Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PRTJofTI2WkQYeK1V5dRcscND-U.roa
File: PRTJofTI2WkQYeK1V5dRcscND-U.roa (raw, json)
Hash identifier: YA8SckwW4c3KHIvnOLHTM4olqjxsC1zeCoUSKDgGZSA=
Subject key identifier: 3D:14:C9:A1:F4:C8:D9:69:10:61:E2:B5:57:97:51:72:C7:0D:0F:E5
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018A1D433ED2EA3C94D195454F9D7C81F2FF
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PRTJofTI2WkQYeK1V5dRcscND-U.roa
Signing time: Tue 22 Aug 2023 12:41:00 +0000
ROA not before: Tue 22 Aug 2023 12:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:43:3e:d2:ea:3c:94:d1:95:45:4f:9d:7c:81:f2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 22 12:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d14c9a1f4c8d9691061e2b557975172c70d0fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:1b:94:b1:5a:dc:29:ef:cf:05:1a:87:85:
3b:3a:8b:45:7f:47:c6:e0:b4:c0:57:bf:b7:32:2c:
b8:25:e0:de:de:66:52:52:94:a1:3f:ba:bf:12:7b:
99:f0:67:97:17:03:f8:90:2c:7d:36:6c:2f:02:56:
b4:1c:0d:2b:3e:a7:69:83:47:16:bf:0d:65:1a:07:
f2:50:59:88:70:52:f1:b2:35:69:3a:76:06:1e:4a:
87:77:a1:0e:3d:7a:3e:de:41:82:06:27:4f:17:f8:
bc:40:7f:81:f4:b9:e8:18:52:2e:6b:4e:47:ca:c1:
5a:f1:bd:cd:7c:a4:17:2e:4a:9d:7f:56:c9:8e:06:
cf:01:d0:27:9a:9e:8a:43:84:b3:20:4d:9b:b9:ee:
60:2a:17:80:63:04:6f:69:52:6e:3c:2d:a4:3a:1d:
42:49:e7:76:15:62:94:e1:da:67:25:72:a6:3e:7a:
c8:54:36:97:48:59:60:5d:03:25:5e:d0:ef:c4:5e:
7b:f9:1e:93:a4:97:e7:4d:00:ee:82:2b:d7:fb:a2:
a6:09:6d:4f:36:db:b9:ce:6b:45:21:68:28:cc:f5:
b9:73:ae:9c:73:bc:fb:b6:7c:a5:c3:78:40:8c:7a:
fd:a9:1b:f1:dc:59:0a:e5:a1:c5:f5:f3:5d:af:f8:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:C9:A1:F4:C8:D9:69:10:61:E2:B5:57:97:51:72:C7:0D:0F:E5
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PRTJofTI2WkQYeK1V5dRcscND-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:2e:37:ad:a9:50:d1:63:cc:92:94:31:2a:21:61:11:f1:3d:
b9:57:6e:14:17:17:96:ed:ff:8e:61:1d:64:9e:b4:ad:48:21:
99:81:39:38:1a:e5:53:60:e6:4d:83:50:7c:a4:bc:16:00:7f:
85:da:f5:6d:8c:95:61:d5:c3:37:3a:27:d0:b1:01:d7:e4:22:
00:59:ec:dc:a5:fe:7c:cd:d8:ac:a3:d9:00:a1:a3:b5:33:e1:
7c:2c:4d:b1:a5:1a:c7:fc:12:0a:e5:d3:5a:ef:02:01:ab:de:
fc:38:a1:41:6c:23:45:26:01:3c:b7:98:23:d6:c9:05:cd:a0:
4e:86:25:f2:95:78:f3:d7:b6:00:dd:54:2e:26:9a:cd:78:91:
6d:0c:ab:4f:e6:eb:02:0c:c9:6c:7c:d1:37:89:ea:30:53:40:
bf:6a:83:c0:84:5b:7c:66:da:6f:1e:29:3e:7f:f1:04:99:e3:
df:e4:4c:93:c3:32:19:d3:04:a3:da:0d:b9:40:5b:ce:ad:a9:
20:af:67:6d:b6:01:76:43:19:61:72:38:be:77:60:68:04:72:
0f:10:31:42:09:5e:f8:0a:ba:a9:a6:3b:f8:8f:bd:ad:61:44:
ce:0f:d8:f0:37:ba:4d:ca:33:ae:e1:c6:6c:3c:ca:81:c7:3d:
ee:0b:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:07:38 2023 by rpki-client on console-ams.rpki-client.org