Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/bt18Z5Doqy9h416sB8ybxUna29E.roa
File: bt18Z5Doqy9h416sB8ybxUna29E.roa (raw, json)
Hash identifier: nuM6hssGj4VWxckUAnuCCjsq0gaPkO0B7P6wM1iN3oU=
Subject key identifier: 6E:DD:7C:67:90:E8:AB:2F:61:E3:5E:AC:07:CC:9B:C5:49:DA:DB:D1
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01857079B06921278B8968F1AD7FAF77E616
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/bt18Z5Doqy9h416sB8ybxUna29E.roa
Signing time: Mon 02 Jan 2023 03:15:01 +0000
ROA not before: Mon 02 Jan 2023 03:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8468
IP address blocks: 212.124.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b0:69:21:27:8b:89:68:f1:ad:7f:af:77:e6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 03:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6edd7c6790e8ab2f61e35eac07cc9bc549dadbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:98:23:0f:57:87:8f:03:ff:0e:21:b8:c4:
88:9e:9b:55:56:57:e5:d1:2b:54:b4:ab:68:e9:29:
4f:07:53:51:6a:8c:1f:0a:f4:f1:47:80:af:ba:e7:
df:a6:b9:cc:9a:cb:a6:80:21:14:9b:42:18:53:d3:
7c:22:3b:11:22:29:6f:df:56:1c:fe:ef:62:23:3d:
3e:55:c8:10:93:ea:ff:c6:05:f4:86:6a:c3:8e:b9:
a3:1c:06:80:a6:e5:f1:35:cf:38:c4:2d:36:7c:d2:
dc:4e:03:fc:8f:63:96:75:44:c0:15:42:3c:d0:a5:
7e:fb:aa:4a:2d:8f:18:f7:77:ba:03:f7:ce:fc:6b:
5e:16:f0:6a:43:04:4e:b9:47:f9:7c:a1:f1:f6:c6:
b6:c1:aa:7b:56:01:fc:17:8c:ae:70:b4:f3:cc:a8:
13:c2:f8:9f:9f:47:a7:43:a9:23:9f:ac:24:95:1e:
c7:eb:6b:a5:52:b2:b7:9f:12:b2:34:96:b8:05:29:
1e:f8:c8:ca:37:f0:ba:18:22:19:07:e3:9b:c1:be:
48:01:19:f1:f4:ac:2b:1e:9b:d2:60:ac:72:fb:bc:
a8:07:1a:07:dc:4e:82:2d:a4:fb:26:94:8a:45:dd:
48:38:d8:d8:a7:89:dc:38:62:b3:6d:23:b7:c6:98:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:7C:67:90:E8:AB:2F:61:E3:5E:AC:07:CC:9B:C5:49:DA:DB:D1
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/bt18Z5Doqy9h416sB8ybxUna29E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.199.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d7:3e:d3:48:89:68:0c:68:8d:24:a4:22:1a:92:15:78:5e:
47:d9:c3:59:4d:44:04:f7:27:f6:2a:9b:be:02:72:af:1a:dd:
c4:28:54:82:a4:c2:b5:9f:a0:c1:3c:07:ce:42:2c:ec:69:99:
1d:4d:8a:12:1f:88:93:a5:3f:b8:8c:1d:cb:86:f5:1f:ad:2f:
04:81:0e:94:a7:6c:a5:30:78:aa:0b:69:72:68:da:cc:c7:b8:
08:32:ef:c8:05:58:22:00:fd:03:19:a4:7a:dd:b4:c1:24:35:
2c:0b:38:2e:77:e6:89:d0:84:86:d1:c0:4d:30:9e:cf:14:21:
04:74:b0:aa:30:44:25:d0:51:f1:02:aa:e9:0c:20:0e:d8:9b:
d5:06:dd:1e:3c:73:02:a6:d2:3c:1e:c0:9d:3f:5e:a9:d8:91:
2a:35:aa:e1:48:e1:40:ee:bd:9e:6f:71:ff:20:3a:3d:41:d8:
01:52:9a:65:8c:30:23:91:9b:11:c1:2e:39:03:22:89:d7:ca:
7a:a4:59:e7:00:45:62:52:ab:58:7c:2b:c4:e6:50:f8:63:55:
8a:9f:50:ee:71:13:80:24:84:d4:65:b0:76:6d:ce:1e:e0:72:
40:56:54:83:c2:1e:52:8b:1d:ae:e4:f8:b3:9c:e7:05:eb:b6:
e8:71:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:10 2024 by rpki-client on console-ams.rpki-client.org