Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/G0jKKlt1o2NxTKIXOcJrL5iPIJA.roa
File: G0jKKlt1o2NxTKIXOcJrL5iPIJA.roa (raw, json)
Hash identifier: /JyfXQVRqjlOiPo4O61+1PtjTcBuG9XIhhxjKbHJiSY=
Subject key identifier: 1B:48:CA:2A:5B:75:A3:63:71:4C:A2:17:39:C2:6B:2F:98:8F:20:90
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 018F62EEA04FBF3C93C9612163FADD04C142
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/G0jKKlt1o2NxTKIXOcJrL5iPIJA.roa
Signing time: Fri 10 May 2024 14:35:56 +0000
ROA not before: Fri 10 May 2024 14:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 212.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 18:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:ee:a0:4f:bf:3c:93:c9:61:21:63:fa:dd:04:c1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: May 10 14:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b48ca2a5b75a363714ca21739c26b2f988f2090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:6e:66:a0:3d:02:97:c3:c4:06:40:59:ee:
0e:18:1d:ea:1e:82:09:f5:33:b5:4f:e1:15:47:49:
48:88:37:75:b7:46:e6:40:c9:a2:5f:3a:49:04:a3:
fd:24:24:af:aa:35:13:26:be:a8:81:8c:24:f9:87:
c4:b0:b6:43:09:39:b7:30:9c:03:18:37:ca:3f:4c:
fc:aa:ac:26:dc:0c:bd:a3:3b:53:fc:aa:a9:80:ee:
25:b5:34:ff:4c:e5:b0:e2:f0:b6:cd:95:db:b4:c5:
7f:1c:02:ad:ec:75:6a:e4:0d:4f:c0:0e:cf:d4:8b:
3a:77:e6:b4:37:b3:56:4f:67:d6:02:2d:d2:b6:1c:
cc:cc:be:3c:cb:0c:1b:c2:ad:5e:55:25:87:27:d3:
3d:db:86:c2:9a:d8:dc:ee:0f:3c:59:6f:a1:bd:15:
02:f2:8d:3d:59:0f:bc:b5:6d:d7:c4:20:8c:b7:20:
6d:3d:c7:07:47:35:ca:6a:67:62:74:0f:58:2a:c4:
ae:b8:75:3f:5d:13:fb:22:fc:93:ef:9d:c2:9f:ad:
d8:33:ce:cc:f2:b6:e2:4f:6b:5d:94:21:a1:89:df:
9e:64:87:7b:8e:54:71:27:c0:4e:bf:fd:17:d4:12:
94:96:1a:2e:14:72:17:af:f1:b9:4e:6c:9e:df:11:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:CA:2A:5B:75:A3:63:71:4C:A2:17:39:C2:6B:2F:98:8F:20:90
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/G0jKKlt1o2NxTKIXOcJrL5iPIJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b5:72:88:d2:c4:e4:70:43:ca:d3:78:98:f6:de:61:d0:d3:
00:3c:61:41:fe:59:e6:1c:48:5a:58:19:25:01:2a:27:7f:dc:
45:85:20:8b:d3:c6:4b:34:11:95:55:de:e9:86:af:9a:77:1f:
2e:ad:eb:66:e3:fc:d9:04:e7:e0:13:a9:a1:a9:8e:b9:06:99:
14:2b:92:57:77:b1:d8:55:29:bd:6f:78:72:2a:0b:d8:7c:55:
87:d5:33:5d:e6:bf:20:23:73:e7:11:93:c8:65:35:09:57:3b:
0f:77:41:24:b8:7c:a0:3a:81:0c:60:70:99:55:41:bc:24:22:
d2:d7:eb:d3:3f:5c:80:ef:3f:8e:17:5d:d0:b8:cc:06:bd:42:
69:41:30:fa:41:c8:a5:a8:31:4a:04:cb:3f:60:6f:5a:0c:96:
df:44:66:08:49:9c:e8:25:0a:9d:0f:35:ca:af:1f:0a:a0:b3:
2a:23:d9:18:5e:34:b2:bf:dc:ae:75:71:c5:01:c2:3b:23:9a:
c3:28:46:fb:e4:05:6a:b7:6b:70:b9:eb:3e:f5:35:9b:de:10:
bd:71:49:67:95:9e:8d:cc:ca:c6:3f:18:14:37:92:e3:38:7f:
aa:b9:89:24:07:b1:b1:c0:69:b9:55:66:5d:bc:67:50:41:b4:
1c:90:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 20:01:21 2024 by rpki-client on console-fra.rpki-client.org