Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/U63BMHTbvqxCAj-Ge8PGx3pmdB0.roa
File: U63BMHTbvqxCAj-Ge8PGx3pmdB0.roa (raw, json)
Hash identifier: FflrnlFNUaD0Vh/iISJONRHWsZbr2Jb0F13chBXfU+U=
Subject key identifier: 53:AD:C1:30:74:DB:BE:AC:42:02:3F:86:7B:C3:C6:C7:7A:66:74:1D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018A4763D02412055385FB0BC0CEACDC2FCE
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/U63BMHTbvqxCAj-Ge8PGx3pmdB0.roa
Signing time: Wed 30 Aug 2023 17:00:38 +0000
ROA not before: Wed 30 Aug 2023 17:00:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:63:d0:24:12:05:53:85:fb:0b:c0:ce:ac:dc:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 30 17:00:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53adc13074dbbeac42023f867bc3c6c77a66741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:60:0b:06:3a:8e:79:59:c2:28:ba:c7:21:f5:
71:fc:72:d6:15:7e:6c:30:ce:ed:42:9d:eb:fb:c6:
3d:a8:c0:5c:65:5a:17:88:ae:de:b0:c3:2f:65:58:
d0:5e:9b:93:a8:94:97:44:50:fb:df:c3:f5:61:3e:
b7:ed:04:eb:2f:f6:4a:57:15:7c:f0:ad:ba:31:26:
f3:ad:60:4b:1d:82:f8:02:94:83:37:c4:79:db:f5:
a1:f3:3c:33:db:5d:29:81:ee:bf:2a:ab:5e:1b:46:
b3:7e:82:54:d5:24:60:bb:43:ef:73:f3:66:a2:5e:
43:cf:6b:72:54:a2:6c:ec:13:89:fb:21:16:15:b0:
8f:7e:4c:82:04:65:ce:5b:7a:b0:9a:b3:4d:41:71:
03:eb:d4:a5:d4:a7:d8:d2:ef:aa:10:7e:74:1d:77:
87:e5:bb:ba:b3:44:12:c8:6a:64:f2:cc:93:28:f8:
17:cb:20:e1:88:09:d7:b8:59:b3:fe:64:7b:fa:fc:
7c:5f:95:d2:69:2a:8b:d6:0c:9a:ac:d0:32:0a:ef:
c0:b2:95:78:75:3b:93:24:5e:81:c6:6f:5c:91:55:
f5:78:f7:2b:dc:5c:8b:cf:0c:9f:ed:38:d9:90:14:
b1:12:1e:b9:98:82:36:21:a7:06:31:89:e3:4a:6c:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AD:C1:30:74:DB:BE:AC:42:02:3F:86:7B:C3:C6:C7:7A:66:74:1D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/U63BMHTbvqxCAj-Ge8PGx3pmdB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ba:ca:07:dc:76:0f:f7:08:26:0e:26:00:76:f9:70:c8:da:
c5:77:21:7f:b8:4f:6a:03:f9:20:a0:fd:25:ba:36:67:d4:ce:
31:55:6b:e0:84:2c:19:cd:73:7e:9f:ba:d2:63:de:0d:b1:6e:
49:35:02:08:1f:4d:42:ae:03:32:0b:38:ea:b7:53:03:fc:87:
3b:c3:01:e4:e5:ea:ee:16:bf:97:69:0e:eb:76:b2:12:95:9a:
9f:ab:f8:07:84:4b:06:cf:69:88:0d:5f:0a:89:b4:83:32:77:
36:5b:af:3f:19:78:90:02:3f:0d:8d:85:e1:d9:77:ae:d6:46:
44:76:56:64:74:07:c0:7d:52:fc:ef:17:00:d4:6e:12:13:f8:
d3:b1:87:88:fa:cf:38:c8:cb:e0:7e:3b:16:71:45:a4:32:37:
f2:8f:a4:44:9a:eb:ef:c1:61:1a:cf:96:15:1a:d7:7c:a4:60:
cd:08:49:cb:c7:d5:66:70:a3:0c:8d:c0:49:f0:a5:c0:bd:e2:
7c:38:6d:8a:3d:1a:08:10:01:3a:75:93:51:f5:d0:fa:46:ad:
51:f8:44:27:9a:c7:4e:ef:e0:7c:3b:dd:86:72:c6:fc:b1:d0:
74:68:94:b2:74:77:49:66:2e:45:da:99:94:6e:e3:22:8e:32:
7d:6f:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 17:36:42 2023 by rpki-client on console-fra.rpki-client.org