Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/BkQsMSVlDCR3iyk7SDLGExwoL2s.roa
File: BkQsMSVlDCR3iyk7SDLGExwoL2s.roa (raw, json)
Hash identifier: 82a0YYs1AWEAZMbCLgwrnwa1OG/YzxG+MyY+fyftGDQ=
Subject key identifier: 06:44:2C:31:25:65:0C:24:77:8B:29:3B:48:32:C6:13:1C:28:2F:6B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BD3BA839B365F9FE13198FF23AACB5041
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/BkQsMSVlDCR3iyk7SDLGExwoL2s.roa
Signing time: Wed 15 Nov 2023 16:04:57 +0000
ROA not before: Wed 15 Nov 2023 16:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 212.115.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 01:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:ba:83:9b:36:5f:9f:e1:31:98:ff:23:aa:cb:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 15 16:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06442c3125650c24778b293b4832c6131c282f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:78:a6:5e:35:12:4f:7b:88:d6:0f:89:1f:
d6:1a:d4:ea:e7:1e:fc:56:a8:b1:07:d2:47:7f:07:
ac:27:00:71:4c:c2:17:f8:fc:01:fc:d9:1f:9f:67:
80:4b:4d:2e:7c:73:1d:90:eb:a4:a9:11:eb:3b:5e:
3e:38:b6:02:f6:05:ce:d6:9b:98:08:ee:6b:e7:81:
50:01:3c:f7:ef:f0:da:e0:1d:2b:24:72:9b:5a:78:
2d:1b:1e:4b:95:94:a6:6e:2b:a0:d9:4e:b5:a9:71:
71:49:48:07:85:45:4a:32:68:4d:1b:06:60:e3:c4:
94:95:fa:ea:3b:70:dc:d3:ef:77:3e:18:0b:fc:ce:
09:eb:8c:c3:5f:1c:ad:fc:de:8f:c7:26:db:f1:69:
70:cc:2d:3a:d3:91:b8:8a:1b:ae:9b:a0:e5:70:58:
9b:cb:78:b5:8a:b3:b9:22:97:ba:28:8b:3f:8b:fc:
bf:19:ec:70:fe:11:57:e3:6a:df:d6:57:09:c5:f9:
ec:7d:b5:52:57:cc:17:14:53:35:13:7b:41:7a:58:
b6:a3:a1:86:e9:20:28:67:ce:70:09:8c:ea:ad:85:
8b:97:65:6a:76:ef:3f:f4:c6:e7:ae:42:66:8a:b2:
8e:fc:91:e2:09:10:f7:ea:8d:5d:fb:21:46:c8:38:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:2C:31:25:65:0C:24:77:8B:29:3B:48:32:C6:13:1C:28:2F:6B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/BkQsMSVlDCR3iyk7SDLGExwoL2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:05:96:34:12:8e:5f:4f:87:58:8c:90:64:5b:b5:ba:06:9e:
92:55:d1:aa:44:00:40:26:91:20:e2:d0:0f:0e:02:08:c9:3d:
2f:9e:a0:23:06:a1:8b:94:da:6f:d4:35:42:83:c7:4c:fd:9c:
90:0c:e4:d3:63:e8:76:f3:9a:79:5b:83:23:c5:70:6c:45:0d:
79:20:d3:1b:60:f1:fa:92:f6:1a:4d:46:e5:61:7f:d3:ca:92:
fd:c1:c9:23:c5:3f:86:c2:7a:d2:bd:10:3e:d8:db:92:dd:b2:
f6:50:c5:dd:6f:f4:36:6e:8f:0a:33:cc:ea:a3:f4:5f:40:f9:
fc:79:d8:7b:fa:16:64:ee:ab:2d:6d:fa:65:f9:62:ff:97:4e:
d4:bb:f5:ac:2b:82:27:c8:7a:d5:41:dd:f3:7f:61:0d:7d:01:
d4:fb:2b:b0:2d:d2:5e:67:85:7d:b7:38:d7:94:9b:45:5e:91:
50:a0:04:57:98:82:a6:c6:0b:27:ac:58:1b:a5:f4:56:3a:e6:
76:a3:f5:48:95:6f:a7:0b:4e:4d:c3:e6:cf:71:89:c9:e0:e9:
1e:fe:77:1a:5c:81:19:ad:55:0b:98:9d:a6:ee:fe:fc:0b:08:
20:54:c8:db:06:83:68:c8:12:08:2b:9e:46:fe:6e:2d:8a:e0:
ba:bc:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org