Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/arTUAhKMqkgE-Zj0N8x8a2s24mM.roa
File: arTUAhKMqkgE-Zj0N8x8a2s24mM.roa (raw, json)
Hash identifier: sTFmJqXjLrvpN3HtwZAZDoxuW1f2KjdAAqYAcLBAYkc=
Subject key identifier: 6A:B4:D4:02:12:8C:AA:48:04:F9:98:F4:37:CC:7C:6B:6B:36:E2:63
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0185766DBF414FE4C99D7F8CFE28D751F222
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/arTUAhKMqkgE-Zj0N8x8a2s24mM.roa
Signing time: Tue 03 Jan 2023 06:59:41 +0000
ROA not before: Tue 03 Jan 2023 06:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.116.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:6d:bf:41:4f:e4:c9:9d:7f:8c:fe:28:d7:51:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 3 06:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab4d402128caa4804f998f437cc7c6b6b36e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:7f:2b:34:0c:79:3f:d1:2e:e6:b9:17:37:
40:d5:8a:2a:5e:df:a8:2a:77:dc:a6:91:3b:a2:83:
7d:82:e3:ed:50:3c:59:b1:ab:02:b7:9a:f0:ed:70:
1e:29:0f:ac:6d:4a:08:cb:95:b3:a2:72:04:6f:08:
f3:be:4f:11:60:92:b2:04:b7:38:6f:89:92:dc:a3:
67:52:a2:8c:de:95:a3:0e:7a:41:b6:7c:ea:71:97:
be:99:1e:cb:eb:a8:0a:d7:ba:57:0f:ed:07:19:bf:
a2:13:00:19:80:cf:ec:6a:b0:bc:bf:26:d8:34:8e:
4b:20:8d:aa:ed:78:64:52:20:5d:4e:43:f5:f7:10:
c9:e7:19:4c:af:fc:0f:05:28:19:22:5c:41:54:60:
f3:61:11:8c:b9:ce:e5:d2:22:ff:64:1c:28:34:8d:
e2:60:57:1d:79:66:f3:b2:be:6b:50:51:aa:a8:60:
8c:c2:c3:e0:fe:29:e9:33:12:9f:d4:dd:32:2e:65:
c3:c7:6f:0c:5f:2f:fd:c4:be:40:74:d5:4a:c2:26:
c9:29:69:15:12:76:4b:93:3d:74:3d:7d:48:1d:55:
a6:af:d8:55:27:aa:e2:3b:70:b5:94:b2:d2:0f:93:
92:d6:52:2f:ec:ca:b8:3a:93:5c:af:4e:58:05:c5:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:D4:02:12:8C:AA:48:04:F9:98:F4:37:CC:7C:6B:6B:36:E2:63
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/arTUAhKMqkgE-Zj0N8x8a2s24mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:3d:fc:67:6f:30:3a:d2:15:43:f8:a8:b0:ed:d9:59:65:f1:
6a:1c:b7:2a:a7:51:ce:22:bc:80:6d:6d:37:ea:92:1d:9a:46:
6c:2d:c1:77:45:66:d2:8d:56:0c:6c:2c:50:6e:51:2c:38:1e:
c9:14:2c:22:5e:dc:d7:88:f5:2c:62:50:84:87:c3:8e:f5:0b:
39:ed:30:3f:a2:d9:e7:aa:46:f0:19:0a:eb:a1:09:e9:2f:af:
5d:f4:28:e8:46:4c:f8:bd:0f:db:08:1d:ed:4b:1c:3c:cd:10:
5a:2a:15:56:cd:a5:f8:ee:50:de:09:22:5c:b8:21:89:60:f5:
38:ab:f5:7d:dd:64:0e:ac:35:52:13:44:31:66:e6:74:40:c9:
6c:cd:86:0f:d3:20:ce:5c:ec:d2:11:ad:38:cc:fe:3c:32:90:
72:25:44:8e:9f:17:b3:02:b1:9b:5b:7c:29:ad:12:d5:36:bf:
9c:a1:97:46:0a:43:c8:9b:fd:53:18:6b:fc:d0:93:82:52:32:
d7:5e:82:49:3e:3c:14:a6:a5:b8:68:32:9b:36:32:0d:52:9d:
b6:82:59:13:b9:d8:e1:ff:27:5c:ba:7d:0c:2c:ab:a7:50:5d:
85:94:dd:57:08:a5:f5:1d:f1:b1:af:9f:35:f7:a6:f7:93:37:
59:17:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:22 2024 by rpki-client on console-ams.rpki-client.org