Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/gO6qcDjjVqBZyXecHSSS392X8OQ.roa
File: gO6qcDjjVqBZyXecHSSS392X8OQ.roa (raw, json)
Hash identifier: F+XSsNabXvYNrJkTxuUNcMoFfokqIJBsNkgP4/OTYoU=
Subject key identifier: 80:EE:AA:70:38:E3:56:A0:59:C9:77:9C:1D:24:92:DF:DD:97:F0:E4
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 018A06E4FDC64F1A108F2E17D08CFC3A58E7
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/gO6qcDjjVqBZyXecHSSS392X8OQ.roa
Signing time: Fri 18 Aug 2023 04:26:24 +0000
ROA not before: Fri 18 Aug 2023 04:26:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 212.102.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 21:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:06:e4:fd:c6:4f:1a:10:8f:2e:17:d0:8c:fc:3a:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Aug 18 04:26:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80eeaa7038e356a059c9779c1d2492dfdd97f0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:d9:78:d8:23:88:1d:d5:58:c0:7e:83:83:
26:a4:ef:47:c0:13:ec:df:d9:c5:07:bd:03:fd:a0:
9f:84:5d:12:c2:ad:9b:52:c1:00:f1:4a:03:07:91:
d4:73:ed:ce:4d:4c:e4:2e:b0:87:c0:61:e3:39:f2:
78:62:bc:b5:6d:6c:06:fe:a5:0e:69:a3:3a:c3:d4:
6a:67:a3:64:b3:25:8c:2d:6a:c0:24:11:c8:9b:d5:
09:c1:7f:d9:58:ce:d7:f3:c9:b7:4c:c5:8c:d3:a5:
2b:2d:cd:42:bd:45:54:5e:ec:73:5b:f9:71:4e:5b:
0b:dc:56:11:13:2f:49:79:1d:14:49:6f:ab:7d:40:
d6:04:d7:55:67:fc:53:22:2d:8a:d5:0b:47:09:0c:
45:af:30:57:b9:40:31:bc:11:d5:1c:f5:88:dc:4f:
d4:4d:28:90:51:da:86:28:ae:a0:e9:31:2c:d1:6d:
af:a2:81:a6:a9:7d:25:4d:b4:ee:0c:c4:16:a8:8e:
22:a7:d1:55:57:50:e8:24:a4:5f:4e:43:4c:5f:9f:
8a:c4:de:f0:07:08:6a:ff:e9:3a:c2:0e:4a:43:fc:
14:87:24:0e:0f:3e:9b:0c:83:fc:c2:88:18:d5:c5:
9f:5b:4e:ae:13:d9:3f:2a:64:b8:3b:32:21:b4:46:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:AA:70:38:E3:56:A0:59:C9:77:9C:1D:24:92:DF:DD:97:F0:E4
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/gO6qcDjjVqBZyXecHSSS392X8OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:df:d7:5c:b1:39:3c:84:b3:9b:de:52:d6:97:4b:0e:7b:af:
38:c5:a6:7f:2e:80:32:96:c4:f3:82:29:12:ff:1a:88:77:e9:
0a:30:31:de:7f:18:cf:f4:09:31:a7:e2:b3:c2:f5:fe:32:69:
e6:de:11:6c:41:ed:72:28:c1:54:b0:59:d5:a4:1d:79:5a:ac:
17:c3:a0:85:93:b6:19:0c:af:30:99:23:a2:82:91:bd:7a:e8:
cc:a5:91:9c:fe:76:25:19:9f:66:13:b0:99:d5:c8:13:eb:48:
87:7d:42:04:6f:2d:54:ba:ec:fa:5e:97:fe:37:9b:fd:a3:25:
9e:d4:d1:3f:f3:17:00:9b:d0:81:07:85:22:33:16:1e:b4:f1:
87:92:a4:2e:f5:71:e0:76:6f:c2:83:7f:70:1f:66:6d:bf:80:
ae:7f:ef:f8:49:98:7c:b3:41:ee:9a:2f:1c:bb:f4:c2:f8:c9:
b1:5c:4b:49:e2:55:74:da:c2:73:e4:9a:87:e1:7b:75:3f:05:
07:4e:c0:d5:de:e5:40:42:a5:ed:30:0f:0c:b6:8f:6f:21:4d:
72:af:be:d3:e9:bd:37:80:42:0a:7b:f1:84:24:4d:28:b5:9e:
be:89:51:bb:70:9b:30:54:b8:bb:40:0d:db:b9:b4:08:a1:ef:
24:70:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org