Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/YvBHSVWvFRZJlnS_QJnzf8O6UaI.roa
File: YvBHSVWvFRZJlnS_QJnzf8O6UaI.roa (raw, json)
Hash identifier: dB9RJC8AgYFw6xnsDqe5446q1PNavlCeFI9WYdrzjE8=
Subject key identifier: 62:F0:47:49:55:AF:15:16:49:96:74:BF:40:99:F3:7F:C3:BA:51:A2
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018AA21FD70F14E7A969DE59325CBA08D6E8
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/YvBHSVWvFRZJlnS_QJnzf8O6UaI.roa
Signing time: Sun 17 Sep 2023 07:51:50 +0000
ROA not before: Sun 17 Sep 2023 07:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 123.253.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:1f:d7:0f:14:e7:a9:69:de:59:32:5c:ba:08:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 17 07:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62f0474955af1516499674bf4099f37fc3ba51a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:0a:ed:22:e4:f1:dc:39:87:09:9b:9f:eb:
eb:44:51:ab:7d:f6:54:b8:54:35:ac:30:4c:7b:df:
a7:be:8f:6b:47:72:e6:29:7d:ca:ff:a3:d4:8c:89:
99:0c:19:99:bd:d1:62:3b:55:cb:7f:dc:ec:b7:ed:
81:20:45:03:57:fb:cc:cc:cf:17:59:e0:ce:b4:bc:
47:08:eb:79:15:5d:41:1b:77:1e:fc:6e:f7:6d:95:
b0:da:63:64:4f:f5:76:e4:4e:e8:46:da:d4:92:ff:
3a:ab:ae:88:fa:a8:70:a9:76:fc:b7:6f:f8:d7:e9:
bc:10:4d:f6:6d:01:4a:04:f0:3d:f1:98:70:50:3b:
d1:0e:b8:80:77:d6:9f:e6:bc:87:79:90:0d:8f:84:
2b:f8:20:39:eb:e6:9b:75:6f:51:6e:e5:00:91:c4:
7e:ef:bc:3f:4b:8b:46:68:80:a2:7a:3a:9b:03:50:
71:d5:27:e0:9d:6f:fa:45:01:be:76:ac:b4:87:93:
c0:d6:02:cc:fe:1e:fc:aa:ba:00:30:07:08:d1:26:
98:be:30:75:e0:bb:30:14:17:00:0c:c1:22:a9:e3:
df:b4:82:48:7e:b4:1a:3c:fe:f6:5d:4f:9e:9b:75:
34:e7:54:4d:18:79:4a:a9:27:0f:84:dc:66:4a:f6:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:47:49:55:AF:15:16:49:96:74:BF:40:99:F3:7F:C3:BA:51:A2
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/YvBHSVWvFRZJlnS_QJnzf8O6UaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.213.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3f:de:e4:47:ee:19:af:cb:8d:b5:f5:e9:28:b6:6a:98:75:
b2:62:da:37:c0:54:e6:9e:a0:01:69:d2:43:c1:92:b2:bb:2f:
bc:d2:14:dc:a0:a2:f8:4c:96:fc:0b:ab:61:df:01:9b:78:0d:
5b:f4:8b:e4:d8:68:34:e1:65:89:ce:f0:c5:7f:c2:13:e5:76:
00:0f:c7:ba:f1:6b:ce:c7:0c:96:8f:60:22:8d:05:b7:09:73:
63:c6:9f:51:62:72:0d:bd:ad:70:f6:9f:16:74:6b:d5:47:06:
0a:78:bf:84:7f:b8:39:8f:d3:cf:ea:79:1a:c8:28:45:36:c1:
80:0a:19:0e:37:9d:54:d8:e8:bc:c8:c3:8f:35:78:4a:33:a4:
32:8b:f7:4c:df:f3:9c:30:9d:3c:44:c5:e4:1b:1d:07:41:76:
19:66:7e:6a:b6:ec:e0:3b:66:07:3d:ab:ed:5d:61:57:95:09:
cd:ba:6d:11:6b:16:ab:ea:10:5e:a6:d2:56:40:a3:47:41:a8:
ce:71:ce:8f:18:50:1b:a3:58:06:64:95:02:44:12:92:02:16:
40:48:63:5d:03:84:08:7b:21:a3:b3:fa:87:8a:83:c1:7d:49:
6c:41:e9:b4:5e:64:c1:b4:1b:bf:74:bf:f5:77:51:30:da:80:
f8:38:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:45:52 2023 by rpki-client on console-fra.rpki-client.org