Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/c2njxoZQUbN1iiIisW-TkuFDRwA.roa
File: c2njxoZQUbN1iiIisW-TkuFDRwA.roa (raw, json)
Hash identifier: EssRWoLmLfjyaGfSmT74ZQDG53GInVPeVhL42WDnJQQ=
Subject key identifier: 73:69:E3:C6:86:50:51:B3:75:8A:22:22:B1:6F:93:92:E1:43:47:00
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188AFAC00799D5744FB3B88D250AB555083
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/c2njxoZQUbN1iiIisW-TkuFDRwA.roa
Signing time: Mon 12 Jun 2023 12:54:25 +0000
ROA not before: Mon 12 Jun 2023 12:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:ac:00:79:9d:57:44:fb:3b:88:d2:50:ab:55:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 12 12:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7369e3c6865051b3758a2222b16f9392e1434700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:f7:e7:86:2b:79:2d:51:30:5f:b0:46:df:
e6:ca:be:bf:9f:b2:d6:6d:fe:cc:e7:0e:91:b9:ee:
91:45:cc:d6:cf:3d:c9:9d:ef:43:a3:d7:54:28:05:
22:f8:68:8b:d8:34:5b:bd:be:4b:91:70:c6:a3:6d:
5b:85:8e:5f:49:8c:c3:27:db:8d:93:77:a4:68:ee:
e5:3f:43:44:47:2e:c5:8e:2b:60:1d:25:46:30:6a:
02:02:6e:73:41:35:97:43:54:28:a6:c8:da:77:9a:
44:bd:38:7e:34:8d:3c:0f:92:a4:1a:66:dd:f7:e5:
31:9f:cb:e7:7a:8d:40:a6:8e:54:04:9c:c3:35:60:
7d:ec:ce:94:4a:3e:03:fc:a6:68:78:a1:8f:63:f5:
b6:30:4a:cd:f3:92:7b:03:46:8b:8e:2b:65:a7:91:
6e:15:8e:d3:d5:2a:96:09:32:1c:da:c0:f5:07:62:
9f:a2:4d:42:09:73:29:14:b6:27:c1:e6:64:17:93:
9e:77:fe:9d:03:5c:e6:4e:da:d6:55:7e:27:92:36:
4d:b2:10:32:13:0a:14:e3:72:8e:d1:fe:f4:c3:24:
e9:e4:e1:5e:62:4b:b3:75:d5:c6:8e:d8:90:3f:4c:
8a:56:84:1c:98:31:bc:d7:f0:d9:87:00:dd:78:af:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:E3:C6:86:50:51:B3:75:8A:22:22:B1:6F:93:92:E1:43:47:00
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/c2njxoZQUbN1iiIisW-TkuFDRwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
45:fe:08:dc:de:71:03:a8:4d:d3:2c:14:14:0b:70:02:89:45:
53:f2:b3:fb:03:0f:68:5a:e0:83:94:20:49:c6:12:38:7f:3f:
be:35:7f:c7:74:c1:81:9d:de:66:32:bf:b7:75:f2:ae:ff:81:
0a:30:73:b5:18:89:da:12:56:f9:68:d2:b0:b8:32:4d:9a:7a:
29:02:06:69:73:03:61:33:ba:d0:fb:10:4e:aa:d7:74:0f:d7:
2a:15:cb:5a:77:41:15:c0:06:4a:cc:cf:01:af:0c:49:e6:5f:
f0:ef:93:75:1f:56:bc:4a:40:be:02:8d:20:71:ed:3e:54:70:
8c:65:98:3c:e0:1b:e3:d6:ac:5b:9d:5c:6b:f8:35:86:5e:8e:
7b:48:af:73:e1:6b:74:c3:5e:74:85:6d:c0:b3:5e:e5:bd:b4:
5f:9f:5a:bb:7c:03:95:70:a0:b4:20:fa:01:ff:7d:e6:d4:d0:
bf:ca:64:75:a1:4f:dc:b2:47:92:97:69:56:2b:78:3c:da:e1:
70:b5:2c:fe:f3:96:37:8c:e6:24:b2:e2:52:30:54:39:90:4e:
cc:af:a3:7d:12:e3:3b:23:ce:33:34:03:56:d2:26:c7:45:36:
b1:82:aa:34:53:89:35:c5:36:75:d9:0b:6f:49:68:a4:58:ec:
71:b0:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org