Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/_JHi2OMLyx7hvrg1VceiuUhMxD8.roa
File: _JHi2OMLyx7hvrg1VceiuUhMxD8.roa (raw, json)
Hash identifier: QC+/RAT5jdPvcIaTlIjx9hX9L2150dhaAPaV1ctQujY=
Subject key identifier: FC:91:E2:D8:E3:0B:CB:1E:E1:BE:B8:35:55:C7:A2:B9:48:4C:C4:3F
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018CAB5C3F1D66807C7C529206381FF9AE1A
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/_JHi2OMLyx7hvrg1VceiuUhMxD8.roa
Signing time: Wed 27 Dec 2023 12:59:58 +0000
ROA not before: Wed 27 Dec 2023 12:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207412
IP address blocks: 212.102.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:5c:3f:1d:66:80:7c:7c:52:92:06:38:1f:f9:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Dec 27 12:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc91e2d8e30bcb1ee1beb83555c7a2b9484cc43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:f4:22:5a:e4:93:20:17:9d:10:e8:74:fa:
cb:09:bd:a8:fc:a6:1a:a8:d3:fd:9a:64:bd:ab:d3:
2f:a6:8f:26:6c:56:27:bf:24:0d:d4:9e:d4:91:b8:
e3:b2:7b:8b:b7:7a:66:0b:e0:26:44:3c:71:0f:d6:
94:a3:d8:5c:75:f9:47:88:98:7e:9e:a3:02:96:c1:
92:ab:f5:0f:6f:d1:f5:28:cd:9e:54:0b:86:21:d2:
5b:6a:27:6d:ce:7d:9d:ec:51:4f:fd:76:32:c1:ff:
e8:87:0a:61:21:6e:e2:64:db:92:a0:b0:08:3e:c6:
99:fc:73:b6:32:50:dd:a5:c5:e1:33:a5:06:1e:82:
eb:d8:4d:40:72:f5:ab:88:dc:40:e8:99:68:d3:c3:
28:4d:84:5f:41:6a:96:b2:91:34:db:23:58:e2:e9:
24:b5:61:4c:1a:55:fd:af:c7:54:9c:5b:ac:d6:0b:
95:8b:ea:33:d8:86:0f:60:5d:52:f8:b6:02:d1:25:
f3:5b:a6:0d:20:a8:0e:91:ca:fd:1f:4e:1d:5f:1b:
56:27:4f:14:1c:4a:04:3b:04:03:03:8a:ff:46:3a:
d7:25:95:64:80:be:de:b8:66:73:22:c6:bb:01:84:
d8:ec:44:5e:23:fa:f0:bf:ea:90:c3:b3:e9:fc:38:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:E2:D8:E3:0B:CB:1E:E1:BE:B8:35:55:C7:A2:B9:48:4C:C4:3F
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/_JHi2OMLyx7hvrg1VceiuUhMxD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.111.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0a:e0:84:80:85:4e:2d:65:45:7f:ff:7a:2e:bc:88:b0:f5:
f2:c4:1c:28:8c:87:4f:d4:4e:5a:0b:7a:85:b0:7e:de:eb:88:
4f:3d:b7:0b:19:74:dd:27:c5:1f:6e:06:c0:a2:9b:25:be:d9:
42:57:0b:e9:ea:6c:c7:b0:62:a1:78:44:1d:f5:32:85:e3:bb:
16:a3:cf:08:ea:68:09:51:26:88:e0:18:96:4d:94:15:ed:c7:
94:f6:6d:5b:09:bb:63:28:95:f3:ad:5d:92:55:1b:7f:ac:88:
19:c3:24:7b:49:c5:c9:0e:09:49:f0:38:46:b2:34:a0:67:32:
32:21:2e:1e:9f:59:1f:98:61:1d:a6:56:4a:d8:34:aa:77:2b:
82:2b:05:65:ca:b3:96:5f:cb:e8:7f:29:92:c1:79:e4:73:7a:
cb:24:35:26:40:2a:f5:c2:3e:32:3e:3d:01:43:a9:04:57:b0:
f9:8d:bf:14:8c:b6:09:8e:9c:aa:cb:17:29:85:84:3b:52:51:
48:e7:c1:2e:4e:8a:ec:80:65:0f:eb:33:88:fc:5a:4d:aa:fc:
71:6c:8c:f1:b1:50:86:68:72:34:96:63:02:79:2c:a0:a1:6c:
c1:25:22:a5:72:3a:28:a1:cf:9b:78:4a:e4:e7:e4:2f:c9:4e:
aa:87:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org