Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/8ufELFNyYkfCRalcUDFcUPddnnk.roa
File: 8ufELFNyYkfCRalcUDFcUPddnnk.roa (raw, json)
Hash identifier: +reyzS/uthnpMJUXaeE9aeA3vZ515Pm1oQoYSV6290o=
Subject key identifier: F2:E7:C4:2C:53:72:62:47:C2:45:A9:5C:50:31:5C:50:F7:5D:9E:79
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 01880F7163C46933099E89084ED6E2E448A4
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/8ufELFNyYkfCRalcUDFcUPddnnk.roa
Signing time: Fri 12 May 2023 10:11:09 +0000
ROA not before: Fri 12 May 2023 10:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 212.159.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:71:63:c4:69:33:09:9e:89:08:4e:d6:e2:e4:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: May 12 10:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2e7c42c53726247c245a95c50315c50f75d9e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:bd:c7:f5:fe:ba:55:58:de:13:f8:67:dd:
39:63:9a:fe:df:bd:ed:1e:b5:61:70:8e:7d:24:ca:
b8:b1:24:6c:f7:89:e2:7f:63:12:60:ac:25:b6:46:
d0:89:96:d6:b3:c1:21:0e:c3:21:16:45:51:ed:4d:
e8:c4:52:69:42:d7:6c:d0:69:65:3b:c6:b2:9e:68:
59:d1:f8:8f:81:39:c7:fc:13:ab:5e:34:11:33:a7:
c4:2a:cc:84:8f:5f:32:4e:a7:a8:e3:98:15:f0:eb:
a8:42:39:c1:aa:1c:7e:af:b1:85:39:ab:cb:c8:4a:
d1:d1:62:92:fa:96:15:ce:f8:1b:46:eb:ac:46:2e:
f5:7d:4e:07:d7:cb:7f:2c:21:aa:8c:cb:38:9b:27:
b3:1a:f7:3f:e4:23:9f:07:26:7a:ee:98:0d:54:f6:
6c:20:9a:a4:eb:c7:2a:68:ba:6e:1e:e4:6b:43:48:
ed:97:bf:06:88:7b:99:04:fb:df:58:50:b2:5c:5d:
96:ea:81:d1:82:8a:9e:20:eb:82:2d:3b:54:c4:0e:
a1:0b:57:bc:40:8c:93:4f:2d:55:49:e6:e4:6c:92:
a6:8b:5c:03:c8:66:0d:6e:f9:27:f1:e1:39:95:54:
89:55:c3:44:18:7c:ba:a8:f1:09:ac:ec:be:27:08:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:C4:2C:53:72:62:47:C2:45:A9:5C:50:31:5C:50:F7:5D:9E:79
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/8ufELFNyYkfCRalcUDFcUPddnnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.159.255.0/24
Signature Algorithm: sha256WithRSAEncryption
05:02:f1:e1:c0:54:8a:16:a7:b2:63:86:06:ab:cf:e4:83:1b:
5f:f3:4f:dc:53:a3:7e:31:2c:37:91:fc:e8:65:97:53:a1:11:
e9:62:ff:a1:d9:82:70:22:b9:03:9e:13:38:36:cb:59:c5:f9:
77:94:c9:a8:fb:aa:34:c8:98:e3:9f:7b:d0:e1:ef:67:de:6b:
3c:08:d9:d4:49:75:89:40:50:ba:a1:16:3e:47:a8:8b:fd:9a:
53:e9:ef:d5:77:04:d5:65:f1:8b:70:0b:08:e5:59:cd:46:a6:
3c:ea:46:be:58:d1:41:77:4d:dc:59:e0:89:cc:39:fa:ee:b7:
92:6f:2d:04:fe:db:77:07:84:6b:7c:84:47:d2:c4:4b:44:cf:
6e:ed:e7:b4:70:9a:22:aa:0e:4e:d9:2e:32:ad:76:69:29:b2:
32:50:bd:42:b2:3d:1e:58:4f:4f:b4:8d:c6:5a:6a:55:dd:1c:
04:7d:fa:74:47:00:2f:1d:bc:3a:58:42:21:00:19:b2:a5:05:
85:13:af:17:8f:b7:22:e0:2d:a3:86:c7:e8:04:07:28:ce:d9:
ac:77:65:dd:3b:e2:4d:f2:8a:9a:73:be:92:90:be:99:39:e9:
a6:92:2d:40:eb:13:c9:18:1c:a8:35:7b:ef:98:3c:18:84:84:
e3:42:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net