Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YnEc0oBtIIpUd6afPogsMomBuwc.roa
File: YnEc0oBtIIpUd6afPogsMomBuwc.roa (raw, json)
Hash identifier: Qt6h7VLii/IF31nWZGycDilke6I+9JzYh8Npv4G7+M4=
Subject key identifier: 62:71:1C:D2:80:6D:20:8A:54:77:A6:9F:3E:88:2C:32:89:81:BB:07
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501038C93C8B9811EEC65541CBC514C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YnEc0oBtIIpUd6afPogsMomBuwc.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 203.0.9.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:03:8c:93:c8:b9:81:1e:ec:65:54:1c:bc:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62711cd2806d208a5477a69f3e882c328981bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:2f:f5:5f:43:da:33:f9:04:7a:27:5e:c5:
f6:83:53:4a:33:26:8c:89:fa:6b:44:a8:13:4f:6c:
fd:f4:a1:4b:0b:eb:cc:5c:a8:eb:3d:eb:9f:40:f5:
9b:72:cb:fb:29:15:1a:e0:29:74:b1:6e:2c:d1:70:
29:26:38:9b:8f:16:4c:7a:91:7f:e6:d6:f8:04:63:
25:35:5d:4a:ac:ff:6a:bc:af:f5:69:0b:9d:eb:5f:
e1:0b:b2:fd:57:08:0b:9b:30:d4:6d:25:96:4b:a4:
4a:f9:23:70:29:c2:9c:9f:00:24:fc:60:50:e6:70:
6c:d9:c9:33:88:f8:18:5d:e5:6a:d2:4c:04:5e:e6:
14:99:fc:b3:78:6c:2a:0d:f7:87:0b:58:17:53:03:
c5:73:f4:ae:3f:fc:d6:80:24:90:5b:b2:a3:24:72:
3d:36:75:fc:b9:02:dc:c7:03:91:c1:34:a2:05:09:
f0:f5:1c:83:87:07:60:e2:38:2b:5a:39:8b:38:5f:
ba:db:75:0d:52:8b:04:d0:fb:44:c7:d1:a3:d9:69:
be:b0:32:e6:f7:11:d4:63:96:69:6d:7d:90:88:a8:
f8:3e:f6:bf:8d:8a:4c:61:37:9d:76:b6:1b:60:63:
64:eb:b1:4b:0a:f0:86:1b:ea:e3:a7:e0:91:aa:61:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:1C:D2:80:6D:20:8A:54:77:A6:9F:3E:88:2C:32:89:81:BB:07
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YnEc0oBtIIpUd6afPogsMomBuwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.0.8.0/23
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:72:ee:6f:e5:67:0d:4d:9e:7e:ec:24:c0:a5:f4:df:21:
21:bf:2a:3f:29:2a:30:37:88:c6:fa:ac:f6:3b:8a:35:9e:9f:
72:74:16:a4:4a:3a:74:74:89:59:8c:07:86:e5:0d:fb:2e:c2:
36:8e:bf:cb:09:2f:e6:1e:94:98:b8:6b:56:63:e4:11:9d:a3:
29:d9:f6:94:8a:ea:6f:47:47:be:c9:99:56:a2:cb:99:6a:6f:
b1:24:74:73:76:e0:01:61:8c:f0:47:5e:04:7c:06:b6:03:41:
81:ac:de:77:0e:0b:c9:48:f3:ea:81:f7:43:b2:24:69:8a:ef:
cd:c4:8b:de:84:be:80:e1:a1:6d:5d:63:f6:1d:6d:d1:ba:4c:
c4:19:31:2c:eb:24:c4:53:b8:4e:b7:41:0e:e0:83:09:4e:0b:
ee:2c:ae:f0:23:71:94:cb:ec:c5:b5:cf:5a:47:f5:13:e7:97:
bd:b6:d2:b0:ee:ee:6a:28:8d:09:0c:cd:63:74:f8:6d:3e:e8:
e8:77:f0:13:e3:1a:07:2a:2f:4d:23:8e:09:f2:a5:19:bb:52:
7f:0f:e4:24:e9:8c:16:e3:d6:dc:f8:4a:c0:f6:2c:44:d1:93:
79:e6:f7:bf:9f:b3:4e:fd:a4:5f:a0:dc:2c:98:ec:fe:12:12:
4f:1d:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:10:00 2024 by rpki-client on console-fra.rpki-client.org