Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/80IxoaHZkp7Hp01GoBlSPozYe00.roa
File: 80IxoaHZkp7Hp01GoBlSPozYe00.roa (raw, json)
Hash identifier: rRUbMdp5sEj5YYBdIexnLox7w5kEDFffQ8+VWCbJgxI=
Subject key identifier: F3:42:31:A1:A1:D9:92:9E:C7:A7:4D:46:A0:19:52:3E:8C:D8:7B:4D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785A03C5CFC10D233E7D77E0D4E1EE
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/80IxoaHZkp7Hp01GoBlSPozYe00.roa
Signing time: Sun 01 Jan 2023 08:35:04 +0000
ROA not before: Sun 01 Jan 2023 08:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 03:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5a:03:c5:cf:c1:0d:23:3e:7d:77:e0:d4:e1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f34231a1a1d9929ec7a74d46a019523e8cd87b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:ad:69:f4:c6:45:77:5d:e7:ec:c4:99:db:
f5:0d:7f:46:3d:7f:25:33:17:05:da:61:45:34:54:
93:e0:06:9b:9f:b1:d6:5c:c4:f3:e9:3a:0f:1f:1d:
28:91:ec:af:47:61:06:d5:85:55:21:58:34:ab:2f:
b4:92:ae:24:7a:c9:6a:bb:fe:02:7d:d8:8b:f3:c3:
35:c2:4e:a4:85:69:d2:eb:6e:2e:b9:12:26:dc:17:
70:7a:f6:7b:89:dd:86:c4:45:a5:23:09:c7:f1:3c:
4b:62:84:27:b3:ed:8c:9d:82:43:66:6d:e1:a5:be:
4f:86:37:fd:f1:c9:44:23:92:e9:0d:d5:0b:9a:40:
22:2e:c4:d0:a7:a9:ae:e8:d6:46:9a:29:39:28:24:
72:6d:89:46:3a:02:6f:e0:74:eb:e4:2e:ba:69:d7:
7a:3e:c2:17:59:c6:73:4d:31:68:b3:20:bd:cd:d7:
6d:18:3f:a4:cc:bb:82:fa:12:f1:ed:13:7b:bd:04:
50:58:5a:56:76:e4:48:bb:14:1d:ff:10:8b:78:0a:
7a:cd:eb:d2:5f:9d:22:e9:1a:27:44:1e:9a:a0:5e:
47:9c:42:bb:97:34:39:c9:10:93:90:d8:78:ee:ca:
e6:66:79:af:7f:d1:e3:72:a4:1f:ab:c1:d9:29:28:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:42:31:A1:A1:D9:92:9E:C7:A7:4D:46:A0:19:52:3E:8C:D8:7B:4D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/80IxoaHZkp7Hp01GoBlSPozYe00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:24:e2:58:c8:9a:5e:3a:4d:37:69:66:1b:bf:d3:31:fb:49:
59:1c:64:e0:71:f5:a0:4d:ff:93:0e:09:3a:29:0f:ed:55:05:
1a:5b:23:af:a5:89:bf:db:9d:b9:a9:bd:d5:96:00:82:c6:e3:
3d:04:34:b0:50:75:6a:c5:8e:a4:e3:40:33:1e:21:be:80:59:
98:d7:72:42:16:ff:84:32:3b:79:0a:cf:4d:a8:0b:96:cb:ee:
ea:60:77:42:f5:c4:fe:69:50:7d:fd:2a:df:76:dc:7d:ce:98:
29:87:0e:05:3a:c6:60:62:3e:a7:f7:0c:8e:cd:a5:72:f8:3d:
70:88:e4:d7:36:a3:88:36:16:fd:fc:b5:50:78:4b:e0:a5:92:
48:fa:49:d9:3a:f9:f2:ac:29:92:d6:6f:89:bf:64:a4:c7:54:
03:ca:66:0e:f1:5a:28:f4:00:4d:34:eb:50:ab:39:9d:55:d3:
cc:69:5d:f9:f2:fa:4f:78:57:54:d6:78:02:30:92:60:47:94:
87:be:af:44:47:58:fd:07:a1:1e:45:ce:80:fd:a4:af:89:8d:
89:4a:5e:5b:ed:5f:7a:66:fe:b4:53:fd:91:d1:b8:a4:4e:0a:
0e:c4:a2:f7:6c:73:1f:4b:fa:3d:3e:9f:69:b1:73:b4:df:65:
e7:e0:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org