Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/sQddKPiPjrHO98aCVapBXyB7BeQ.roa
File: sQddKPiPjrHO98aCVapBXyB7BeQ.roa (raw, json)
Hash identifier: x28C9U5sKW79rJusCCjwmNExmfcpQTQMnHhBY5WTEQY=
Subject key identifier: B1:07:5D:28:F8:8F:8E:B1:CE:F7:C6:82:55:AA:41:5F:20:7B:05:E4
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 01896F598D2C550CC41D0E45EB96BFED1AF1
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/sQddKPiPjrHO98aCVapBXyB7BeQ.roa
Signing time: Wed 19 Jul 2023 18:11:27 +0000
ROA not before: Wed 19 Jul 2023 18:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63142
IP address blocks: 212.118.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:59:8d:2c:55:0c:c4:1d:0e:45:eb:96:bf:ed:1a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jul 19 18:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1075d28f88f8eb1cef7c68255aa415f207b05e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:4b:cd:7a:f6:57:de:23:e0:86:32:72:7b:
07:ba:b5:25:35:11:33:b5:dd:8d:92:02:9d:3c:de:
b0:ad:41:c6:56:20:e8:ea:13:7d:3a:06:0b:e7:ca:
61:4f:a3:02:8f:43:91:0a:f4:91:3d:11:b6:50:c2:
bb:e2:f2:5d:40:1a:c4:c9:f1:92:d5:63:a5:8b:85:
62:3e:65:e4:eb:c0:4b:22:1e:5a:3f:f1:62:5b:ed:
12:75:68:9a:b2:cb:0a:59:d1:f3:dd:66:bd:80:4b:
23:51:26:e0:76:97:11:5f:7d:c1:69:d4:ad:9a:82:
e4:43:4a:59:07:5a:db:9b:5a:f2:bb:18:44:6e:9d:
60:37:87:08:8d:3e:37:62:59:dc:89:b7:3a:88:5d:
4f:78:f2:09:35:8e:92:c3:00:49:a8:bc:aa:1c:83:
54:3a:ca:7c:d6:50:90:20:3f:93:62:b9:c9:a9:8e:
3c:10:2d:7d:8b:ea:d3:d3:2e:01:1d:0c:e8:6c:cb:
3f:44:21:fc:8a:aa:d4:e8:49:32:b1:9c:24:ba:2e:
48:37:e8:5d:17:3c:c2:32:9e:7a:c2:11:6c:c5:c3:
b1:74:04:36:64:9c:0d:6a:6d:3a:c9:2d:d8:2c:0b:
3d:b2:08:12:2e:9a:c9:ca:05:9b:c7:f1:15:35:aa:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:5D:28:F8:8F:8E:B1:CE:F7:C6:82:55:AA:41:5F:20:7B:05:E4
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/sQddKPiPjrHO98aCVapBXyB7BeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.118.245.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ff:9d:4c:dc:8a:77:dc:07:27:fa:58:d7:f9:78:d0:eb:cd:
f5:b0:68:c5:9a:1e:08:58:d0:48:cb:4f:e3:1c:c5:84:f5:84:
47:ca:d1:86:82:69:a8:b9:03:ee:67:13:b7:ba:e6:cc:2f:8e:
74:ad:e9:a4:bc:82:37:e7:2a:56:86:ee:9e:39:bc:99:01:04:
3d:df:ef:e7:a5:6b:3b:aa:2e:64:d6:8b:2d:3f:a4:07:df:e9:
93:da:21:12:9f:1f:ab:e5:98:2d:8c:13:0b:50:32:67:62:57:
31:e6:1e:00:06:90:23:8b:82:5a:55:bf:92:39:bf:72:d8:a8:
37:ba:5a:41:30:c0:62:ad:40:e7:c3:6a:d1:f8:de:c2:09:fe:
30:d7:79:98:94:ae:15:c2:95:a4:07:f9:e6:b6:a5:31:d4:e2:
a3:3d:9b:4b:03:85:51:41:fe:8e:98:c1:c4:61:0b:50:df:a3:
a4:aa:e3:d5:1b:8c:3e:13:51:f0:eb:e4:e8:a2:d5:b8:00:8f:
2c:bf:24:09:79:32:bb:c8:9c:e6:91:74:2d:76:76:95:e3:14:
65:fe:c3:fc:f1:c2:37:79:ae:74:9b:ac:85:b4:e7:ab:9f:29:
03:71:93:40:08:02:33:fb:97:02:38:c1:fc:1d:86:a4:6f:94:
f7:11:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:09 2024 by rpki-client on console-fra.rpki-client.org