Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/oH5S3CPJ7d1oh8yZdTQVcY8lsAw.roa
File: oH5S3CPJ7d1oh8yZdTQVcY8lsAw.roa (raw, json)
Hash identifier: gXxb/sKSfFlxRX39KVQiDTcaWBLofvNDMaM426D/HzY=
Subject key identifier: A0:7E:52:DC:23:C9:ED:DD:68:87:CC:99:75:34:15:71:8F:25:B0:0C
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 0190A0F8217034C7D0F72B2EC06D846CDB2E
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/oH5S3CPJ7d1oh8yZdTQVcY8lsAw.roa
Signing time: Thu 11 Jul 2024 08:45:34 +0000
ROA not before: Thu 11 Jul 2024 08:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 202.92.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 12:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:f8:21:70:34:c7:d0:f7:2b:2e:c0:6d:84:6c:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jul 11 08:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a07e52dc23c9eddd6887cc99753415718f25b00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:f6:8a:b3:ef:dc:fa:ea:92:48:37:08:48:
9a:d5:53:34:d0:9a:2d:b0:52:de:39:4f:a0:6d:32:
16:8d:55:44:b9:a6:59:ac:ce:a1:21:f2:f9:b8:c2:
9a:44:61:2e:17:eb:6d:ad:93:27:ba:9a:b8:d7:8b:
37:32:f4:c1:36:c5:df:9a:fc:40:5f:37:de:b9:1d:
8f:74:bf:b5:85:3a:a5:04:77:6c:fe:73:1e:95:62:
3b:40:3f:73:3c:40:ca:88:85:e7:f1:13:e3:f4:cd:
2c:48:64:23:e7:47:d0:73:7e:17:81:ff:f3:de:3e:
e4:ef:7d:43:a1:4c:81:80:7f:fb:39:46:4c:2d:c0:
6a:d0:4e:b0:b1:e7:6f:ab:b5:b7:15:92:92:0f:38:
a7:f6:ab:c4:83:d4:00:50:b0:4f:08:35:42:49:f7:
60:61:c4:06:58:39:bb:ed:9d:06:d6:7b:f8:5e:dc:
9d:17:5d:a3:b2:17:73:35:b8:19:c6:98:69:84:96:
c4:7b:94:8c:fd:92:3a:99:28:d3:67:b0:5a:f9:d4:
9f:19:2d:85:32:44:55:63:10:df:18:21:d4:21:ba:
bd:15:37:c2:19:bb:68:09:b3:ca:f6:a5:d8:2e:92:
85:79:24:dc:6d:10:a0:27:06:12:30:3c:0d:2d:6f:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:52:DC:23:C9:ED:DD:68:87:CC:99:75:34:15:71:8F:25:B0:0C
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/oH5S3CPJ7d1oh8yZdTQVcY8lsAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.92.212.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bf:d3:1d:87:d3:51:27:31:75:3e:d9:81:64:fd:49:4a:4d:
6c:4d:7d:62:34:2d:e3:37:fd:34:1a:59:62:6a:60:38:0b:f7:
01:5d:5d:54:d6:01:f3:bf:75:bc:7c:ff:61:f8:27:49:ab:55:
17:54:0c:c7:0e:2b:88:ca:e4:c6:a2:cb:40:8d:80:77:1d:3e:
1b:ad:3d:4e:d1:7a:7c:03:dd:65:5e:a5:35:ce:57:94:eb:88:
7f:53:5e:78:fc:d2:7f:cd:d5:ac:0a:34:89:a0:80:2f:c0:0b:
fa:87:95:f9:e4:f9:8f:69:8e:90:17:63:ac:df:c8:74:22:96:
28:9c:3f:e5:8b:81:05:8e:62:2a:a3:05:21:3b:35:b9:40:e8:
3f:24:1f:03:04:94:f6:ac:cb:d2:d9:1d:64:be:bd:95:bf:9c:
6e:b6:49:d2:ca:8e:31:ed:b4:18:4b:05:cc:35:ea:6c:03:c4:
25:f7:a4:ba:a6:f5:ab:08:9a:0d:e3:62:8c:13:e2:06:e7:c9:
53:98:1c:cb:79:1e:a1:1f:fe:4a:df:49:cd:c4:79:ae:cf:ea:
6f:9e:ba:cf:ec:17:19:66:38:e6:bd:9d:a4:c5:90:32:b9:42:
de:87:83:90:88:fe:4d:5b:e5:aa:05:01:75:e2:95:55:da:31:
6e:25:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:12 2024 by rpki-client on console-fra.rpki-client.org