Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/BDYcASobsTwDc8v_7A6Zu0b4YtM.roa
File: BDYcASobsTwDc8v_7A6Zu0b4YtM.roa (raw, json)
Hash identifier: 5cJZ4OwnGJxRnSp6kucHuD1MoREdCOK8cXiqE52JPro=
Subject key identifier: 04:36:1C:01:2A:1B:B1:3C:03:73:CB:FF:EC:0E:99:BB:46:F8:62:D3
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01856C813A658F08A7E32475900F9772CCE9
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/BDYcASobsTwDc8v_7A6Zu0b4YtM.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49961
IP address blocks: 212.99.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3a:65:8f:08:a7:e3:24:75:90:0f:97:72:cc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04361c012a1bb13c0373cbffec0e99bb46f862d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:93:00:be:ad:50:9e:7f:8a:3f:14:e1:0b:
90:47:00:0f:ac:aa:7c:7b:92:e2:0c:3f:34:92:97:
c7:fe:5d:47:d3:c1:f5:13:07:21:82:14:38:2b:67:
a0:2d:23:d4:b0:2f:f7:e7:db:52:d6:b4:72:0e:1d:
5e:12:ef:e5:3f:f7:72:87:91:28:06:bc:5f:77:ce:
7d:21:e2:33:f4:d3:38:78:a8:c6:25:a9:42:1b:e6:
ad:14:2a:e3:53:03:22:fa:1a:1d:fd:35:89:3f:9d:
49:b7:69:b0:57:6a:63:f0:ac:2b:25:00:27:d2:41:
fd:1a:96:cd:b5:83:31:ee:5d:19:c2:78:49:5d:8f:
2d:2d:f2:a1:3d:92:30:17:dd:51:0a:e6:ef:08:04:
15:a5:08:da:a4:3b:fd:e0:94:73:b6:f8:bd:71:91:
95:fb:f4:69:57:e4:ca:84:cd:66:6a:43:b8:33:b5:
dc:fe:2e:4f:01:32:55:ae:7d:2c:b6:06:ac:8f:9f:
b4:29:7f:b2:74:60:aa:c2:ed:db:78:27:3e:cb:89:
04:af:a8:f9:5e:24:aa:76:17:26:01:e2:b6:f0:bb:
8d:e7:2c:63:12:f0:31:fd:bd:9f:8f:12:a6:cd:a3:
fe:4c:fd:4d:28:7d:da:f4:2c:f5:3a:5a:06:c6:b9:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:1C:01:2A:1B:B1:3C:03:73:CB:FF:EC:0E:99:BB:46:F8:62:D3
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/BDYcASobsTwDc8v_7A6Zu0b4YtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.99.15.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6d:46:5d:09:ac:9d:95:45:ac:e6:5b:b3:ba:26:7b:21:7d:
00:1b:78:cf:f1:df:3a:c0:17:bc:73:67:50:9a:28:b2:94:f5:
7a:f0:4e:e4:e1:f3:00:d2:ef:c7:73:41:af:5c:b0:da:7a:5a:
bc:8e:ae:58:0a:66:1f:94:6f:b9:fc:73:0e:43:e4:1c:f0:22:
0d:6f:0f:64:fa:87:62:b7:98:92:a0:52:87:37:6e:cf:59:9f:
b0:4b:65:20:cf:ac:b1:30:2a:00:13:83:e8:0e:9f:c7:f4:8d:
e6:19:02:6b:16:6b:e7:ca:3e:96:ea:2e:1c:32:85:f5:c2:19:
fd:5a:bf:f7:85:87:2d:57:ce:eb:c9:1f:bf:a3:9b:fd:69:ec:
bf:a1:85:a2:12:3e:c2:bb:52:48:b1:d3:bb:11:55:bd:7a:ad:
03:c1:29:ea:74:20:bb:8c:90:93:df:64:36:d4:2b:46:fc:7f:
98:cb:c0:6d:40:39:98:2b:96:83:e7:4f:bb:2f:92:6e:11:92:
b1:6d:6c:59:2d:74:87:db:c3:c2:c7:d0:b5:7f:23:e3:bd:b2:
f1:df:2f:41:ea:95:85:96:ff:88:44:89:d2:12:db:f7:29:2c:
f7:62:b2:2d:0a:23:01:0b:32:7a:5d:62:75:53:eb:40:b1:13:
5b:3d:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:44 2024 by rpki-client on console-ams.rpki-client.org