Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/vSdEHmvtYXO7FIJsSpRDXWCcFuc.roa
File: vSdEHmvtYXO7FIJsSpRDXWCcFuc.roa (raw, json)
Hash identifier: D1xcumavxA25a9267jU5EPbUvQDQ5lRe/yagYp20dUA=
Subject key identifier: BD:27:44:1E:6B:ED:61:73:BB:14:82:6C:4A:94:43:5D:60:9C:16:E7
Certificate issuer: /CN=42a1dba2420af69586a47f7426eb57c24d6287a2
Certificate serial: 01856BAEAA73A942DA28ACCCFE830E11B9A1
Authority key identifier: 42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/vSdEHmvtYXO7FIJsSpRDXWCcFuc.roa
Signing time: Sun 01 Jan 2023 04:54:46 +0000
ROA not before: Sun 01 Jan 2023 04:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.18.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:aa:73:a9:42:da:28:ac:cc:fe:83:0e:11:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1dba2420af69586a47f7426eb57c24d6287a2
Validity
Not Before: Jan 1 04:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd27441e6bed6173bb14826c4a94435d609c16e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:0d:73:0c:7d:b9:21:bc:38:2d:24:62:0d:
a6:0c:76:62:52:d9:ee:7c:56:e3:39:0a:1d:ee:25:
bf:a0:d4:54:f6:5a:3b:eb:93:f9:8b:c1:01:4d:d8:
14:e1:2a:bf:ac:91:57:25:ae:bb:4d:01:bb:f5:62:
1c:be:d3:29:8a:73:2f:51:1d:87:20:d7:66:2d:44:
7a:2d:42:a4:f2:18:bb:69:71:04:1b:19:97:6b:da:
2f:a7:e2:b5:be:9b:ea:38:90:e8:32:1c:33:a0:2a:
29:1a:4b:bf:2d:11:65:32:be:ba:2a:1f:86:24:5d:
a1:be:a2:b2:ea:68:28:5d:53:4f:99:38:5d:a7:6f:
c9:c2:08:77:fd:d3:27:38:13:2a:af:2a:af:d8:72:
23:be:2b:98:cf:17:d1:65:4a:5f:5d:ab:09:d0:71:
6b:27:8f:39:03:81:cb:03:ab:53:e2:35:ae:e6:8d:
5c:44:fd:6a:5c:f9:22:10:9f:bf:13:9f:33:71:62:
11:18:58:9b:bf:79:b4:84:f3:4d:44:f6:8d:b4:76:
df:e2:f6:2c:65:22:d1:84:7d:ba:95:fb:13:e7:45:
6a:bd:4e:38:22:1a:04:0c:07:89:23:17:bc:66:4d:
57:37:1d:47:83:02:6c:0f:d7:95:d5:b4:77:20:c4:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:44:1E:6B:ED:61:73:BB:14:82:6C:4A:94:43:5D:60:9C:16:E7
X509v3 Authority Key Identifier:
keyid:42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/vSdEHmvtYXO7FIJsSpRDXWCcFuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/QqHbokIK9pWGpH90JutXwk1ih6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.119.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5e:a8:d9:a3:25:63:56:7c:36:11:ab:46:9d:30:ea:5f:86:
eb:61:b9:c2:5a:ec:7b:3e:6f:7a:0b:54:db:5d:f5:b4:c2:72:
7c:fa:53:d7:49:6a:a7:53:f9:4f:96:6f:9d:d0:c2:bf:63:c9:
0d:d4:2d:36:66:ac:44:ee:fa:d1:80:db:16:5a:f9:ce:92:9b:
6d:fb:98:4d:b2:16:f4:0f:04:9a:cb:50:3e:fe:07:76:68:9a:
17:49:92:7d:fd:c5:f1:89:05:ae:cd:d2:14:8e:dc:e7:13:34:
ec:76:00:59:f8:f7:cb:12:ac:a0:a5:c0:b2:fb:7e:ac:59:4d:
32:c3:11:c5:2e:17:6c:2c:e6:c2:f2:fb:d4:d6:06:fe:60:6b:
f5:ea:f7:cd:06:46:47:b2:fa:7f:d7:8e:ab:85:0f:c4:db:a0:
58:96:c4:4c:5a:a2:75:20:4d:33:64:ba:66:1e:88:b5:5d:b4:
0f:3a:19:e5:65:20:30:36:6f:ac:1a:1d:16:8e:f1:e2:c8:49:
af:e2:d0:ae:65:06:6d:88:3c:46:4e:e8:47:83:8f:e6:f7:87:
01:7e:27:9e:aa:8b:11:51:ba:33:a1:db:e5:7b:82:98:ec:b1:
f4:96:ab:b6:5b:f1:a2:23:4e:f4:dd:d6:62:5e:1e:7a:61:37:
32:61:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:19 2023 by rpki-client on console-fra.rpki-client.org