Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/hiP4lxSURC_qXD4GU2q36QVTQDY.roa
File: hiP4lxSURC_qXD4GU2q36QVTQDY.roa (raw, json)
Hash identifier: 3OK/R/TTnjXep9QYZ/G/JnOGwBq+QSAnFJBSRLUdpm8=
Subject key identifier: 86:23:F8:97:14:94:44:2F:EA:5C:3E:06:53:6A:B7:E9:05:53:40:36
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 018737FD37F9C76857D939ACC652B3F0C94B
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/hiP4lxSURC_qXD4GU2q36QVTQDY.roa
Signing time: Fri 31 Mar 2023 14:05:54 +0000
ROA not before: Fri 31 Mar 2023 14:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 212.127.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:fd:37:f9:c7:68:57:d9:39:ac:c6:52:b3:f0:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Mar 31 14:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8623f8971494442fea5c3e06536ab7e905534036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:25:b3:a0:1d:e2:e3:7b:34:90:b9:d0:30:
fd:b4:9a:50:5f:aa:7b:51:9c:36:d8:1b:78:c7:17:
6c:01:f5:d1:b3:a1:a7:1a:94:cc:f2:35:3a:98:4e:
fc:7c:58:4e:51:ea:87:c5:1e:95:66:d1:2e:53:5d:
36:45:14:90:de:7a:36:53:ee:86:b4:2a:ef:3c:02:
4d:3b:87:51:be:06:df:59:90:b0:7f:3a:23:a1:05:
c0:38:b7:85:5f:59:22:7c:61:13:29:f2:7f:f4:45:
82:b2:d6:7f:49:00:84:ad:64:16:37:27:15:7d:a7:
2a:57:6d:d8:47:fc:05:d2:dd:51:84:74:39:93:53:
e4:97:5e:0d:c6:17:3a:69:eb:47:bf:c2:58:22:4f:
0e:34:8f:1f:5a:15:ff:23:26:37:96:8e:a8:44:24:
11:fe:3e:b2:44:7c:f4:4b:fb:c8:e6:c8:b4:0e:d5:
97:b5:08:0c:c9:46:99:09:d1:7c:21:39:2e:29:7e:
31:3d:59:f9:59:45:02:bd:f8:58:82:be:4b:38:4c:
3f:21:28:01:20:ce:ba:39:d2:28:4c:36:b0:a5:eb:
c6:8e:7c:1e:cd:30:5c:6c:b6:81:13:6e:66:4a:e1:
7c:9c:44:ab:86:18:8f:ee:a9:c1:23:03:1e:c1:bd:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:F8:97:14:94:44:2F:EA:5C:3E:06:53:6A:B7:E9:05:53:40:36
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/hiP4lxSURC_qXD4GU2q36QVTQDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.96.0/19
Signature Algorithm: sha256WithRSAEncryption
35:8d:91:8b:ff:07:6a:6b:fa:6b:6c:7d:e9:4b:88:8c:21:10:
b0:a1:6b:c9:83:8f:c6:03:40:37:15:ef:46:35:9a:6d:73:92:
2f:f8:28:67:1e:46:7a:35:f3:0d:33:0c:a6:71:c2:5a:e4:ff:
1d:9b:f2:49:c7:f7:37:0a:8e:1f:46:34:77:b0:91:64:97:2a:
d6:fc:97:69:84:55:a5:ff:95:69:0c:47:d4:3e:3e:83:6e:98:
6a:28:52:32:3a:ef:35:0a:88:ad:64:05:18:21:b7:25:bb:c1:
01:42:62:5a:fc:0a:88:09:c2:12:27:d8:18:77:7e:6c:c2:88:
97:93:c3:aa:ff:7a:13:93:55:d8:e6:00:a4:89:a2:b0:ab:f1:
b5:91:65:c6:df:59:3d:a6:b9:f6:70:8e:77:78:ab:21:b4:42:
a4:f1:71:c6:f2:3b:4f:c1:73:a3:91:9b:86:33:3b:5d:e2:1b:
9c:ed:12:be:79:dc:9d:69:6c:2b:aa:4f:11:fe:bd:0e:70:6e:
22:8b:e2:ff:0f:fd:ef:02:29:65:35:4f:00:5f:95:17:50:b0:
44:cf:a9:1d:67:bc:66:70:34:a4:c1:fa:03:1a:f5:0a:bd:fd:
46:8c:89:d4:ff:02:73:c5:0e:6a:9c:2d:9a:55:cb:4d:25:1d:
5d:21:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org