Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/yO8lyloVE2Ls4_n4Ula5OM14-lA.roa
File: yO8lyloVE2Ls4_n4Ula5OM14-lA.roa (raw, json)
Hash identifier: oLzLxcRrEOkjlO/20zzemOef+zCr6lbqPK+8a1NvLEs=
Subject key identifier: C8:EF:25:CA:5A:15:13:62:EC:E3:F9:F8:52:56:B9:38:CD:78:FA:50
Certificate issuer: /CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Certificate serial: 01857139E9568E0778F8AE8D65D78697A7DC
Authority key identifier: F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/yO8lyloVE2Ls4_n4Ula5OM14-lA.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.18.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e9:56:8e:07:78:f8:ae:8d:65:d7:86:97:a7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8ef25ca5a151362ece3f9f85256b938cd78fa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:5b:03:21:e5:7f:c0:40:2f:5f:66:2f:c0:
a9:44:bc:c6:1e:03:6f:8c:ef:82:eb:3b:f9:32:51:
32:71:7b:38:74:80:17:bb:cc:34:53:fe:6c:b8:87:
d7:4a:55:f3:65:b7:6a:ab:dd:03:70:93:9c:19:c5:
aa:be:8d:30:ff:1c:4e:5f:07:33:31:22:e2:1e:5d:
8e:dc:05:f6:4c:2d:fa:15:dc:ac:79:be:53:5d:90:
c3:a7:df:5d:fa:a2:dd:51:e6:74:85:e9:5f:33:cb:
0e:3f:cf:a8:e9:4d:75:a6:b5:f1:c6:73:02:0e:37:
a1:1b:75:b8:1c:9e:b0:da:2a:4b:5d:89:60:ce:46:
8b:c8:ea:43:bb:b4:22:89:31:e3:78:8c:cc:cf:ab:
57:98:ed:e7:1a:51:0d:e6:e4:47:87:53:9b:b2:22:
c2:83:ec:b1:d1:e5:f7:40:ce:ba:49:c0:57:dd:51:
a0:d2:c6:f3:4c:9b:da:9b:c0:97:94:ab:4a:d3:50:
f0:0a:d3:50:33:75:1c:d0:22:90:7f:e1:9f:d4:45:
34:87:c3:50:95:4d:61:73:59:fc:0d:d6:2b:c8:d7:
85:6e:5c:7b:b8:af:96:91:01:f4:7d:3d:9e:08:f7:
50:18:8c:24:cd:03:27:06:9b:83:58:bb:c0:03:31:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:25:CA:5A:15:13:62:EC:E3:F9:F8:52:56:B9:38:CD:78:FA:50
X509v3 Authority Key Identifier:
keyid:F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/yO8lyloVE2Ls4_n4Ula5OM14-lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:14:39:7a:88:dd:2b:36:1e:14:78:ba:d9:3b:8c:18:3e:
04:0d:af:11:2f:a8:14:ab:0e:b5:2a:cc:bc:1e:4b:18:14:e9:
7d:b6:03:4b:bb:91:91:94:21:ec:3a:74:05:3b:56:bd:6c:1a:
73:81:8d:6b:1a:e2:7f:3c:2b:fe:9a:14:20:34:e9:7c:6a:93:
8d:f1:0a:9e:6f:ac:69:54:fd:c0:4e:fc:e4:98:9a:b4:c9:1a:
03:e1:f1:d4:07:b9:55:2d:fc:54:fb:63:f6:55:5e:4f:eb:d1:
0f:e2:a8:12:f7:79:18:a9:9f:e7:42:a7:60:ba:66:8b:b8:c4:
aa:14:98:c4:7f:f5:3b:52:f0:3e:d0:71:c3:1e:39:f6:89:19:
50:98:7c:d6:0a:34:27:db:a3:92:dd:f7:8a:a3:7a:4a:e9:21:
47:5d:1d:97:3a:4b:bd:d0:9d:cc:61:25:5b:c6:2d:d6:43:93:
1a:34:1f:af:a6:91:19:0d:c4:1a:62:fb:c1:bc:d0:ad:da:37:
db:76:f3:3b:4f:1f:4b:cd:14:33:c1:89:bd:bd:80:dc:4c:9a:
72:22:c8:0f:cb:e9:5d:2c:b6:8b:4d:11:6f:4a:98:62:c0:cc:
3f:6b:a2:40:bc:b6:38:d5:c8:c8:40:97:08:2c:31:31:ba:c0:
2f:74:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-fra.rpki-client.org