Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/8_BNf3pAD5i2FwbSmL51A-rNxJ0.roa
File: 8_BNf3pAD5i2FwbSmL51A-rNxJ0.roa (raw, json)
Hash identifier: EbcFJ3oPpT/zR8GyKR+srReoEfvPkMw3t2dO58G6RqE=
Subject key identifier: F3:F0:4D:7F:7A:40:0F:98:B6:17:06:D2:98:BE:75:03:EA:CD:C4:9D
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 01856BB7F943DE7EB3C76A7167CFC52F1B86
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/8_BNf3pAD5i2FwbSmL51A-rNxJ0.roa
Signing time: Sun 01 Jan 2023 05:04:57 +0000
ROA not before: Sun 01 Jan 2023 05:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8387
IP address blocks: 212.95.17.0/24 maxlen: 24
213.162.64.0/23 maxlen: 23
213.162.78.0/24 maxlen: 24
2001:678:5a8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:f9:43:de:7e:b3:c7:6a:71:67:cf:c5:2f:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jan 1 05:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3f04d7f7a400f98b61706d298be7503eacdc49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:bf:78:e8:5b:3e:be:95:a3:c9:bc:ff:9e:
57:02:bc:83:72:f6:29:f2:b6:ae:c6:3c:21:bd:a8:
df:4d:ce:20:10:12:52:de:db:e0:8f:15:6d:c0:8e:
81:2e:3f:e4:9a:a3:98:31:6f:49:2d:cf:9c:c6:db:
1c:ed:5f:5e:36:e8:14:24:c2:c3:44:8b:29:1d:df:
1d:ad:a6:84:e2:21:3f:fa:64:ba:9f:72:8e:28:e7:
22:75:ec:79:03:98:6f:9f:da:e7:46:a1:bb:8e:8d:
7e:a7:e5:b6:0a:85:3a:f6:22:83:c2:42:56:4b:d7:
57:21:e2:40:e9:a8:57:96:8a:41:01:12:03:8d:66:
1d:64:9d:48:17:18:26:2d:01:8a:67:f6:01:14:c2:
44:01:25:65:1f:48:8b:bf:74:84:38:8c:41:f1:c7:
d6:bf:a0:de:90:c7:95:4e:5c:91:63:6b:41:e1:77:
a0:fc:d4:66:16:cd:31:b0:c2:cb:28:20:c9:96:04:
f0:39:31:17:e5:35:cd:0f:d7:27:0a:96:2e:15:29:
1c:ff:51:a1:bf:51:3b:0c:7c:ea:fa:c1:6f:55:db:
8a:af:c3:d1:97:e9:db:f1:7e:0e:f4:3e:c4:23:ff:
40:b1:b3:d8:26:70:e5:d9:18:51:25:cc:63:c1:74:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:4D:7F:7A:40:0F:98:B6:17:06:D2:98:BE:75:03:EA:CD:C4:9D
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/8_BNf3pAD5i2FwbSmL51A-rNxJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.17.0/24
213.162.64.0/23
213.162.78.0/24
IPv6:
2001:678:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
7f:82:87:e3:01:aa:b7:03:d8:c5:a1:ae:99:fe:fb:44:05:1a:
9c:c1:88:ac:8d:dd:25:fd:4d:e5:4c:0c:99:30:a6:d0:11:62:
83:b6:1d:b6:6c:9a:94:0b:4f:8c:35:96:63:cd:f7:3e:4c:68:
fa:33:6f:64:4a:90:3f:c3:90:9d:c2:d2:3a:49:19:dc:6a:61:
56:75:6e:08:cf:86:5c:1f:71:59:79:23:b1:6e:c1:16:09:db:
0f:b7:19:32:e2:62:01:25:fd:87:b7:90:53:c2:cd:2e:e2:c4:
4d:45:b4:cd:56:54:9b:76:06:73:c1:17:57:4c:52:57:b2:40:
cb:0e:6e:59:f5:bd:46:18:ca:d4:ed:58:50:c2:71:06:6d:0c:
b6:32:b7:19:33:de:d8:83:d0:6e:e6:3b:2d:2c:6d:14:05:5d:
6d:f4:7b:cd:31:e7:2b:19:94:db:22:ba:63:55:0e:c5:27:ed:
9d:4e:ff:38:04:8b:1c:56:a7:cc:47:34:0e:2f:6f:be:a4:04:
85:1e:40:c3:d4:a3:ae:b8:75:86:24:94:77:88:4a:e4:c7:bf:
d0:84:a5:08:e4:ff:05:f3:33:83:6f:18:9a:5f:7e:45:3b:a2:
bf:e0:07:78:b7:cf:0b:2a:4c:1e:36:9d:5b:9f:a5:31:eb:ba:
e5:eb:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:43 2024 by rpki-client on console-ams.rpki-client.org