Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/Jy4w81DKjXxuMCIqMyiV92KiUB8.roa
File: Jy4w81DKjXxuMCIqMyiV92KiUB8.roa (raw, json)
Hash identifier: wMHFBKydye8FrjVCS3TOuBadgX+BIsmrznPI9CfKHto=
Subject key identifier: 27:2E:30:F3:50:CA:8D:7C:6E:30:22:2A:33:28:95:F7:62:A2:50:1F
Certificate issuer: /CN=42a1dba2420af69586a47f7426eb57c24d6287a2
Certificate serial: 0186926432528682B7A4099AF56FB9A92DFA
Authority key identifier: 42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/Jy4w81DKjXxuMCIqMyiV92KiUB8.roa
Signing time: Mon 27 Feb 2023 10:21:25 +0000
ROA not before: Mon 27 Feb 2023 10:21:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.18.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:64:32:52:86:82:b7:a4:09:9a:f5:6f:b9:a9:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1dba2420af69586a47f7426eb57c24d6287a2
Validity
Not Before: Feb 27 10:21:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=272e30f350ca8d7c6e30222a332895f762a2501f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:83:7a:ca:e2:9c:31:1e:9a:79:3a:aa:92:
79:95:fb:9a:3f:f6:92:ba:36:7a:4e:68:e3:55:90:
e0:aa:7a:b7:4b:dd:a8:e7:9b:c0:e3:95:ff:fd:0a:
14:05:6a:10:ec:d0:d8:09:38:cf:ee:9d:81:47:d9:
37:ae:43:b2:15:77:74:11:db:1a:84:b4:15:a1:b3:
2c:01:c1:0a:8d:bb:02:30:d6:5e:dc:d1:fc:31:56:
93:50:07:01:18:20:3e:ab:c6:96:1e:90:54:4a:eb:
66:b8:7f:9e:5a:05:2d:64:91:fd:40:fb:00:39:d1:
cd:2b:c1:16:11:6f:09:65:b9:84:0e:4d:3e:c6:93:
76:de:17:a8:c5:b3:48:d2:28:cb:d1:23:94:80:89:
df:1a:ca:9c:df:de:2f:bc:8e:b6:29:34:87:8c:92:
07:e5:b2:a0:44:a3:5b:86:2b:1b:07:5f:07:b8:4d:
8b:89:06:06:31:d2:28:19:ca:ff:c3:b6:e8:a5:d0:
4b:1d:33:01:e3:6a:72:6c:c1:9f:2a:95:9f:2f:eb:
12:d3:a0:9c:46:12:4c:10:85:d1:63:00:17:fd:c3:
ea:d6:76:03:cb:59:78:20:39:53:8d:7a:4e:35:78:
5e:55:74:43:82:98:64:72:9c:29:84:cc:c6:bf:1f:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:30:F3:50:CA:8D:7C:6E:30:22:2A:33:28:95:F7:62:A2:50:1F
X509v3 Authority Key Identifier:
keyid:42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/Jy4w81DKjXxuMCIqMyiV92KiUB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/QqHbokIK9pWGpH90JutXwk1ih6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.119.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a0:c5:74:bc:eb:dc:84:9a:2a:e8:13:4e:c3:15:42:db:e7:
65:36:a7:ce:0f:56:d8:aa:47:55:dc:d4:f5:3f:f4:51:99:77:
cb:a7:65:77:b4:a5:77:34:bd:93:1c:fc:87:c0:1f:fa:f7:97:
d4:7c:26:b6:df:1a:23:01:96:cf:dc:6f:a9:be:ed:e7:5e:4a:
0b:2d:ff:c9:0d:d0:08:7b:69:52:78:a4:e2:97:e1:03:4e:23:
76:7e:ba:40:d6:8b:6a:26:22:0c:66:8f:9c:9d:a2:d7:c6:a5:
f0:e8:f4:e6:04:f8:01:f0:5c:82:46:f0:68:ee:33:76:e9:fe:
89:75:d9:be:7a:b9:67:4a:76:2d:3d:90:af:78:f7:66:0f:ff:
1e:e4:49:b3:36:60:95:bd:f4:02:8f:88:7b:ad:ef:8c:7e:6f:
cc:d0:37:a1:c4:0f:b0:e7:0d:1d:5c:13:d9:73:50:36:9e:48:
54:d4:89:e0:8d:41:31:07:31:be:b0:18:a0:1a:a4:45:3a:d1:
d9:54:5b:82:e5:bd:03:75:e7:a0:30:47:91:62:bd:10:f3:42:
1f:39:11:c5:da:fe:bc:94:81:52:54:a6:7b:95:c6:d6:a0:32:
c4:3e:d4:e0:0f:ba:ff:cd:ea:08:b0:b9:a6:dd:08:f5:f7:f0:
98:02:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:19 2023 by rpki-client on console-fra.rpki-client.org