Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/8S-yGL9iACyAbc4s6xob4trhq9E.roa
File: 8S-yGL9iACyAbc4s6xob4trhq9E.roa (raw, json)
Hash identifier: kylZR1nmSoGBYMVkJ+wy4ty+q3yinGaJK9WL+gf3fqg=
Subject key identifier: F1:2F:B2:18:BF:62:00:2C:80:6D:CE:2C:EB:1A:1B:E2:DA:E1:AB:D1
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 01856F42D462F25E5BDCC46F90BA41D99226
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/8S-yGL9iACyAbc4s6xob4trhq9E.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64427
IP address blocks: 212.114.90.0/24 maxlen: 24
185.181.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d4:62:f2:5e:5b:dc:c4:6f:90:ba:41:d9:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12fb218bf62002c806dce2ceb1a1be2dae1abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:41:0e:3c:40:5c:ba:7d:03:5a:a6:1f:dd:
17:13:fb:6b:4f:12:9e:2b:c1:5c:81:e6:b4:2c:e6:
4d:31:ac:bf:97:f2:24:6a:fe:ca:f3:e0:0e:76:ef:
0e:73:eb:19:0c:73:3c:f4:22:d2:92:bd:b4:ec:91:
85:eb:35:48:8b:de:66:e8:f6:f8:a6:05:77:ef:65:
f3:5e:9f:ac:92:bd:b4:11:69:1e:d1:2e:d9:7c:ba:
a4:6d:8a:a2:e9:ff:14:e6:53:8e:24:38:c3:55:47:
0f:7e:bb:09:19:c0:b2:14:21:56:bb:65:06:e6:e2:
b5:02:d2:38:50:a3:38:d5:11:95:ba:f7:b1:d5:18:
4b:7c:d8:da:70:2e:d5:50:66:61:87:3d:c1:01:74:
61:27:c2:d0:15:be:da:0d:a2:b6:06:01:1c:fc:36:
47:bb:36:30:f2:00:1c:4c:58:b0:e1:f4:52:53:ad:
46:e0:37:a3:4a:cc:c8:94:18:a8:05:96:39:c4:14:
b8:1a:ba:bc:21:95:11:78:04:fc:0c:c9:94:56:78:
5a:dd:03:42:b7:4b:43:9a:12:99:c3:34:29:76:77:
f6:65:b9:4e:9f:d5:fa:36:93:6a:9c:f0:f9:b3:85:
fe:6d:f2:ae:9b:9d:9a:b4:64:84:0b:3f:64:b4:85:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:B2:18:BF:62:00:2C:80:6D:CE:2C:EB:1A:1B:E2:DA:E1:AB:D1
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/8S-yGL9iACyAbc4s6xob4trhq9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.188.0/24
212.114.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ff:df:2f:4e:2a:90:14:7a:c4:9d:eb:19:8f:89:ab:80:d2:
c3:08:f1:0e:29:e3:be:50:6f:ab:93:56:64:28:3d:73:bd:08:
55:69:96:9a:4c:07:05:98:24:31:f0:82:3a:65:3b:03:f0:6c:
d4:24:f5:57:c5:29:ae:25:1b:44:0a:f0:e6:9c:e7:4b:df:81:
54:cb:3b:a1:52:ca:79:7d:fd:9f:6b:2d:a5:3e:4d:d5:df:b6:
52:c0:13:6e:ab:0a:72:c1:6d:ea:4f:72:dd:70:5e:85:ea:1a:
4d:fd:73:19:dc:2f:38:e4:18:90:54:1c:89:b5:b5:a5:d2:45:
9a:50:69:7f:c3:ed:de:6f:54:9d:1a:00:0d:5e:d2:39:e2:71:
a0:60:3d:51:d8:42:2a:a1:42:ca:f1:a1:6e:8f:d8:1c:ae:e6:
4e:67:cd:df:f9:20:02:21:4f:77:2e:06:2a:10:6a:f9:07:8b:
78:e7:4e:ee:65:3f:03:3a:37:e4:47:b2:52:1c:cf:65:7c:68:
b6:94:c5:42:ff:45:4f:7c:a0:35:6f:ca:29:7b:fb:44:3b:13:
22:19:4a:74:a1:ad:c1:d8:ee:e4:5b:d2:de:a1:6d:d2:d7:18:
4e:17:29:32:54:51:cf:5d:a4:d2:45:24:47:a5:94:b7:a1:e1:
82:ba:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:38 2024 by rpki-client on console-fra.rpki-client.org