Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ddYxGQinCohFvwfDUygVkO-bY7A.roa
File: ddYxGQinCohFvwfDUygVkO-bY7A.roa (raw, json)
Hash identifier: 8z64iX4/RcJGTUJFyxSCi1XOFVaZgEWB5AYnrnRYGHw=
Subject key identifier: 75:D6:31:19:08:A7:0A:88:45:BF:07:C3:53:28:15:90:EF:9B:63:B0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E89D7D528E5CE2926E852E096B17009D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ddYxGQinCohFvwfDUygVkO-bY7A.roa
Signing time: Wed 25 Jan 2023 11:08:33 +0000
ROA not before: Wed 25 Jan 2023 11:08:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212097
IP address blocks: 212.115.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:9d:7d:52:8e:5c:e2:92:6e:85:2e:09:6b:17:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:08:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75d6311908a70a8845bf07c353281590ef9b63b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:11:46:ee:8e:32:91:5e:51:0d:ea:93:69:
a3:62:f2:5e:5a:db:e8:09:84:58:fe:1f:ed:1c:16:
ac:53:ec:7c:1e:b9:1e:61:6a:64:1a:ed:36:7d:1a:
9f:15:48:03:7c:b0:2a:90:2c:40:e0:7d:66:47:9a:
b8:25:de:f2:3e:69:36:d1:21:4a:37:98:c8:d2:b8:
72:e1:65:70:81:7b:e5:b4:f8:77:dc:32:2b:aa:dc:
b7:7b:10:91:3a:c6:0f:09:b0:07:b4:59:ba:3b:35:
88:c0:fe:2b:1a:2f:41:c4:4c:5e:1f:20:d3:a6:b4:
46:77:5c:5e:fe:02:be:d0:ab:2a:9f:4f:f6:2e:6e:
36:3b:12:6b:e4:cf:b2:77:51:c6:9a:cb:97:7d:c3:
ba:ff:c0:a3:d6:fc:09:c0:08:9a:69:dd:72:83:c2:
6e:bb:06:e5:a8:f3:ff:b1:54:6c:74:e7:3d:f4:f3:
05:44:fd:12:dd:67:b4:6a:78:29:db:41:bf:8b:ef:
44:99:51:48:35:6c:75:33:57:1b:6b:cd:2a:2f:d5:
ba:6c:2d:0b:4f:fb:40:7f:4d:47:5d:fc:68:9f:cf:
2f:b6:51:18:c4:25:00:47:d2:b1:cb:8d:51:f9:95:
15:83:ff:74:aa:c5:18:43:b4:63:f1:ac:23:df:6e:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D6:31:19:08:A7:0A:88:45:BF:07:C3:53:28:15:90:EF:9B:63:B0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ddYxGQinCohFvwfDUygVkO-bY7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.130.0/24
Signature Algorithm: sha256WithRSAEncryption
85:56:2a:63:9a:03:82:19:6e:17:93:39:36:00:a5:f2:39:a5:
15:ad:8f:72:da:90:d2:30:7a:a6:83:e7:20:48:fa:a1:89:34:
1b:d8:64:c7:4f:a4:b0:d8:b4:29:db:7d:d4:c3:d5:03:80:2d:
87:1b:a9:ec:29:cb:fb:8d:0b:09:52:01:95:aa:62:f1:f1:fd:
29:33:f0:fb:e7:af:ae:41:0e:78:d4:0a:a9:c4:56:ea:f3:fb:
8c:27:4b:1f:15:37:88:9a:ae:79:7a:e0:11:c1:bd:18:91:f5:
5c:4a:09:7f:fe:86:c8:5c:a9:1a:2d:94:02:af:b9:00:ec:90:
1e:fc:b9:15:ce:c2:0b:8c:87:76:c3:8f:99:d4:4d:7e:51:25:
6a:b8:5c:3e:40:72:d3:25:e4:d8:53:7d:60:19:1b:b7:6c:c5:
69:7c:20:b7:74:32:73:4d:9b:f6:04:01:c7:91:a5:d9:c9:81:
14:28:8e:07:05:11:c1:12:22:cc:d3:0e:73:33:05:c1:4d:3b:
d4:4b:af:e7:eb:14:f0:e2:35:da:e9:7c:67:b2:88:96:f6:72:
dc:03:f3:eb:88:f6:38:c0:99:56:a9:a8:c7:e8:15:32:5a:81:
b0:9d:1c:be:40:a1:de:98:29:bc:45:89:a4:db:bc:87:e9:08:
b9:ec:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:38 2024 by rpki-client on console-ams.rpki-client.org