Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/YuGjta-G7MSmeiOw4Msr1ABNOng.roa
File: YuGjta-G7MSmeiOw4Msr1ABNOng.roa (raw, json)
Hash identifier: /Cm9zXATd2HrJVL8qTewSgZmJKxHEWkZQRtBu39c5cY=
Subject key identifier: 62:E1:A3:B5:AF:86:EC:C4:A6:7A:23:B0:E0:CB:2B:D4:00:4D:3A:78
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018ADF83EE5D9E7C2ADA939E5EDB8B6297E7
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/YuGjta-G7MSmeiOw4Msr1ABNOng.roa
Signing time: Fri 29 Sep 2023 05:57:59 +0000
ROA not before: Fri 29 Sep 2023 05:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 123.253.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:83:ee:5d:9e:7c:2a:da:93:9e:5e:db:8b:62:97:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 29 05:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e1a3b5af86ecc4a67a23b0e0cb2bd4004d3a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:bd:bf:b5:51:30:f7:d9:6a:bc:8c:b6:42:
3c:d8:c3:a1:0a:d6:e2:9e:0d:3d:2f:c9:62:26:4c:
3f:4c:1f:8c:f6:dc:aa:41:96:c6:17:bd:45:4d:e0:
82:ca:e7:d9:ef:0a:8f:f7:d7:88:c7:04:17:80:c6:
04:0c:00:e9:4a:50:ee:3d:af:4c:68:44:3f:10:c1:
42:50:fb:55:04:26:e6:a8:32:f5:1c:d9:35:41:0e:
41:00:6d:0d:77:0c:70:58:02:2f:d1:1f:79:3a:ce:
6f:6a:47:20:f7:bd:d9:3e:8b:e1:d5:c6:99:c5:6b:
ca:ad:0f:27:9c:8f:9b:b6:b4:a1:f0:73:b8:89:ff:
db:30:04:a4:83:ac:e8:07:f2:dd:e3:9d:74:52:c1:
af:19:ee:85:82:27:bb:78:09:8a:34:f2:39:41:96:
61:b7:a5:d6:ca:d3:1c:69:36:98:e2:d5:a2:59:9f:
5d:f8:c9:b5:a1:8b:ce:a5:90:4c:11:ff:42:af:c2:
4d:50:25:b2:6d:86:d9:6c:31:a7:76:1c:3a:fc:85:
4f:0d:7f:9b:97:10:3b:82:30:e8:fc:b8:ba:af:ab:
4d:dc:ab:1f:a2:4b:9c:65:97:aa:02:56:2d:3d:5a:
7f:50:21:96:2d:8e:7b:67:c7:d8:fc:d2:52:cf:25:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:A3:B5:AF:86:EC:C4:A6:7A:23:B0:E0:CB:2B:D4:00:4D:3A:78
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/YuGjta-G7MSmeiOw4Msr1ABNOng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.213.0/24
Signature Algorithm: sha256WithRSAEncryption
71:55:de:52:e8:55:38:28:c1:79:61:0f:18:d9:51:96:93:8d:
42:48:63:8f:36:d3:86:8b:c0:23:7b:f8:7f:0c:d7:d0:2f:b0:
65:a2:5b:ba:7e:d0:ac:86:7e:90:8e:a8:fb:bc:c0:95:d2:88:
7d:be:5a:fa:c4:69:c3:83:ed:4f:f2:d4:ac:39:a7:57:10:d5:
ba:e8:6a:d5:55:f4:c0:48:05:31:72:e8:2e:ba:18:d0:9f:19:
06:6c:35:65:27:ab:98:24:62:2e:9a:6f:d3:8c:d6:88:78:ff:
72:c2:71:0a:db:38:47:a9:9d:78:5d:d6:8f:6e:66:7b:d2:cd:
34:62:d3:0d:db:dc:49:a8:42:a0:43:68:ea:93:68:3e:fa:48:
42:d6:48:1c:e0:80:cc:cc:2e:6f:6b:e2:8e:95:d3:e4:37:9f:
87:df:9d:d5:d9:09:a5:da:6f:9c:91:fd:a3:af:28:53:a6:c5:
c3:40:f2:88:97:7a:13:a3:29:40:a9:99:d9:97:6d:f9:36:35:
ca:00:c1:52:60:7d:0b:a1:e4:a2:38:4c:58:c8:a4:70:b3:09:
97:79:e0:25:4d:d7:8e:ea:5e:7a:b2:7f:f5:e1:44:e1:05:43:
cf:8b:af:ce:b8:02:c1:a6:ff:d4:f0:fd:6f:98:32:47:53:d5:
9a:5b:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 07:27:44 2023 by rpki-client on console-ams.rpki-client.org