Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/ofsBtig5ZkiUgx4QI6mZmAmpwMg.roa
File: ofsBtig5ZkiUgx4QI6mZmAmpwMg.roa (raw, json)
Hash identifier: S80uI0QiJV/kFzJa0mpuaS02FjwJ3iddwfFE6AryFEc=
Subject key identifier: A1:FB:01:B6:28:39:66:48:94:83:1E:10:23:A9:99:98:09:A9:C0:C8
Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial: 018800D8360460221210867C8861626CAFC7
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/ofsBtig5ZkiUgx4QI6mZmAmpwMg.roa
Signing time: Tue 09 May 2023 14:09:09 +0000
ROA not before: Tue 09 May 2023 14:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 212.104.206.0/23 maxlen: 24
2a04:7141::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:d8:36:04:60:22:12:10:86:7c:88:61:62:6c:af:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
Validity
Not Before: May 9 14:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1fb01b62839664894831e1023a9999809a9c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:a1:e1:35:0b:a3:1b:5d:98:6e:4f:14:35:
cd:93:42:b9:a9:28:a1:cc:df:f0:b6:24:63:1b:5f:
91:38:d8:30:a2:c7:be:f7:a0:69:d9:df:03:2f:00:
ba:57:ab:b4:d5:47:92:37:e5:87:df:5a:96:9f:5f:
c4:f1:92:49:08:65:25:bf:65:d9:c2:ec:d1:40:70:
30:02:3c:68:08:9a:6e:3b:f6:39:ec:65:60:ce:d7:
5d:e8:c7:ac:c9:27:72:d4:dc:38:74:93:30:4f:ac:
83:bb:4b:1d:cf:07:ef:55:50:a3:e3:d1:f4:86:da:
05:a8:46:c3:ee:98:81:a9:f1:61:c3:4f:ec:3f:f0:
f6:3d:01:25:eb:de:c9:dc:05:e4:cf:1a:37:7f:4b:
c0:db:9a:35:1a:46:59:29:d2:a3:0f:7d:99:57:97:
11:a9:1e:ff:80:13:2a:49:54:c1:cf:66:67:2a:c4:
11:9a:97:50:84:d1:c7:64:46:e1:28:3c:74:57:51:
90:0e:88:9c:f9:d6:2f:7a:d4:c8:52:19:dc:1d:c7:
bc:cf:37:4d:c5:4c:b6:56:1c:53:69:a1:74:85:cf:
f1:87:45:4e:f8:7a:76:3a:4a:82:27:75:e7:29:97:
73:b6:3f:03:c9:ed:29:93:84:a2:85:95:1a:18:3b:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:01:B6:28:39:66:48:94:83:1E:10:23:A9:99:98:09:A9:C0:C8
X509v3 Authority Key Identifier:
keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/ofsBtig5ZkiUgx4QI6mZmAmpwMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.206.0/23
IPv6:
2a04:7141::/36
Signature Algorithm: sha256WithRSAEncryption
27:c9:ba:be:4a:28:9a:75:b8:54:04:29:88:32:72:4d:dd:65:
04:6d:94:0d:5a:f3:3b:c1:04:3e:c5:ad:84:59:59:0d:45:81:
32:60:bc:b5:ae:6b:4c:6d:c0:0f:df:08:09:7f:2c:5b:7e:32:
86:85:cc:d8:3f:45:62:eb:e4:d4:31:90:26:97:65:fa:d1:50:
53:40:d8:0e:d3:18:c8:b2:fc:34:9e:a8:96:0c:f8:ff:ac:96:
86:f8:27:46:00:72:af:61:b1:1d:d9:b4:48:4d:b3:01:6c:72:
77:08:6e:47:14:48:e7:e9:f0:6b:44:5f:43:41:7c:67:54:0d:
65:e4:34:38:d7:c8:56:55:cf:6f:e4:d4:df:d7:e1:a0:62:7a:
06:69:86:b7:23:e0:3c:7b:31:a7:60:70:be:5b:ee:b9:29:70:
b4:67:c1:ed:06:7d:be:b5:cd:09:16:1a:60:ab:25:5c:88:60:
3a:ce:26:58:98:af:c3:cc:17:89:e5:33:73:42:cf:bc:32:9d:
d3:69:e4:65:28:27:6e:4a:f0:7a:d7:52:7e:2a:8d:75:a8:8a:
9c:83:8a:2e:bd:ca:55:3a:65:b9:50:37:2d:6c:b2:14:15:01:
94:68:ec:bd:e7:53:6d:9d:13:23:5b:e8:55:31:21:d2:8c:b9:
52:04:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:23 2024 by rpki-client on console-fra.rpki-client.org