Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CCrSq9INdmijsIw4yfYDAGNeq0I.roa
File: CCrSq9INdmijsIw4yfYDAGNeq0I.roa (raw, json)
Hash identifier: Q+77236VOCt28UEUT5ww/2rGVAl9h4Ccu9rQEYrKdkE=
Subject key identifier: 08:2A:D2:AB:D2:0D:76:68:A3:B0:8C:38:C9:F6:03:00:63:5E:AB:42
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01860859DC65C710E0EC6540480C3F7F6116
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CCrSq9INdmijsIw4yfYDAGNeq0I.roa
Signing time: Tue 31 Jan 2023 15:02:32 +0000
ROA not before: Tue 31 Jan 2023 15:02:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13517
IP address blocks: 212.222.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:59:dc:65:c7:10:e0:ec:65:40:48:0c:3f:7f:61:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 31 15:02:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=082ad2abd20d7668a3b08c38c9f60300635eab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:72:f3:3b:40:18:b6:89:7f:6e:bd:2a:85:
4d:2f:25:25:78:bf:0d:ee:9e:9d:bc:02:2e:fc:44:
d7:94:8e:52:2f:ee:e3:c5:6d:99:fc:bc:57:6b:f1:
6c:e8:a7:bb:5d:26:f0:c5:95:c8:bf:f7:18:ea:c5:
70:6c:b7:3d:cc:fc:a5:9f:e2:ca:6a:13:42:17:6d:
ae:5f:b8:e3:1e:d7:05:a8:58:3f:85:81:4c:b1:cb:
ce:17:51:c0:bc:29:9a:b6:1c:d4:ac:2c:97:eb:64:
a4:2b:c0:fc:d7:ed:e1:84:52:c8:03:cc:0c:d5:67:
80:20:80:c2:47:dd:67:89:cd:ae:41:a0:bb:70:59:
b2:a2:18:6f:44:d8:0b:7b:26:fc:8b:16:b3:69:1e:
c3:88:ab:48:9c:af:da:24:45:b2:fd:fb:20:e0:3b:
c1:d8:fc:fb:6d:ca:15:e0:89:c1:91:f5:4a:39:23:
b8:00:a7:41:e5:4d:30:7c:18:6a:45:07:32:5c:a7:
bd:fa:74:1d:b0:2b:20:f2:85:55:75:57:d9:11:d8:
1f:52:b1:2e:b5:db:03:75:f8:d0:52:54:41:f2:d1:
d1:20:d9:71:7a:e3:02:6c:61:52:f4:10:e1:38:a0:
25:07:fe:7e:cd:b2:09:2c:29:14:fe:98:24:3b:84:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:D2:AB:D2:0D:76:68:A3:B0:8C:38:C9:F6:03:00:63:5E:AB:42
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CCrSq9INdmijsIw4yfYDAGNeq0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.222.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b1:32:12:0d:dd:22:5d:af:89:17:30:b6:af:bb:4a:9c:44:
b7:b6:f4:f0:e8:c4:8e:ff:ad:72:da:ff:fd:44:ea:60:3f:9a:
22:87:c9:92:99:e7:7a:46:b1:23:6f:b7:92:84:60:aa:7f:54:
74:ed:69:da:b5:8e:75:ed:59:f9:59:0d:71:51:a4:96:e2:c0:
cb:35:30:da:95:d9:97:93:52:2e:c1:4a:c7:7d:ac:ee:61:6c:
39:aa:76:ed:82:66:d5:db:eb:96:d9:2b:34:e9:f9:09:36:c5:
c3:df:ee:23:8e:78:1d:70:9a:26:30:4f:28:77:bc:63:3f:9e:
6f:9b:da:36:cd:a5:91:b5:c3:85:45:ec:17:3f:b8:cb:7c:57:
15:96:f4:49:68:3a:27:44:1a:8f:99:05:dc:74:fe:0c:ec:51:
dc:e9:59:7d:42:58:47:2a:84:9e:31:f7:74:e6:10:23:f2:ad:
c9:7b:72:ba:5a:24:b6:d3:32:c0:0b:46:4d:f1:58:94:f2:e4:
22:ad:74:ca:fa:7f:d9:29:22:ef:c3:94:7e:61:1d:e0:94:fd:
1c:30:c3:d8:ed:fd:52:b0:da:7a:aa:d2:a2:df:ca:8e:46:c5:
a0:3d:39:d1:88:5b:c7:5a:a3:33:c7:85:77:84:30:4e:f8:c1:
75:40:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:23 2024 by rpki-client on console-fra.rpki-client.org