Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/jht8Yq77vJ5HLw31xKLXdC3ZmS4.roa
File: jht8Yq77vJ5HLw31xKLXdC3ZmS4.roa (raw, json)
Hash identifier: Jn7KeZ0qQRz/wlJ8o9rxWyXPJezIXKt4KC4LOwRblqE=
Subject key identifier: 8E:1B:7C:62:AE:FB:BC:9E:47:2F:0D:F5:C4:A2:D7:74:2D:D9:99:2E
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01866DD0F93C8077E3AA0EE6B0A1AD4FE9BC
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/jht8Yq77vJ5HLw31xKLXdC3ZmS4.roa
Signing time: Mon 20 Feb 2023 07:54:17 +0000
ROA not before: Mon 20 Feb 2023 07:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 212.113.120.0/22 maxlen: 22
212.113.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 18 May 2023 14:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:d0:f9:3c:80:77:e3:aa:0e:e6:b0:a1:ad:4f:e9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Feb 20 07:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e1b7c62aefbbc9e472f0df5c4a2d7742dd9992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:b7:e2:d8:d4:a1:fb:a8:2c:49:43:11:55:
42:76:c5:08:c3:33:03:d5:e8:df:03:02:62:dd:0f:
46:55:30:c4:16:f9:1d:75:04:a8:8e:99:e3:6a:14:
dd:26:a9:50:9d:3c:5e:13:ef:df:c2:22:aa:e6:3c:
ea:eb:ff:ba:5a:ff:69:25:30:42:85:fa:ff:6f:e4:
c5:a7:42:1d:b1:5d:5c:1d:d9:b3:51:f2:92:ca:ae:
a9:f9:a0:72:c0:12:9c:53:6e:76:7a:f2:2a:a2:d4:
ba:0f:0e:1b:1f:cb:75:e5:59:fe:96:c0:98:45:d6:
b6:c2:e5:f9:0d:bc:3e:82:21:ec:c5:8b:f4:d3:12:
84:0a:14:e6:60:16:88:c9:fd:33:8c:a6:2b:3d:88:
9e:8d:3b:8d:d7:8c:0c:43:62:6e:9f:b9:ac:ce:14:
77:d7:ed:f5:db:e3:89:24:92:72:4d:4d:fc:15:af:
8b:19:52:f7:c6:6a:7b:32:a7:46:0c:2e:19:7c:6e:
88:46:d3:c8:94:0d:04:20:dd:b6:82:38:c7:19:68:
d1:52:3b:bc:64:2d:3f:21:09:04:a0:d2:0a:16:be:
d6:f8:02:b8:bc:89:75:75:6f:e7:18:26:27:aa:d2:
52:f9:96:c5:53:b1:b1:1a:d1:f0:70:d2:2a:a3:9d:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:7C:62:AE:FB:BC:9E:47:2F:0D:F5:C4:A2:D7:74:2D:D9:99:2E
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/jht8Yq77vJ5HLw31xKLXdC3ZmS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.100.0/22
212.113.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:00:00:fa:9a:6f:96:d4:91:33:3d:1c:05:91:ff:2d:99:33:
27:23:c9:60:83:21:76:29:fe:c6:4d:8f:76:5b:c9:5d:77:4c:
e5:31:15:06:9d:e5:5f:3a:5a:e1:58:cb:7e:ad:3a:4a:c2:9b:
21:87:db:8c:2b:ba:72:93:e3:4a:8f:fb:26:3d:00:8c:6e:6b:
8c:50:1f:a8:47:4f:31:36:0e:74:28:86:ff:8f:5a:05:88:b2:
4c:a8:54:4c:df:27:13:d5:ea:7a:cb:50:e9:9d:e1:bf:8d:00:
e7:f0:8c:a2:3d:1c:c2:a7:0b:00:64:0b:98:ff:a1:88:91:29:
cc:26:dd:58:e7:bb:ee:9c:f3:97:bb:13:62:79:8d:d6:2c:da:
af:f3:83:4a:ef:14:d4:18:08:c4:ad:87:7e:a5:64:55:93:b1:
e4:32:49:04:cb:09:84:79:7a:61:d6:6a:58:c1:da:89:e0:fe:
cd:a6:6d:a7:e8:7e:d6:1b:ca:4e:b7:48:54:84:c5:0e:d2:43:
b4:5a:f1:f7:87:3e:ea:15:45:46:af:2e:7a:db:d8:c3:a1:3f:
57:e0:c8:0b:9b:1a:af:b0:87:7a:e5:62:50:e0:7f:42:aa:78:
44:ec:68:cb:57:46:c7:64:c4:3b:c9:ed:60:86:1f:06:5d:a7:
ad:6d:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org