D:FB:61:D5:FD:49:15:53:EB:CB:DD:98:E8
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/gC39yoAO6m37YdX9SRVT68vdmOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.96.212.0/24
212.121.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2c:fb:5b:7c:7b:1e:cb:98:8c:14:f4:11:fa:1b:ab:67:cd:
e1:38:40:59:20:96:ac:0f:ee:f1:56:33:ab:df:8f:33:97:27:
e1:96:10:2a:18:70:a8:30:0a:81:4f:8b:13:bf:5c:ae:d9:8c:
f9:d2:35:6a:30:5d:1d:3c:22:b8:c5:64:22:a1:f0:29:8c:fc:
81:77:59:2e:82:ea:53:18:27:97:51:89:52:03:9b:fb:e1:c9:
9f:4c:4b:ce:e6:9f:8d:54:73:4f:ad:e3:be:40:e9:e6:61:10:
a0:78:05:62:5a:cc:94:ba:84:8c:9b:05:d5:d1:ab:bc:b4:9a:
35:00:40:6b:87:f3:50:0e:68:79:a6:ca:be:bc:64:c8:2d:0d:
15:e8:c1:b2:04:7f:63:59:4d:a8:38:07:c3:a3:2f:a7:ac:61:
35:ec:88:d2:8e:2c:e7:db:22:51:69:37:56:c3:b1:1a:7d:53:
af:55:7b:02:ce:4b:d1:50:b3:fa:43:d9:60:52:eb:57:38:c0:
c0:5e:a9:05:87:3d:d1:06:fa:7b:49:01:93:d9:be:f4:42:5d:
1c:3b:4d:18:19:27:9d:f1:c0:c8:d8:9d:a1:86:f1:15:b5:34:
5f:68:19:6d:76:95:aa:ef:fc:b6:a4:e0:ae:87:cd:a5:b8:87:
65:5d:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:30 2024 by rpki-client on console-fra.rpki-client.org