Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ynbBHDwi4t33vVTIWJGZzHKcdAY.roa
File: ynbBHDwi4t33vVTIWJGZzHKcdAY.roa (raw, json)
Hash identifier: T8hcLsIrrTmqNqepcSuE+FWaZTWAsi1FQtB4BoX4Wyc=
Subject key identifier: CA:76:C1:1C:3C:22:E2:DD:F7:BD:54:C8:58:91:99:CC:72:9C:74:06
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11DCF64A2EFDE96D94394078F1532
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ynbBHDwi4t33vVTIWJGZzHKcdAY.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.103.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1d:cf:64:a2:ef:de:96:d9:43:94:07:8f:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca76c11c3c22e2ddf7bd54c8589199cc729c7406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:60:17:27:c3:1e:d1:ee:8c:6e:6c:c8:e6:
63:3e:a6:af:e7:4d:b4:0d:6a:c4:af:7d:40:31:12:
cd:46:53:a4:42:df:95:1e:1f:e9:3c:fc:b4:7f:cd:
fe:da:a0:bc:66:1d:d9:f0:3b:95:ce:83:1b:8c:a4:
00:88:0a:25:08:58:24:38:d2:9b:e7:c1:b6:b8:b4:
ad:c0:a9:a1:cc:ea:bc:c6:25:15:af:28:49:1b:9f:
a5:4d:e4:09:9d:b0:ff:26:a2:9b:b7:db:d8:6f:45:
59:b9:31:72:44:09:dc:66:39:ab:da:40:4c:c5:18:
0a:59:7b:c3:7d:35:92:11:36:8d:51:f9:a0:8e:97:
b3:3b:89:34:3a:61:1f:be:d9:a7:17:99:9b:c0:7b:
ac:e0:b8:eb:84:94:e6:d6:b2:26:70:89:26:30:9c:
d2:e6:7d:2c:7c:63:36:06:39:df:dc:f7:7e:51:65:
c7:a9:c8:b4:bb:7d:43:7a:02:d8:db:e4:1a:8a:69:
82:d5:c7:47:d5:f2:59:c5:f5:e9:c5:10:d8:84:70:
57:61:6e:11:c8:2b:10:0b:f6:50:8d:de:63:d6:9f:
13:b4:d2:5d:bc:e3:e7:77:3d:27:c1:2e:fc:aa:3a:
d7:00:f9:cf:5f:7c:e0:7c:dd:9b:a1:93:9e:95:93:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:C1:1C:3C:22:E2:DD:F7:BD:54:C8:58:91:99:CC:72:9C:74:06
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ynbBHDwi4t33vVTIWJGZzHKcdAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.41.0/24
Signature Algorithm: sha256WithRSAEncryption
02:17:ef:27:d6:49:05:45:2a:b8:59:9b:fe:1f:36:29:c4:bb:
c9:37:ac:59:b8:67:66:ef:0e:05:be:5b:ad:33:18:2f:ab:b1:
f3:1f:b1:f9:ad:c6:46:f1:9a:7a:7d:4b:4b:7a:b2:f0:a5:3b:
e5:e1:22:4d:46:25:d5:e3:73:13:73:e8:f1:12:c7:93:6e:a7:
59:d8:f2:cb:3f:0d:ab:e5:97:71:5e:17:62:ad:de:ba:8a:6f:
da:2a:3e:f8:d3:b7:6d:f6:54:11:23:70:51:33:15:5a:4e:8b:
4f:a1:83:82:ee:7e:e1:2a:6d:c2:58:ea:06:dd:24:89:d6:8b:
c5:47:1e:f4:0f:4f:61:63:b0:f8:45:5a:7e:ce:04:d7:d0:b9:
7e:06:d4:4d:2f:55:82:1e:89:36:c2:b5:d8:eb:f0:38:9d:34:
54:40:0a:ac:04:d0:d6:a2:ba:e2:2b:75:06:36:0c:4c:98:7d:
b9:79:99:60:de:56:eb:ab:c6:c8:87:1d:c2:88:a8:cc:f9:3a:
3c:3b:95:ce:da:54:42:7c:9b:24:94:fc:ef:32:c9:f5:ba:dd:
38:11:bc:d7:43:cc:28:7a:2b:60:68:51:cf:93:58:18:de:b3:
d9:b7:a6:41:d0:51:8d:9c:1d:25:ed:c1:89:74:46:aa:cd:61:
c3:e0:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:31 2024 by rpki-client on console-fra.rpki-client.org