Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/2mrpc3OHopUOGP9a04suieNxONE.roa
File: 2mrpc3OHopUOGP9a04suieNxONE.roa (raw, json)
Hash identifier: 65ZDO3tq3jbzExAhlYYpzRgdjDXS92oKmpVb/7L6Rv8=
Subject key identifier: DA:6A:E9:73:73:87:A2:95:0E:18:FF:5A:D3:8B:2E:89:E3:71:38:D1
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01856E266E63E6CF039329C27531B8DA99F7
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/2mrpc3OHopUOGP9a04suieNxONE.roa
Signing time: Sun 01 Jan 2023 16:24:50 +0000
ROA not before: Sun 01 Jan 2023 16:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55002
IP address blocks: 212.3.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:6e:63:e6:cf:03:93:29:c2:75:31:b8:da:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jan 1 16:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da6ae9737387a2950e18ff5ad38b2e89e37138d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:d9:c2:92:86:b0:41:ed:fc:f1:a0:26:68:
8b:87:b5:7f:e4:a9:a6:ca:b4:c9:3d:ca:e7:43:6a:
9c:83:6f:9f:06:b5:16:c3:da:c5:bf:c9:49:ef:7d:
99:8f:fd:1f:0c:ae:99:a5:1c:cb:b2:e4:87:5c:77:
4b:0c:cd:e0:0f:b5:85:51:3d:27:8e:71:74:6b:41:
8e:86:94:d7:62:80:2b:f4:56:bc:62:01:a5:ab:a8:
87:e9:f6:a9:fe:be:0d:eb:65:2b:c6:ba:99:b6:7d:
ad:66:c1:a9:e0:fb:ec:0f:9d:85:84:25:d7:f7:5a:
4a:cd:ee:f1:2c:9c:83:a0:98:37:33:e4:4e:32:14:
74:38:26:17:e1:8a:a5:0f:f2:ff:c9:bb:2d:5b:ce:
45:42:4f:88:3e:32:94:86:07:fa:38:5a:f4:77:d7:
f5:eb:1c:e7:86:74:74:28:22:d2:db:57:de:ee:71:
de:53:aa:12:34:b4:a9:55:cc:92:2c:de:83:b2:f8:
bd:1d:3f:c6:b3:a1:3b:63:ea:3e:a4:42:ff:50:25:
ab:bc:90:94:62:94:21:73:5c:eb:38:61:cd:83:d6:
26:e2:8d:d3:60:5b:f0:92:d7:38:36:27:58:d9:61:
e0:9a:04:17:ed:50:6d:24:8b:76:b3:2e:f5:18:90:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:E9:73:73:87:A2:95:0E:18:FF:5A:D3:8B:2E:89:E3:71:38:D1
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/2mrpc3OHopUOGP9a04suieNxONE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.3.221.0/24
Signature Algorithm: sha256WithRSAEncryption
46:64:2a:21:ee:7c:55:cb:eb:a4:be:c3:cc:5c:23:7c:24:f6:
4b:55:23:90:03:87:a1:fc:cc:03:41:df:80:c6:47:1b:68:c8:
83:bc:4f:b1:a7:8d:27:ae:b1:fc:8f:45:63:61:b4:4b:68:37:
a7:e5:d0:a8:be:8b:9e:d5:05:e8:d2:a7:63:93:59:e3:43:0d:
6e:3d:a6:66:d6:0c:b8:01:72:e9:21:d8:a5:2c:ec:10:df:95:
3e:57:55:18:c5:7c:a5:79:c4:5a:d0:b4:7c:2a:90:22:2b:ec:
62:2a:a2:e8:f1:0a:4c:3e:b8:fe:b5:32:ca:61:75:ce:6b:02:
04:88:45:da:fa:1a:77:82:d0:99:fd:9b:ab:7d:32:62:4f:6b:
de:8b:cb:07:7b:98:a9:35:c0:90:2a:69:45:d0:14:f6:48:ef:
af:1b:c8:14:18:ff:15:d6:90:15:82:33:81:ec:8b:f6:d2:e6:
8a:67:79:3c:38:a6:e8:67:fa:e6:6a:5f:37:79:cb:1a:f6:e0:
41:d9:3e:e2:f7:65:e2:53:ce:b7:5c:3c:9b:d6:e4:e3:56:f5:
19:19:f5:65:de:d8:38:8f:a6:2c:c7:51:94:17:4f:3c:c0:24:
5e:84:12:b0:46:31:69:10:68:c0:53:a2:28:f5:f9:9a:99:da:
75:29:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net