Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JN6hC_hsBL-7C6PEGW0qGBvbvbU.roa
File: JN6hC_hsBL-7C6PEGW0qGBvbvbU.roa (raw, json)
Hash identifier: esKzS8hpN7+LFuxtmJp/s2nYvnWaVvTKjTsPGZuka24=
Subject key identifier: 24:DE:A1:0B:F8:6C:04:BF:BB:0B:A3:C4:19:6D:2A:18:1B:DB:BD:B5
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA882CA5FEF8F8ABD3B3AD8514F35E
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JN6hC_hsBL-7C6PEGW0qGBvbvbU.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201908
IP address blocks: 212.91.30.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:88:2c:a5:fe:f8:f8:ab:d3:b3:ad:85:14:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24dea10bf86c04bfbb0ba3c4196d2a181bdbbdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:29:85:56:e5:67:19:b0:2d:a6:12:9f:52:44:
36:c8:b3:82:0b:c3:5d:8c:6d:78:0e:67:a7:27:5a:
f9:ff:ea:79:05:20:76:ea:7c:3d:d8:3b:28:56:b4:
d5:b6:23:b4:64:b3:c7:54:81:36:6d:9a:6f:90:9e:
0c:4b:4a:ec:53:f3:02:c6:b8:45:95:05:fa:6d:cd:
b6:2e:f5:17:fa:c9:25:2e:88:3a:62:97:12:6e:dd:
4a:2a:a0:5c:ea:b4:b3:1f:89:ae:08:b5:3b:e2:c5:
a5:7c:2d:cf:3d:6b:1f:4e:6d:00:e6:cd:53:64:83:
88:36:6c:31:4b:fd:1c:82:78:d8:32:f5:e9:b9:3e:
f9:4a:4b:cb:02:d8:90:b6:7c:82:a6:99:ca:f8:d6:
49:ef:92:80:09:42:88:87:7b:84:d2:09:af:ce:63:
ab:19:a8:49:bc:22:b6:58:71:68:14:a4:ed:c3:1d:
b3:82:0e:30:a2:86:92:0b:be:7f:0b:1c:78:3e:eb:
5c:85:bf:e4:c0:5e:b4:a7:69:d9:6d:82:12:38:68:
8a:19:8e:39:fb:bc:ea:f7:13:5f:63:be:1a:5e:53:
5d:5d:bf:ae:c1:fc:62:77:5f:71:e2:db:e9:87:5d:
81:08:a9:de:44:83:d0:13:00:43:4f:13:ee:2d:a3:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:A1:0B:F8:6C:04:BF:BB:0B:A3:C4:19:6D:2A:18:1B:DB:BD:B5
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JN6hC_hsBL-7C6PEGW0qGBvbvbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.30.0/23
Signature Algorithm: sha256WithRSAEncryption
76:74:2b:e6:5a:e3:05:55:f9:02:25:cb:ea:ea:d6:49:b5:68:
f6:d9:b4:f4:c6:97:21:b2:79:fb:1a:98:c4:2f:8a:4e:c9:78:
2b:c5:4d:60:de:95:09:14:3a:9c:18:af:53:eb:be:60:4e:c9:
b3:8e:cc:d6:65:66:16:8c:62:01:f2:fa:ae:8c:90:89:c8:fd:
af:71:86:c1:db:91:f6:7e:76:51:60:1c:dc:ec:1f:58:bc:98:
bf:bb:4b:6d:8a:fd:cc:77:ec:38:ab:da:29:cc:86:40:ff:3c:
5d:fb:31:dc:f3:81:42:58:c6:3a:4b:77:33:bc:ae:6c:bf:5e:
d8:b8:9a:42:ac:b6:4b:54:dc:87:f7:05:00:7c:1b:c3:29:30:
b4:ab:a7:c7:4a:b9:6a:df:75:41:79:54:1e:2b:0a:d4:85:e2:
a4:94:58:45:f9:14:1f:fb:46:8b:9d:c1:5f:74:1a:fb:2d:78:
38:32:4d:0a:c9:bf:e2:74:a6:9d:9b:9b:6a:b2:22:b6:aa:62:
fd:01:3e:fc:62:2b:3e:9e:ec:74:72:c1:ff:17:d4:99:8f:d2:
71:2b:92:d1:e1:3f:df:90:e8:b5:06:ce:ac:38:ce:d9:37:0c:
fb:32:18:01:72:ba:a9:df:43:1b:89:94:22:9a:ee:c2:24:97:
ef:b4:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:15 2024 by rpki-client on console.sobornost.net