Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/T0s3-36QghECOAPoT4rWUDnHsZw.roa
File: T0s3-36QghECOAPoT4rWUDnHsZw.roa (raw, json)
Hash identifier: GONe3fWgfzbUl5AxJQZXsDbNfjvwEAEJ5jywXQmzH68=
Subject key identifier: 4F:4B:37:FB:7E:90:82:11:02:38:03:E8:4F:8A:D6:50:39:C7:B1:9C
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 0185704BE1E7E078B9D7D2CBC18370502A9A
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/T0s3-36QghECOAPoT4rWUDnHsZw.roa
Signing time: Mon 02 Jan 2023 02:24:59 +0000
ROA not before: Mon 02 Jan 2023 02:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8937
IP address blocks: 212.18.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:e1:e7:e0:78:b9:d7:d2:cb:c1:83:70:50:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Jan 2 02:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f4b37fb7e908211023803e84f8ad65039c7b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:79:f3:1c:61:8d:15:10:9f:22:ca:60:47:
88:1b:c3:68:ba:e0:21:dc:14:12:d4:d4:ce:95:7f:
5c:27:a0:65:20:51:4c:37:0c:a2:c7:6b:b4:ca:15:
23:a7:95:b0:85:59:bb:2a:b3:e0:02:36:c5:f0:27:
d2:2b:e6:f6:e7:3c:0c:12:92:cc:f6:d7:f0:48:57:
6f:27:30:0f:76:54:68:3a:eb:76:16:b6:df:d7:aa:
a1:f3:fd:16:ad:8c:30:60:a8:cf:c6:d6:5d:95:7f:
7f:b7:6a:6c:89:5a:92:a1:80:6d:3d:75:e2:ec:bf:
db:9f:dd:c4:1c:70:ee:b6:25:74:55:63:5d:0b:1b:
5a:3b:6c:4f:11:07:41:ea:b0:6e:3f:3e:e4:1c:e9:
62:22:98:0a:fe:51:81:75:a0:27:08:9c:57:e1:49:
59:dc:9c:73:3c:fa:d5:2b:59:ac:85:71:af:07:88:
5b:d7:3c:4a:cb:c3:f9:a7:71:93:95:0f:2e:9f:bf:
e6:61:da:51:3f:d0:f6:e8:96:22:d1:93:17:ff:d1:
c5:21:41:56:3e:02:b1:ea:b7:26:46:52:f6:4a:8d:
42:ed:f7:32:85:d0:cd:8a:a8:d9:6d:a5:3d:0a:55:
18:df:3b:73:7c:5a:fe:2e:94:88:fe:33:f9:8b:1a:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:37:FB:7E:90:82:11:02:38:03:E8:4F:8A:D6:50:39:C7:B1:9C
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/T0s3-36QghECOAPoT4rWUDnHsZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:ce:4e:9c:69:17:8b:f2:8a:2f:d2:7f:71:c9:70:07:b2:c6:
24:a7:97:fc:82:0c:72:78:b0:50:ff:32:95:79:d8:06:1f:01:
89:4b:23:4e:0d:f8:b9:2e:69:48:2f:fc:b2:ca:4c:25:9f:61:
37:78:88:e3:b6:da:de:11:53:56:4f:9f:c1:51:96:97:46:82:
5f:fd:c1:63:6d:6c:df:e7:08:5e:2f:0e:2b:1d:69:03:0d:d1:
47:8c:55:ca:de:bb:93:e5:8d:16:be:fd:cc:b8:9c:99:1a:93:
a2:b3:28:f7:a3:b0:80:91:4b:55:79:d0:31:29:4f:e9:9d:2a:
fe:d7:46:0f:87:8e:f3:06:91:fc:2e:61:7c:ed:d8:6b:7f:95:
b2:54:ab:ce:29:78:b3:0a:17:94:b5:00:68:16:42:79:80:0c:
09:9d:3f:da:88:8c:ec:2c:bd:ee:fc:9e:bb:d3:c4:51:e5:37:
57:4b:bf:60:25:a8:93:ea:27:2d:bf:d8:29:1b:07:04:b5:9f:
50:af:15:80:fb:4b:87:1f:9f:ac:df:b2:36:13:65:af:f3:58:
e1:c7:d2:a0:08:fa:31:a5:81:b3:a7:ee:60:cf:7a:0b:4a:e5:
6c:54:cb:28:97:91:3b:c0:77:5f:53:d5:85:2c:e7:f2:b7:92:
b0:22:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:52 2024 by rpki-client on console-ams.rpki-client.org