Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/grLPGOYAVfPpENFQ9uXseBVk4bM.roa
File: grLPGOYAVfPpENFQ9uXseBVk4bM.roa (raw, json)
Hash identifier: a8HNeq7g8nYS8QoMd3YhYX3Rl03lU2zF1qndKcJKO7Q=
Subject key identifier: 82:B2:CF:18:E6:00:55:F3:E9:10:D1:50:F6:E5:EC:78:15:64:E1:B3
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 01856C1CB0392A59315BF4C761A7970750D6
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/grLPGOYAVfPpENFQ9uXseBVk4bM.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42487
IP address blocks: 212.102.121.0/24 maxlen: 24
2a0f:c540::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:b0:39:2a:59:31:5b:f4:c7:61:a7:97:07:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b2cf18e60055f3e910d150f6e5ec781564e1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:a9:de:29:69:30:ac:8a:58:ca:48:f4:c9:
19:b0:1d:96:fd:1c:8e:57:35:be:8a:60:e6:0e:fe:
c8:4b:fe:1b:a5:a4:88:09:e5:bf:46:1a:9f:12:45:
36:e8:d9:91:5a:5a:5f:ac:c8:60:28:3a:ef:08:6c:
88:5b:83:72:67:84:83:98:57:0e:91:fb:9a:0d:fa:
27:3f:b8:81:78:95:92:5f:1e:61:28:08:91:49:40:
0b:d1:8c:fd:39:40:6c:c3:75:75:48:db:cf:34:35:
17:00:61:97:bf:c3:3d:3c:eb:32:0d:95:22:ae:44:
5c:dc:ca:83:d2:2a:e0:bc:66:e7:96:b8:64:33:4e:
d8:1a:50:2a:73:f6:e2:a1:99:28:ba:ad:8d:8c:4a:
61:7a:ad:56:f6:2e:91:2f:0c:99:c0:45:d8:f5:45:
e6:0d:f4:16:92:39:50:5b:4d:82:15:fa:2a:1a:ba:
a5:f7:96:fd:8b:58:df:9d:59:bd:b0:55:82:63:dc:
fa:4a:33:24:3e:cf:b9:c7:47:df:42:a2:c6:f7:1b:
05:d1:76:c8:3f:89:d3:27:c7:3c:7a:50:16:a4:ac:
95:cd:13:44:bb:48:00:6d:f5:02:e1:3e:ac:1a:93:
ad:18:a2:99:95:cf:7d:81:93:95:e4:8c:44:37:3b:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:CF:18:E6:00:55:F3:E9:10:D1:50:F6:E5:EC:78:15:64:E1:B3
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/grLPGOYAVfPpENFQ9uXseBVk4bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.121.0/24
IPv6:
2a0f:c540::/29
Signature Algorithm: sha256WithRSAEncryption
59:7d:7b:b0:3c:ef:e5:ec:4c:cd:91:f7:b8:67:b8:1e:79:d1:
b8:2e:20:89:72:a8:4e:c8:82:d1:ae:de:dc:f4:f1:94:83:98:
83:ed:a7:bb:ce:c4:72:e8:7b:32:fb:8d:e4:83:2b:ad:48:1a:
06:d9:6b:f7:79:8c:2f:88:ba:3e:ea:cb:66:94:75:2e:68:8a:
06:8e:a6:b5:6e:16:c1:49:cc:cf:4e:45:0f:2b:c1:c9:42:48:
b3:b6:ca:bc:c7:f1:55:2a:ef:21:47:9c:e8:fa:8c:14:1c:c9:
7c:50:ce:af:c6:fe:0c:d1:7e:a6:ed:40:e5:b2:97:8f:60:02:
c3:b0:eb:07:83:18:fa:6b:c6:c7:31:5d:65:8b:d7:7d:27:9e:
40:4e:ea:a4:0c:1d:6c:17:75:4f:53:29:0c:60:1e:11:ce:8f:
80:e2:93:20:37:2b:e3:c4:af:f6:2c:13:7e:03:b9:ad:15:98:
c8:1e:48:dd:ff:e1:4e:ca:39:84:1b:f0:1d:d5:c3:c5:24:27:
f7:ac:a9:30:49:e5:07:00:77:d7:0b:8f:87:54:03:5f:59:98:
66:8a:3b:d2:ef:fc:3f:b0:ab:ff:e5:81:dc:e7:95:13:d7:24:
6f:0d:17:9a:eb:e4:81:9c:84:13:3d:86:b2:73:1d:7d:26:df:
1b:47:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:21 2024 by rpki-client on console-ams.rpki-client.org