Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Yh7zAwLGU3onTPVdO29FUd-e7no.roa
File: Yh7zAwLGU3onTPVdO29FUd-e7no.roa (raw, json)
Hash identifier: FbZuoCFMSHGKNLgwjNpoTnkIuZXNcXvQNrzAeaR1Oxc=
Subject key identifier: 62:1E:F3:03:02:C6:53:7A:27:4C:F5:5D:3B:6F:45:51:DF:9E:EE:7A
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018931C8322BE3F9FE34205D2A9EF0C0FDB3
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Yh7zAwLGU3onTPVdO29FUd-e7no.roa
Signing time: Fri 07 Jul 2023 19:15:50 +0000
ROA not before: Fri 07 Jul 2023 19:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:c8:32:2b:e3:f9:fe:34:20:5d:2a:9e:f0:c0:fd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jul 7 19:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=621ef30302c6537a274cf55d3b6f4551df9eee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:09:d3:25:59:bb:fb:8f:30:c8:de:57:61:
52:97:0d:7f:f3:31:1e:0b:ff:b8:30:ec:32:98:cf:
88:d4:03:53:85:59:28:a1:3a:c9:0f:46:ba:5e:f1:
13:7f:19:44:7a:12:f5:0e:ce:62:82:2f:c6:f0:74:
4b:17:e6:f8:18:c5:4d:83:4e:18:f2:c4:4a:78:96:
9b:65:4e:90:75:b3:79:71:a0:38:09:3d:e3:45:0f:
cf:9d:70:13:d7:e4:6f:c8:75:23:6c:47:20:86:8e:
62:3f:38:56:56:86:3a:b7:d3:ee:0e:65:cb:51:02:
e6:0d:63:f0:3f:01:23:2a:16:4f:9b:57:4f:ca:7e:
24:6b:ef:3b:19:bf:8f:da:ff:15:be:a5:f3:df:19:
1e:fd:84:68:c6:2e:7c:b5:45:32:22:c2:6e:c1:2e:
04:5a:64:74:1c:45:7d:3d:60:27:39:c2:18:de:01:
e8:7b:e1:6c:75:2f:d5:c3:42:1a:d8:97:41:3e:1d:
ae:d7:66:61:21:4b:82:ee:00:14:5a:fe:10:97:08:
ed:c7:ad:c5:37:23:db:32:a0:a1:4e:de:4f:ce:5b:
84:06:3e:3b:59:97:f0:d0:b7:bb:5b:0b:04:c0:e9:
6d:60:95:db:a1:4b:3b:77:c3:6d:d4:fe:04:96:c3:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:F3:03:02:C6:53:7A:27:4C:F5:5D:3B:6F:45:51:DF:9E:EE:7A
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Yh7zAwLGU3onTPVdO29FUd-e7no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8f:96:c4:11:18:82:16:f1:04:e7:14:dd:60:06:6a:18:f5:
6e:33:36:d2:49:1a:49:6f:8e:1c:ed:f4:a7:c0:5d:26:58:1c:
89:6b:34:b8:9f:f4:e1:e1:ba:7f:6c:c5:16:47:fa:01:af:36:
12:5b:b2:4d:ad:ea:ac:1b:e3:3f:3e:fc:87:ac:b8:4b:6e:b1:
9d:42:4a:67:5d:f2:8e:f2:60:16:94:84:bd:83:2d:35:07:97:
c0:f0:57:35:5c:c7:32:24:d6:1e:c9:9e:7c:8d:70:29:24:67:
77:dd:30:e7:46:1c:96:c4:ed:9d:f7:13:c9:4d:03:2e:12:b9:
3a:18:a0:2d:d8:bf:6a:d6:e2:ad:2a:c7:0e:27:8e:a2:10:bb:
cf:01:14:28:13:37:8e:23:98:f9:94:fd:80:86:ca:31:60:11:
c3:b0:42:26:09:ef:70:ea:63:64:5c:85:5c:98:49:a7:74:12:
b2:3c:0a:8b:72:b9:90:47:2b:c3:db:c8:4e:1d:cb:c4:21:d7:
c9:e4:b4:c0:ca:48:65:0c:cc:73:cf:a7:73:f7:80:9d:8b:79:
98:b4:6b:d7:37:97:42:d2:6c:43:26:51:e9:36:cf:54:61:39:
e1:d7:43:ff:9f:ee:75:b2:96:39:33:73:0f:98:14:cd:c4:86:
d1:1d:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net