Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/RjCutb8oHM-Pb5e7Z49OgUGj5XQ.roa
File: RjCutb8oHM-Pb5e7Z49OgUGj5XQ.roa (raw, json)
Hash identifier: eoICxKCbsxDh2fpo+3bJh8V2ULyMbhIcooUZbvoZP9k=
Subject key identifier: 46:30:AE:B5:BF:28:1C:CF:8F:6F:97:BB:67:8F:4E:81:41:A3:E5:74
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 0185729EE349793C548467B3B58401A67E7A
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/RjCutb8oHM-Pb5e7Z49OgUGj5XQ.roa
Signing time: Mon 02 Jan 2023 13:14:53 +0000
ROA not before: Mon 02 Jan 2023 13:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49539
IP address blocks: 217.78.56.0/24 maxlen: 24
212.106.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e3:49:79:3c:54:84:67:b3:b5:84:01:a6:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Jan 2 13:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4630aeb5bf281ccf8f6f97bb678f4e8141a3e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:fb:66:83:f7:f7:26:9e:65:a2:75:22:05:
9f:7d:d5:6e:23:f5:26:67:d7:82:93:bf:5f:e4:b7:
09:64:e2:ee:d3:cc:b3:72:40:19:ad:cc:fc:9d:50:
88:dc:23:76:0c:53:89:06:72:e6:73:e3:3c:88:9e:
47:ce:67:fc:cf:2d:f6:d8:a0:ac:ad:1a:0b:fd:61:
e1:52:3a:3b:1f:64:c7:25:9c:3a:82:10:1f:8a:38:
73:8b:40:eb:bf:a0:9e:0a:e8:ff:fd:2c:a8:f3:16:
45:a8:0d:b3:c8:22:3f:0d:1d:64:ca:29:39:8b:da:
f3:31:37:66:87:9a:5c:a0:34:25:31:a7:51:22:e0:
b0:16:72:36:36:84:12:50:b7:11:01:2c:de:53:d3:
7f:0b:ee:40:7c:04:d3:d6:ca:a9:12:61:9b:28:10:
21:b1:28:86:c4:7b:4e:87:a4:c3:52:4b:7a:d2:dc:
43:3c:ba:42:db:4f:58:66:b4:09:f7:f4:f8:5b:87:
2c:8e:d9:7d:1d:a0:fe:d2:34:fa:31:3d:63:0b:a7:
67:0f:7e:df:86:1a:4a:45:8b:b8:d8:d8:04:42:8e:
c2:88:59:75:06:e4:72:83:9a:98:d8:de:34:84:7b:
c7:11:7d:e2:1a:19:fb:fa:60:fb:7b:f4:80:80:af:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:AE:B5:BF:28:1C:CF:8F:6F:97:BB:67:8F:4E:81:41:A3:E5:74
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/RjCutb8oHM-Pb5e7Z49OgUGj5XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.106.73.0/24
217.78.56.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e4:c3:06:c0:8c:48:85:e4:50:be:80:82:99:b7:e2:79:14:
1e:86:63:93:f1:ea:f2:d4:da:02:0f:e2:24:01:ee:3c:98:ea:
ac:9d:97:f1:e2:49:c9:2b:92:30:48:55:98:b1:da:32:16:8b:
da:56:ba:42:bc:34:06:19:16:41:4b:0a:d2:66:8a:3f:4d:2f:
62:25:e8:05:d1:77:43:70:29:b3:35:8d:34:67:53:7c:83:4e:
45:cb:f0:2b:57:74:28:86:6f:31:10:69:15:5a:05:78:55:19:
84:f4:95:d0:69:32:35:9f:60:25:b8:63:fb:19:fd:c1:54:8e:
3d:07:05:ba:0c:02:f3:50:b5:ad:ab:a3:13:35:c7:39:bd:eb:
77:cd:c5:a8:e6:c9:7c:bd:25:54:c8:b4:7c:4a:ce:d2:ab:c2:
7f:2a:86:49:c8:ad:9d:88:05:e2:59:26:49:76:88:82:26:84:
e5:83:05:8e:62:59:d2:80:95:1a:0c:95:20:27:60:2d:65:b5:
5d:d2:97:4a:54:6e:1b:54:74:42:bb:a4:7c:f6:51:64:94:5e:
58:37:c6:47:f2:7f:17:0e:ef:36:30:a2:24:be:9c:fe:b1:b3:
64:7a:79:67:f6:88:1b:98:76:18:7f:1c:7a:06:a7:4f:79:76:
b1:c8:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:32 2024 by rpki-client on console-fra.rpki-client.org