Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0ACfsk_WyT_dzvpqZm1xj80E4Rg.roa
File: 0ACfsk_WyT_dzvpqZm1xj80E4Rg.roa (raw, json)
Hash identifier: lFWGohX+8Zc/SXHc46rQghfF62Ae5DxlA0DnLvVqSgE=
Subject key identifier: D0:00:9F:B2:4F:D6:C9:3F:DD:CE:FA:6A:66:6D:71:8F:CD:04:E1:18
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BBD68B2A76A015A9DA9738B6A5C6DE89F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0ACfsk_WyT_dzvpqZm1xj80E4Rg.roa
Signing time: Sat 11 Nov 2023 08:03:57 +0000
ROA not before: Sat 11 Nov 2023 08:03:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 212.115.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 16:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:68:b2:a7:6a:01:5a:9d:a9:73:8b:6a:5c:6d:e8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 11 08:03:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0009fb24fd6c93fddcefa6a666d718fcd04e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:95:28:7e:ea:1a:70:b9:10:53:3b:46:94:
be:9d:d8:13:7e:91:85:52:26:95:05:ea:f7:f1:b0:
37:83:1d:d8:59:30:3e:26:b3:28:34:a7:42:f6:b5:
cd:79:0f:b7:37:f7:a0:1b:cf:44:73:01:e8:af:24:
bd:1d:05:7d:02:46:35:3d:1b:52:ac:c6:a1:8b:89:
cf:71:14:87:86:2a:2f:29:9b:8d:6e:b8:ba:2b:90:
04:f3:10:06:d6:52:95:20:05:b4:4c:50:9a:cc:60:
5b:94:41:0e:36:44:be:87:34:a2:2e:d4:9f:dd:a5:
cd:8d:ec:98:fa:4f:a9:79:db:48:f9:7f:ac:e3:06:
80:52:63:2b:71:8a:7a:72:de:00:09:b4:de:33:fa:
83:79:a5:87:61:56:d2:2a:2a:aa:41:22:0d:f9:9d:
07:07:92:10:11:44:b9:c9:58:3c:cc:52:e7:82:5a:
cb:46:4b:64:c7:73:ac:c8:ef:39:c3:54:89:b2:e9:
b7:49:94:15:3b:0f:6b:59:ea:3b:80:2f:9c:74:d9:
51:05:ff:cd:be:31:94:95:1d:b8:bb:1e:c5:22:6e:
d6:ea:a7:38:4f:c5:6e:94:df:a0:e0:08:a0:b6:6b:
56:a1:b8:42:0d:ec:f2:39:67:7d:ea:d2:e0:d9:db:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:9F:B2:4F:D6:C9:3F:DD:CE:FA:6A:66:6D:71:8F:CD:04:E1:18
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0ACfsk_WyT_dzvpqZm1xj80E4Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/24
Signature Algorithm: sha256WithRSAEncryption
af:20:63:d7:50:2c:d2:ca:97:1f:2f:73:52:95:00:53:84:30:
96:ad:64:c1:89:cd:c5:60:57:fd:27:08:b1:44:a3:77:90:1e:
c8:8e:c6:40:95:27:f7:29:c7:bc:42:b5:a9:0f:b0:3a:52:6a:
4a:0a:a9:4b:04:05:7d:47:66:9c:48:71:79:b5:1e:45:38:53:
9e:73:52:6f:58:7d:ef:eb:6b:92:55:a4:78:49:17:f4:e6:f4:
f0:8f:fb:df:45:29:b1:2b:7c:ea:a9:69:9c:35:97:57:05:e4:
19:b5:35:ed:ad:c9:ac:91:fe:e3:c0:d2:c3:af:a9:11:b2:20:
71:ae:f6:45:93:e4:00:6a:bf:1a:8d:32:90:96:74:b3:b8:bd:
90:2b:c4:8d:91:1e:23:d8:55:bb:5a:c0:39:5c:af:a2:3a:cf:
29:d4:eb:68:fc:93:8f:eb:7c:de:ab:06:ef:06:33:8e:43:ff:
2a:26:4b:aa:28:20:f1:37:d3:ba:19:a8:4c:26:22:fb:27:26:
41:dd:27:9b:cc:ad:89:34:c2:c6:01:24:9c:00:75:b0:4f:45:
b0:98:98:4c:f7:3f:3a:c9:02:49:27:c7:20:9e:0e:db:a2:ad:
cf:5d:8a:7a:ea:12:58:55:a2:b6:db:e8:89:2c:71:d3:73:39:
43:3b:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org