Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DyRFRMdx1710Oj6dfHuanauhWoc.roa
File: DyRFRMdx1710Oj6dfHuanauhWoc.roa (raw, json)
Hash identifier: 9+k/76HGs4TaQJIEpOAFJ/qMbc9osrJrbmnJMKInxTQ=
Subject key identifier: 0F:24:45:44:C7:71:D7:BD:74:3A:3E:9D:7C:7B:9A:9D:AB:A1:5A:87
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0185CEA72A1ACA4EE05A9CCBA050D356434A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DyRFRMdx1710Oj6dfHuanauhWoc.roa
Signing time: Fri 20 Jan 2023 10:08:59 +0000
ROA not before: Fri 20 Jan 2023 10:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 212.69.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:a7:2a:1a:ca:4e:e0:5a:9c:cb:a0:50:d3:56:43:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 20 10:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f244544c771d7bd743a3e9d7c7b9a9daba15a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:ca:49:8a:4a:b4:f6:72:42:92:d1:d4:d6:
95:29:42:e6:03:ba:5a:77:54:b8:a4:cd:4d:25:27:
6f:99:a1:10:6a:b8:9e:d8:6c:e3:e0:12:27:70:40:
24:6c:f7:71:67:31:28:30:bc:63:f4:92:d5:21:56:
a7:86:79:3e:07:26:6e:6b:d4:c8:17:74:77:81:ad:
92:97:bf:fb:40:73:c2:53:c9:07:9d:d6:15:6b:a7:
de:60:ad:c6:d8:64:a8:00:ed:8f:f2:35:7f:45:96:
2c:e4:32:f2:af:10:1c:14:ef:fd:2d:5d:a3:51:01:
3e:6c:08:6b:6b:22:ec:42:a6:84:82:85:a8:cb:97:
14:d2:33:f9:13:37:72:39:17:2c:45:aa:ca:d1:2e:
e4:0b:28:bd:0b:3e:6c:9b:65:f3:93:5f:c2:4f:b0:
52:5e:aa:3f:2e:2d:6b:cb:af:c8:d9:7a:87:54:3c:
d7:e8:c4:d7:8d:78:23:a7:42:62:61:5b:57:f5:88:
9b:3b:b1:63:b3:69:87:16:e2:5e:6f:eb:d7:b5:a6:
3b:86:67:73:ac:54:d0:81:49:00:db:45:16:05:81:
ab:56:f0:2d:31:d7:cc:4e:b7:25:5a:18:78:7a:07:
d2:ad:08:73:15:10:97:8f:0e:35:fa:c4:83:75:05:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:45:44:C7:71:D7:BD:74:3A:3E:9D:7C:7B:9A:9D:AB:A1:5A:87
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DyRFRMdx1710Oj6dfHuanauhWoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d0:d8:f7:99:a4:22:9d:76:73:42:4c:9c:fc:35:61:b9:5e:
57:2d:3f:88:ca:d6:bd:a7:bf:d7:ac:e0:03:32:0e:9f:b8:9d:
80:79:38:42:84:f3:4a:ce:66:13:cf:d7:9e:a3:9d:df:e4:50:
fe:ce:cb:63:e4:69:2a:59:08:ea:a3:00:0a:f9:26:b7:77:26:
99:7d:fa:a3:d9:e8:02:01:33:80:70:4d:93:2b:ff:aa:ce:51:
ce:f8:01:39:b0:0f:99:a2:40:40:b2:46:20:3c:cf:b0:03:2b:
6d:57:51:e2:64:dc:16:df:29:8d:05:d8:b3:79:2b:00:d2:c7:
b4:ed:75:f3:da:b0:e2:9c:29:02:39:12:e2:7a:94:25:24:7e:
e7:10:9f:68:d7:b3:24:d0:61:99:dc:f9:33:89:01:e5:33:9e:
99:b5:62:3a:9e:db:92:ac:21:2c:e4:50:2a:1a:a1:fc:ed:c5:
af:41:20:b1:d1:1e:a3:15:06:23:10:86:ca:93:43:ef:2b:47:
69:63:fb:e2:8a:44:d7:ee:49:02:a6:13:d8:e2:3e:8a:30:90:
e1:ca:f1:1d:6d:5f:a8:02:33:d3:4c:76:40:2d:4c:1e:e3:d7:
1c:17:4d:c8:e2:83:3a:0c:6a:97:97:12:01:ff:de:bc:56:81:
04:29:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:57 2024 by rpki-client on console-ams.rpki-client.org