Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Lb7r9SbeXwkNb_iav_pecMBsWCM.roa
File: Lb7r9SbeXwkNb_iav_pecMBsWCM.roa (raw, json)
Hash identifier: Pxlbjoqc5P3HzK/G3ipvQUuUSoJh5lRe0nLyaCW/308=
Subject key identifier: 2D:BE:EB:F5:26:DE:5F:09:0D:6F:F8:9A:BF:FA:5E:70:C0:6C:58:23
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D3A1372F647EDB51F5A99A20E3C1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Lb7r9SbeXwkNb_iav_pecMBsWCM.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 212.69.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d3:a1:37:2f:64:7e:db:51:f5:a9:9a:20:e3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dbeebf526de5f090d6ff89abffa5e70c06c5823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:5b:04:7e:a1:73:1a:58:43:28:42:fe:0e:
38:01:2e:36:d9:0e:9d:81:60:df:53:02:d8:73:5c:
4c:3c:21:fd:0d:80:6b:8d:0a:9f:dc:46:3b:7e:22:
87:12:8a:ed:d9:1e:0a:88:4e:b7:c5:68:04:db:c3:
a6:e2:0a:5b:bc:65:28:b4:dd:26:bd:7c:a9:86:4b:
31:54:a5:74:25:aa:6d:30:ba:b9:d0:b7:55:75:ab:
98:03:08:de:2e:f2:86:99:4e:fc:31:83:70:1b:13:
8d:f1:c1:85:29:a6:40:a3:2a:d9:36:52:75:d2:e1:
a2:f0:77:4b:2c:3d:1f:2f:39:80:f3:a8:53:39:ce:
ef:4f:dc:3e:af:61:94:1f:f8:b5:3c:bb:30:06:57:
12:ac:3a:e2:5f:d0:e5:eb:4a:42:13:0b:41:b4:97:
b3:fc:40:79:44:0f:01:de:4d:b2:87:18:86:e9:71:
f1:ec:db:c6:63:84:1e:17:b7:a3:d8:ad:4e:1f:77:
42:86:70:b9:6d:86:b6:0b:8e:58:c9:36:d9:03:23:
9f:ff:a9:17:70:53:b9:f1:8d:10:31:2b:02:2f:ca:
e6:ea:4e:22:3f:b1:55:c6:8c:19:1b:c4:9c:b3:11:
97:e9:47:16:26:89:98:dd:11:cd:08:e5:43:7a:34:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:EB:F5:26:DE:5F:09:0D:6F:F8:9A:BF:FA:5E:70:C0:6C:58:23
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Lb7r9SbeXwkNb_iav_pecMBsWCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ba:49:be:8a:52:f6:4e:a0:1a:96:87:f5:94:32:e4:eb:36:
7b:db:4d:2e:4f:d2:e3:7d:97:df:20:ce:51:e1:66:30:3f:1b:
95:6f:38:ac:0a:69:98:8a:34:73:55:48:a5:1e:d1:1d:1f:9e:
51:81:86:15:0e:23:a9:14:5a:b4:54:ba:29:4e:72:fd:60:c1:
80:ee:d0:f8:06:04:e0:f2:b9:78:76:bf:35:7c:e1:d0:72:7b:
6d:1e:cd:47:fb:ad:f4:52:45:e7:f6:eb:82:fa:e0:44:3f:90:
e5:06:eb:6b:28:87:a5:67:2d:0c:b0:c6:ae:46:f9:d3:75:5e:
0b:be:d7:73:d1:9a:cb:89:f9:b9:2a:b3:77:a6:14:dd:dd:c3:
93:74:a1:8e:67:43:5e:a8:1f:7e:37:3e:57:3f:33:c2:a0:6d:
4c:08:f8:62:4a:66:4f:5c:f0:84:28:0c:e6:e0:2a:e7:c7:02:
50:e5:06:d1:58:b7:ac:e9:9a:1d:0f:23:82:d1:ce:44:ec:35:
65:fb:4b:66:42:9e:d2:b8:5b:72:10:0b:d4:b4:0f:ee:41:ed:
2a:0a:5b:5d:57:a7:34:17:cd:50:d3:13:36:13:09:b9:da:c2:
64:25:24:10:7a:b0:95:7b:55:9f:3b:cb:56:da:b3:a7:a6:8a:
d0:22:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org