Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/AKx5_sNGedpVBj1JUCEu2jx8hrM.roa
File: AKx5_sNGedpVBj1JUCEu2jx8hrM.roa (raw, json)
Hash identifier: 94uIfm0pk5MwhRxh6mwxB10d+ggya0Q1Li/UwSPiqAo=
Subject key identifier: 00:AC:79:FE:C3:46:79:DA:55:06:3D:49:50:21:2E:DA:3C:7C:86:B3
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018AF45C6AEED7F9088948A44A50E9909B2D
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/AKx5_sNGedpVBj1JUCEu2jx8hrM.roa
Signing time: Tue 03 Oct 2023 07:06:51 +0000
ROA not before: Tue 03 Oct 2023 07:06:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29076
IP address blocks: 212.113.125.0/24 maxlen: 24
212.113.126.0/24 maxlen: 24
37.202.12.0/24 maxlen: 24
37.202.13.0/24 maxlen: 24
212.113.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 08 Nov 2023 10:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:5c:6a:ee:d7:f9:08:89:48:a4:4a:50:e9:90:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Oct 3 07:06:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00ac79fec34679da55063d4950212eda3c7c86b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:99:e2:7b:1c:30:e2:68:5f:00:82:53:06:
12:f9:45:b1:a2:4f:5f:94:30:be:bb:f0:34:18:99:
b2:b9:ec:1d:00:bc:8a:9e:b0:aa:40:42:0e:cc:d9:
61:aa:91:d5:a5:22:42:38:43:cc:eb:81:b9:4f:10:
05:2c:e1:71:09:fc:a3:a4:b6:a5:e2:79:42:c5:35:
b9:08:e9:6e:01:c5:be:6e:91:9e:58:07:84:65:54:
e8:78:13:01:5c:12:ce:fb:e6:ff:fa:f3:75:39:96:
3d:51:1c:af:f1:14:92:08:40:1e:ed:b0:75:ea:f1:
a1:9f:b1:e2:06:de:30:2b:df:d4:6d:26:9a:91:2f:
08:91:54:59:c1:e0:2a:d0:26:7b:51:1f:0b:4a:99:
05:44:8b:1d:9b:aa:25:a0:11:b7:49:e8:9f:de:17:
57:30:94:74:4b:53:80:d2:ff:a4:82:cc:ae:10:5b:
1a:b7:c5:75:15:7f:af:d5:d3:91:da:1f:6f:c5:d2:
76:bf:85:12:99:42:10:11:5f:3d:b4:8a:12:74:24:
d3:eb:d1:a9:73:74:43:6b:7f:7f:2a:ae:8e:b0:07:
57:f3:a8:b0:33:43:e3:91:36:7c:71:c7:3e:64:7f:
93:39:81:71:94:05:27:a8:1b:fa:f1:1f:56:bb:ac:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:79:FE:C3:46:79:DA:55:06:3D:49:50:21:2E:DA:3C:7C:86:B3
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/AKx5_sNGedpVBj1JUCEu2jx8hrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.12.0/23
212.113.114.0/23
212.113.125.0-212.113.126.255
Signature Algorithm: sha256WithRSAEncryption
4f:af:63:80:69:6b:76:43:7f:03:b0:4a:9e:05:60:e5:08:a0:
18:14:31:dc:25:88:38:78:d0:39:75:a8:6d:94:99:16:dd:72:
98:09:b5:94:ff:ce:27:22:ff:bb:ba:d1:f2:bc:d4:a4:04:c8:
44:54:dc:85:ef:c9:f9:eb:7f:d7:62:88:ee:05:e3:24:95:d2:
db:a7:2a:06:52:93:7e:8e:e3:41:1d:5f:28:cd:80:aa:a7:66:
bd:24:1f:c6:8a:0d:67:5d:f4:8a:87:28:1c:73:e3:cc:c7:62:
00:d7:66:be:a1:78:22:cb:2e:13:f4:b8:aa:64:91:54:ab:e5:
e9:48:9c:c4:76:32:dc:a0:19:70:18:c0:88:ee:39:37:c5:63:
c9:1b:7d:8a:1e:95:0f:03:de:29:1a:25:17:16:aa:d2:0f:4b:
48:6d:5a:9b:b1:40:5d:f4:4b:83:f8:6b:2c:fa:4d:d3:e4:1c:
8a:17:79:ba:f0:56:47:c9:8a:ef:68:12:8f:3d:30:b6:62:5f:
02:e5:f3:69:19:14:cf:f7:72:96:0f:da:1f:aa:18:ca:5b:7e:
f2:6a:66:09:93:91:6f:c5:ac:a6:b7:ec:49:29:d3:42:4c:1f:
5e:67:80:9f:76:ef:c8:a5:7b:4e:1b:1d:d7:48:bf:72:af:b0:
76:fb:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org