Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/3yxULgMVYOYUFv78zH6-icjuiD0.roa
File: 3yxULgMVYOYUFv78zH6-icjuiD0.roa (raw, json)
Hash identifier: g+xc1D1d5h2xQDLV9uq8FyGmVcC/o9PTgfale9EcuKk=
Subject key identifier: DF:2C:54:2E:03:15:60:E6:14:16:FE:FC:CC:7E:BE:89:C8:EE:88:3D
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 018581EA6EEA522F285E8A26DA52420B0462
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/3yxULgMVYOYUFv78zH6-icjuiD0.roa
Signing time: Thu 05 Jan 2023 12:31:42 +0000
ROA not before: Thu 05 Jan 2023 12:31:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197289
IP address blocks: 212.107.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:ea:6e:ea:52:2f:28:5e:8a:26:da:52:42:0b:04:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 5 12:31:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df2c542e031560e61416fefccc7ebe89c8ee883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:db:80:a6:61:ae:b2:80:fa:1c:99:a1:77:
65:3c:3c:d6:22:df:6d:d5:eb:fc:59:4f:1b:30:d2:
06:f7:95:5c:b1:aa:78:ec:ee:f1:6c:0d:0c:b5:ae:
8a:b4:47:65:5d:98:2c:08:fe:0d:15:11:fc:e5:32:
be:22:cf:a5:51:e3:9b:d1:b2:34:a5:33:7b:89:39:
27:7f:13:07:df:a4:f1:57:65:8b:49:03:93:5d:f4:
c6:cf:5d:2b:02:d9:29:0d:a3:5c:cb:3a:75:12:b9:
ed:3e:ad:e9:f0:c2:19:91:c3:38:6e:c7:17:f9:89:
97:fa:fa:23:36:6c:e5:d4:28:55:48:ea:ba:27:a6:
2c:f5:22:9a:5d:0f:0f:98:17:30:9a:49:62:c9:ac:
8c:f7:23:c9:01:fe:a4:3f:e3:b0:db:ca:7c:fd:9f:
41:30:c5:3c:cc:ca:a7:57:89:a3:e6:77:86:bb:92:
b7:bd:e5:85:ec:07:95:0a:e8:e2:42:87:bb:8b:e6:
b1:9e:03:02:32:54:09:5c:65:9d:84:fe:7c:60:1d:
e6:ae:f9:70:df:10:50:3b:7d:a7:d1:78:dd:eb:50:
92:5b:1c:46:47:3c:70:17:10:70:13:32:18:ce:43:
5b:ed:0f:c6:25:10:77:b3:20:bc:4b:dd:27:6f:d5:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:54:2E:03:15:60:E6:14:16:FE:FC:CC:7E:BE:89:C8:EE:88:3D
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/3yxULgMVYOYUFv78zH6-icjuiD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:15:89:4b:87:b8:49:65:4a:d4:12:e9:ef:90:cb:5f:a7:de:
c7:87:05:00:0f:19:d8:66:13:d6:88:1e:39:90:71:0a:68:24:
f3:8e:bc:43:ee:15:ad:11:c7:17:47:44:9f:86:c2:9b:a4:b7:
84:98:95:62:95:a7:43:f9:29:ef:b6:97:30:ba:c2:0c:41:0a:
59:82:19:c5:eb:c6:64:df:33:17:43:d9:8d:c8:cf:92:2e:05:
67:af:22:d3:ad:e5:b1:ff:5f:9a:80:f4:4c:5e:98:2d:e1:44:
6e:fc:cd:c1:cb:4a:9c:ee:55:0f:03:bb:a0:e2:15:60:ab:84:
95:cf:b0:55:33:35:3d:8c:3e:4c:16:7d:74:06:26:44:26:72:
4f:d1:4f:d2:5d:e5:b6:f9:b8:8b:da:5b:02:b7:eb:72:a0:47:
61:58:64:cd:54:b0:b5:2e:c8:19:9b:e1:58:25:6a:cc:12:78:
c5:49:b1:73:90:79:d6:43:79:b0:71:a3:7a:73:f5:de:b2:47:
83:10:69:0a:5d:85:00:6a:cc:b4:a3:48:95:b1:57:cf:32:db:
2e:51:23:7a:c8:1a:13:97:77:b2:ce:ca:6f:50:32:b5:67:91:
b2:37:d5:ec:0a:52:ba:5c:d9:cf:bb:2c:d9:3b:ba:ea:e1:29:
76:20:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org