Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z2SBtG3AmIj3viFOeP2iD8SLm0I.roa
File: Z2SBtG3AmIj3viFOeP2iD8SLm0I.roa (raw, json)
Hash identifier: jm8IC1Gkkc8nCszZynVSfy8qDZ9+8+rUvo0rBsRL1ZE=
Subject key identifier: 67:64:81:B4:6D:C0:98:88:F7:BE:21:4E:78:FD:A2:0F:C4:8B:9B:42
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01892913DAFF56F81FE3D0947714BE9A7EDE
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z2SBtG3AmIj3viFOeP2iD8SLm0I.roa
Signing time: Thu 06 Jul 2023 02:41:54 +0000
ROA not before: Thu 06 Jul 2023 02:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.243.0/24 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:29:13:da:ff:56:f8:1f:e3:d0:94:77:14:be:9a:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 6 02:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=676481b46dc09888f7be214e78fda20fc48b9b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:ff:79:69:a9:a9:ab:11:92:e9:ec:9f:d6:
33:e7:31:d6:65:a1:eb:16:a6:4f:87:38:41:87:75:
3c:b3:56:bd:1c:49:2d:dd:d7:5c:42:04:d7:f8:b0:
70:18:5c:d3:b1:07:2c:7e:89:7c:d8:63:21:8a:6b:
2b:97:ff:a9:7c:ec:08:03:48:e8:c1:e5:be:63:77:
82:73:27:25:c9:26:a9:5e:08:ef:2e:5a:85:0a:8f:
38:69:40:d3:26:45:6e:36:c8:30:fb:bf:6f:49:ac:
db:c0:6f:50:fe:eb:58:a3:73:4c:89:47:db:87:2f:
67:90:a6:a3:38:b5:4b:29:e8:6c:84:a4:b1:a6:96:
3b:fd:32:6f:91:c9:8f:f4:51:5e:03:10:bc:4c:2d:
6b:f7:a8:bb:96:69:37:d3:15:e9:37:14:e3:e6:2c:
53:56:87:ee:27:56:a8:ad:cd:28:ed:b8:15:47:f3:
69:a8:f5:20:4d:9a:5e:ee:b8:ab:14:af:5a:d2:7e:
e6:35:84:38:e1:4a:a2:b9:6c:f8:5c:0b:4c:a8:1d:
4e:7a:25:eb:91:c2:49:b8:e7:9c:30:84:08:df:3f:
ec:e4:4f:d5:46:ab:4e:fb:f4:d5:0c:80:73:f0:ae:
67:2e:d5:11:db:43:85:84:31:0e:2b:ec:d5:68:36:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:81:B4:6D:C0:98:88:F7:BE:21:4E:78:FD:A2:0F:C4:8B:9B:42
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z2SBtG3AmIj3viFOeP2iD8SLm0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d8:41:9c:94:63:ff:76:f6:92:e1:78:e8:5a:8d:d9:10:1c:
38:e5:fa:77:e8:63:f7:65:32:84:4b:46:86:92:be:ae:06:f5:
ab:ba:90:fb:df:30:34:17:03:25:6f:24:9f:e3:2b:a3:23:71:
04:2d:de:b9:b0:82:3a:8c:0d:f0:ec:ba:a9:5c:04:46:67:5e:
9a:a1:78:47:8f:94:c0:21:da:ab:5b:fc:8a:a8:e5:ab:ba:55:
65:d5:7a:3e:e9:cf:21:73:77:8c:f3:79:fb:5d:6c:5b:72:84:
21:b5:eb:1e:71:a2:a6:92:7b:d0:4c:43:59:38:fe:86:47:e9:
6b:e2:40:81:75:8f:ef:03:ce:ff:2e:f4:48:14:2c:a0:2b:36:
31:e4:e6:1c:03:5d:8a:84:0d:3c:ba:11:4e:44:44:69:51:31:
35:3b:e1:a7:f8:39:b3:74:19:6e:02:56:78:d2:ae:80:98:71:
eb:c8:14:e1:ae:75:39:ba:7f:07:d5:f1:9e:57:79:f0:cb:c6:
64:46:c9:7e:57:57:ee:c5:56:e5:55:79:85:ce:21:a3:b8:47:
45:f5:0e:7d:96:2b:70:04:f2:41:22:0f:0a:18:4d:c4:c1:5f:
29:0f:41:1d:52:4f:4f:d2:4e:cd:0b:0e:23:4d:40:43:f8:6c:
c1:26:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:07:38 2023 by rpki-client on console-ams.rpki-client.org