Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/PmJ7NcR3SkD97WH_-M4ca7W3AUs.roa
File: PmJ7NcR3SkD97WH_-M4ca7W3AUs.roa (raw, json)
Hash identifier: 178Eo8my8ITHaZYlouIjhB3ev+YQTq/gRMHKpUYC0kE=
Subject key identifier: 3E:62:7B:35:C4:77:4A:40:FD:ED:61:FF:F8:CE:1C:6B:B5:B7:01:4B
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01856F5DCE3DEA724F5578D13D047A769293
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/PmJ7NcR3SkD97WH_-M4ca7W3AUs.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48806
IP address blocks: 212.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ce:3d:ea:72:4f:55:78:d1:3d:04:7a:76:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e627b35c4774a40fded61fff8ce1c6bb5b7014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:a3:12:d4:e7:2b:2d:ee:7e:13:bb:a7:b2:
08:23:7f:94:27:12:eb:b6:6d:3d:d1:b7:70:32:6b:
d1:72:35:7f:87:24:35:49:49:91:ba:b1:9f:80:4c:
00:f8:b7:13:ab:76:2b:e6:07:56:2c:b2:a4:8f:86:
0a:80:5a:70:52:9a:4b:1b:eb:9c:ee:dc:5b:ce:ae:
df:5f:73:2d:21:32:71:c5:48:22:74:66:1a:22:40:
93:c6:c7:17:da:a5:99:d8:b9:58:cd:36:32:4b:df:
f4:35:67:e2:4b:e8:94:93:7d:5b:b9:3d:ff:d3:eb:
1e:a0:e9:fa:91:c1:56:7f:4e:d6:8a:78:26:47:b2:
af:c3:d8:c8:67:82:99:38:a2:e8:70:9e:d4:ee:50:
b2:7a:37:bc:15:84:57:2f:09:55:dc:e1:12:37:9b:
0d:59:ef:1b:d9:76:cc:ca:65:22:d2:87:8a:5a:3a:
a0:ed:bc:6c:15:fe:fb:09:f4:9d:55:9c:17:8d:d7:
e1:9c:e3:a0:af:f3:ee:c9:0e:cb:95:04:b8:57:3e:
86:26:3e:fe:6f:6a:3e:57:a4:b2:e9:14:97:8a:e9:
90:3a:d1:40:70:48:8b:dc:bc:d0:a5:26:bf:65:c0:
90:eb:14:95:a3:02:a4:ba:a6:2b:85:05:e8:a9:f5:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:62:7B:35:C4:77:4A:40:FD:ED:61:FF:F8:CE:1C:6B:B5:B7:01:4B
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/PmJ7NcR3SkD97WH_-M4ca7W3AUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6c:bd:28:aa:e4:22:d7:0f:fd:54:aa:8e:90:08:63:56:21:
ed:63:0f:57:bc:d9:c1:7d:27:0f:4c:74:16:bf:51:f2:06:e5:
00:06:50:9f:c5:47:7d:66:dd:80:49:ae:90:86:b6:00:02:a2:
5f:e6:a3:52:0c:10:24:c0:f5:f8:09:ea:9f:95:81:dd:b8:12:
ef:d8:ec:8b:c0:76:2d:ce:c7:41:c5:2c:fb:7c:15:c3:9f:a2:
c4:84:3e:7d:aa:51:c6:6e:36:f8:04:78:1d:8e:e0:11:55:be:
97:c6:25:d6:96:52:c0:51:f4:47:77:a0:ac:ea:35:dd:cc:72:
c0:8d:18:fa:64:74:71:27:c5:d4:d7:25:90:62:76:84:6a:09:
ea:ff:d9:d7:eb:c7:d9:a0:f9:83:e2:89:fe:60:8f:7f:15:23:
63:be:ef:fc:2a:d4:a6:b8:cf:15:2f:94:b2:cf:f8:1e:19:a3:
3e:a5:33:9a:b3:ef:e8:f6:05:ff:7d:f0:f3:68:69:4a:9b:55:
79:92:d4:86:ba:e1:06:e0:45:57:0a:14:18:19:e8:44:60:0c:
43:ad:f5:79:6b:fe:a6:89:0f:e2:cc:03:ba:0b:8b:e0:f8:61:
8d:4e:d9:40:94:d9:79:4e:ea:ad:9d:91:e6:4b:9b:59:88:61:
34:be:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org