Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/Zje9n1urom5vW8cwiAO1folnNSY.roa
File: Zje9n1urom5vW8cwiAO1folnNSY.roa (raw, json)
Hash identifier: 3kOg79qtm46YHZfGsptnqdhuuSkTxAAMe7RPC3KGYMU=
Subject key identifier: 66:37:BD:9F:5B:AB:A2:6E:6F:5B:C7:30:88:03:B5:7E:89:67:35:26
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 018AB949832BC448535DE04D9619DBA22D05
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/Zje9n1urom5vW8cwiAO1folnNSY.roa
Signing time: Thu 21 Sep 2023 19:48:37 +0000
ROA not before: Thu 21 Sep 2023 19:48:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:49:83:2b:c4:48:53:5d:e0:4d:96:19:db:a2:2d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Sep 21 19:48:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6637bd9f5baba26e6f5bc7308803b57e89673526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:c3:8c:db:66:da:a0:3a:8a:4b:81:a3:04:
09:ce:b8:58:29:af:45:f9:ba:af:ae:81:fd:39:80:
bc:b3:db:ff:1e:7b:0c:74:34:c6:82:1b:ba:55:9a:
7b:1a:30:6d:ac:ec:27:84:f6:10:78:27:53:c4:bf:
de:f6:cb:39:95:c8:1d:1e:49:c7:7d:b0:cf:b0:d1:
93:98:b0:3f:db:62:86:1d:64:d9:16:b5:97:4d:95:
47:2d:27:59:3f:72:08:ae:df:8d:04:ff:e2:70:0a:
66:3a:4c:37:0e:eb:a9:27:2b:01:e6:41:84:72:a1:
9d:a8:3d:95:88:5e:af:d1:4c:33:aa:2e:91:07:d9:
cc:15:93:97:56:43:a7:b3:fb:53:cc:3f:fc:a5:c4:
2c:b4:ab:46:ac:a0:cc:e8:dc:1e:0b:51:7e:ec:e4:
2e:66:a8:29:41:64:90:75:e8:65:8e:eb:4e:1e:fe:
5d:ac:37:ff:0c:c3:8a:5f:d2:16:66:28:a4:a0:d3:
c4:e1:c9:b9:cf:d8:94:1c:f7:2c:71:05:ae:db:37:
d1:2e:df:4f:09:70:31:84:92:81:b9:e7:a6:17:28:
39:1e:42:45:6c:e1:b5:a8:50:6a:3d:13:a3:5b:6f:
d3:2d:3c:fc:30:f7:06:88:68:0f:c0:73:0e:03:02:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:BD:9F:5B:AB:A2:6E:6F:5B:C7:30:88:03:B5:7E:89:67:35:26
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/Zje9n1urom5vW8cwiAO1folnNSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
42:73:0b:7f:12:e6:0d:98:6e:46:95:28:86:bd:eb:d5:18:de:
f9:5d:2e:33:3d:e7:41:c2:bb:ec:fe:bd:9a:75:14:04:bc:b5:
e0:31:66:06:ee:63:a0:0c:9b:0e:a3:95:41:57:f7:85:62:f6:
5b:17:21:57:c9:c9:ac:6e:71:86:61:5a:fc:a9:28:eb:59:fe:
f7:8d:fa:c6:7d:0b:59:e5:78:a8:6d:fd:8d:81:44:a3:59:2b:
63:b8:43:bc:98:8f:cd:77:15:fe:0b:d0:95:7a:a2:53:6b:41:
a2:3b:51:59:0d:dc:34:24:b0:62:53:6c:52:e3:0a:e7:c9:43:
0f:01:4a:f4:92:dd:c7:5f:4e:1c:a9:06:77:40:5d:e4:d5:fd:
c0:8f:ba:a7:12:80:a3:72:41:4a:49:f5:dc:a1:8e:c6:c7:01:
a6:5c:60:0f:55:ad:63:31:6b:2e:97:b8:72:5b:ec:8e:01:aa:
ef:dd:fa:2c:00:ae:02:28:30:c0:f7:dc:ed:8c:94:34:c0:43:
15:20:ec:ab:51:c4:88:e1:c3:c1:ce:4a:3e:9f:8e:56:8b:72:
07:98:08:54:3c:be:ca:ac:d8:57:fa:11:25:4d:a5:ce:5b:14:
ad:41:f1:92:1c:f5:84:f5:fb:33:fa:85:b1:69:55:a9:84:92:
c4:d1:bb:b1
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 23 05:25:02 2023 by rpki-client on console-fra.rpki-client.org