Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/ik8LoK09pXQ415dTpRFfxc5T15w.roa
File: ik8LoK09pXQ415dTpRFfxc5T15w.roa (raw, json)
Hash identifier: 2hLT64SsX0B/yba6TpMTn1falD9vzXfndDei4CJV2pg=
Subject key identifier: 8A:4F:0B:A0:AD:3D:A5:74:38:D7:97:53:A5:11:5F:C5:CE:53:D7:9C
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 018F8FC2E0F50F3070FA683C294D128C3CC4
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/ik8LoK09pXQ415dTpRFfxc5T15w.roa
Signing time: Sun 19 May 2024 07:31:04 +0000
ROA not before: Sun 19 May 2024 07:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 212.12.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 07:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:c2:e0:f5:0f:30:70:fa:68:3c:29:4d:12:8c:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: May 19 07:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a4f0ba0ad3da57438d79753a5115fc5ce53d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:b9:3e:5c:dc:fd:0a:a9:2b:0d:92:28:8d:
bc:23:29:19:eb:df:c5:62:40:1f:59:97:16:e7:44:
10:94:37:99:a6:bd:fb:21:55:8b:aa:c5:3c:fd:8f:
f2:07:8d:98:48:68:68:09:85:f9:8b:6a:a4:36:50:
c2:1f:6e:4e:5d:46:54:12:af:50:83:51:bd:9e:93:
73:71:aa:4e:47:75:d4:b7:f0:db:23:a5:62:b1:59:
b5:d5:78:4d:06:fb:33:ca:a8:30:3c:78:6c:3b:fd:
71:40:7e:c9:12:27:79:17:f7:14:de:96:b5:9d:46:
39:b8:6d:8d:ab:65:57:bf:e3:28:11:04:b1:fe:f9:
2c:1b:5c:d8:6f:d8:0b:3e:1c:99:a4:54:50:12:1b:
66:b6:7f:94:0b:ea:f4:74:fc:2f:ac:5a:0c:e6:d4:
a6:b5:2a:f0:c2:a8:b6:88:91:e1:e6:f6:23:93:78:
e7:4e:71:28:b2:81:e7:7a:c1:52:09:74:71:01:b6:
e5:77:b5:67:9d:a6:87:84:7f:9b:b1:9d:0c:83:37:
9d:7e:6d:7d:aa:53:b8:37:86:67:80:60:82:4c:3b:
28:92:b0:e6:b0:ef:63:5d:7d:22:66:58:51:7d:86:
cb:da:72:7f:18:74:ef:af:18:37:64:81:c4:2f:ad:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:0B:A0:AD:3D:A5:74:38:D7:97:53:A5:11:5F:C5:CE:53:D7:9C
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/ik8LoK09pXQ415dTpRFfxc5T15w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.12.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1e:c7:eb:a7:3d:ab:24:5c:34:1c:84:29:f4:2f:35:6f:9b:
a8:fe:92:eb:a7:ac:93:5f:62:26:6a:e8:31:f9:c2:59:a3:a3:
c1:e0:06:8f:4b:60:bd:4a:f9:4e:98:7d:1c:61:cc:bb:52:30:
54:8c:3b:71:7b:c6:04:b4:39:6d:f6:1d:99:2d:5f:af:2c:6f:
e6:96:7d:b7:85:85:bf:97:fe:37:2f:d0:cc:0f:e0:a3:66:e0:
02:ad:17:8b:1b:95:09:8d:e3:6c:10:09:b4:3c:9b:8f:ca:49:
5d:31:86:c1:7d:2b:71:e0:50:6d:16:58:6a:1b:00:75:32:ca:
38:5d:af:b2:5b:61:5d:0b:a9:aa:51:b7:c9:b6:45:bc:39:53:
c7:30:40:4a:51:ea:b9:81:89:52:39:b1:4e:13:8f:61:55:51:
7d:e3:f7:15:49:fc:d4:69:9a:7d:d9:08:b4:de:58:a4:2e:62:
de:78:78:d1:ee:c3:9b:c9:69:ac:64:96:c5:cb:a8:64:a4:07:
79:63:5f:9a:1e:f2:09:7a:fd:8e:31:14:0b:db:2f:4f:cf:68:
38:f5:96:5f:17:86:14:9d:e8:5d:60:48:8b:b7:d1:c2:ae:a8:
59:a4:61:52:97:a6:27:7a:3d:3e:71:ba:8c:e7:aa:b1:46:25:
d8:d6:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:55:57 2024 by rpki-client on console-fra.rpki-client.org