Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/yOYBPPX2-TFvzq-VvBVXgncpF6A.roa
File: yOYBPPX2-TFvzq-VvBVXgncpF6A.roa (raw, json)
Hash identifier: xfDXc0x2qYPxnZzixXrBNIvMApSgVEBkoRqkgZjeits=
Subject key identifier: C8:E6:01:3C:F5:F6:F9:31:6F:CE:AF:95:BC:15:57:82:77:29:17:A0
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0186A2D8994EE529A400FB202C81C28ACD00
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/yOYBPPX2-TFvzq-VvBVXgncpF6A.roa
Signing time: Thu 02 Mar 2023 15:02:29 +0000
ROA not before: Thu 02 Mar 2023 15:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 212.113.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:d8:99:4e:e5:29:a4:00:fb:20:2c:81:c2:8a:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Mar 2 15:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e6013cf5f6f9316fceaf95bc155782772917a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:d6:f7:a0:36:06:81:ef:54:cf:01:90:15:
da:39:a5:dc:8e:17:a9:81:91:8d:c6:96:70:f3:d9:
64:52:15:96:5d:23:c8:77:c9:d6:04:d4:1b:1f:70:
17:53:3b:b1:d3:e1:d9:d7:45:38:87:12:97:88:00:
e3:da:37:15:58:a0:eb:7e:73:2f:f9:ea:50:bb:67:
e5:0f:9d:ee:48:da:f2:82:a6:11:98:61:64:02:50:
8a:b1:1d:7f:4f:a2:4a:79:20:c1:24:86:dc:be:64:
ab:93:18:07:a0:32:aa:47:fa:15:55:04:20:c7:d0:
cb:f9:bd:9a:cb:27:ec:b5:07:dc:0a:80:aa:25:dd:
1a:b2:df:f4:52:bb:08:80:42:36:11:ca:26:1f:9c:
91:b7:3a:1a:29:9c:8b:33:64:2e:80:8f:e2:70:d8:
49:9a:aa:5e:22:88:48:a3:8d:55:9d:fd:51:17:24:
40:f3:55:19:06:1c:d6:e3:e5:af:2d:14:75:e9:90:
9d:91:86:74:09:8a:92:3e:8f:58:12:97:61:5f:7b:
88:33:fd:58:f6:13:a0:4f:03:43:c3:1d:48:5c:37:
1e:44:e9:0d:e5:23:db:41:09:ca:db:ce:13:a6:c4:
ab:eb:42:9c:9b:98:a8:a8:c3:73:1e:d6:32:e4:22:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:01:3C:F5:F6:F9:31:6F:CE:AF:95:BC:15:57:82:77:29:17:A0
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/yOYBPPX2-TFvzq-VvBVXgncpF6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.117.0/24
Signature Algorithm: sha256WithRSAEncryption
89:59:6e:51:3c:33:f3:9c:5a:81:a6:22:5f:a9:88:b0:60:41:
1e:64:3b:9b:56:f0:41:aa:a4:d9:89:7f:96:f3:cc:e4:13:46:
30:01:3a:12:78:1e:9a:64:a8:81:42:c1:71:3c:23:85:12:3a:
ec:32:cf:37:7c:5f:04:fd:02:c7:09:a2:fb:88:37:ab:ff:6f:
2b:78:3e:c0:3a:7d:24:a3:67:cb:a8:a2:54:ef:f7:6d:50:16:
19:74:a3:b6:f9:45:42:88:03:23:eb:94:d4:ec:65:ee:22:24:
8c:e7:9c:a4:a8:cf:a5:5a:30:60:4c:16:70:28:5a:35:51:51:
df:58:3c:ff:04:f2:5d:fa:23:21:11:60:dd:81:9a:26:84:a8:
7f:88:9e:83:83:19:60:d6:bc:e0:01:09:16:28:5c:a6:7e:43:
54:00:db:6d:f2:4c:41:95:a6:49:1f:b0:60:f1:15:d4:4a:9b:
39:95:d7:c7:c0:de:f5:37:f7:05:95:e6:d2:29:ce:0b:0d:51:
f1:6b:6b:6d:a5:68:5a:15:a4:e9:b9:a2:06:65:47:88:f5:4a:
a5:87:0d:a1:d8:3d:14:4a:61:50:83:ac:98:c7:9b:1d:70:ba:
cb:d6:97:f0:fc:11:cc:d4:a5:62:db:e3:5c:f4:49:a6:78:2a:
64:fd:5e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:10 2023 by rpki-client on console-fra.rpki-client.org