Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/RlTgetcfrkp8kOWN0FYeGm0hyoI.roa
File: RlTgetcfrkp8kOWN0FYeGm0hyoI.roa (raw, json)
Hash identifier: o8j2G8lfnkOP8mtYn50Ok3rYlB6zavOO5EalDp42I8M=
Subject key identifier: 46:54:E0:7A:D7:1F:AE:4A:7C:90:E5:8D:D0:56:1E:1A:6D:21:CA:82
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785E5DAD09AE94533888A8B97063B0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/RlTgetcfrkp8kOWN0FYeGm0hyoI.roa
Signing time: Sun 01 Jan 2023 08:35:05 +0000
ROA not before: Sun 01 Jan 2023 08:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206446
IP address blocks: 212.115.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 14:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5e:5d:ad:09:ae:94:53:38:88:a8:b9:70:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4654e07ad71fae4a7c90e58dd0561e1a6d21ca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:52:38:46:e7:3d:c8:bd:fc:10:6e:8c:b7:
04:8c:a7:65:18:db:bc:69:05:77:ef:35:b0:8b:22:
4a:53:dc:ff:ec:3a:21:ad:05:57:a5:5d:f4:3c:52:
26:83:65:d9:86:9b:fc:09:55:11:d9:2b:85:19:f7:
1d:fa:c8:5d:fa:2a:d7:08:6b:a5:4e:a1:fc:94:2f:
21:37:b8:d2:32:c9:57:44:d7:7f:99:95:54:69:d0:
9a:19:bd:36:0f:6c:dc:7d:7f:29:df:fe:58:65:14:
fb:ec:67:83:9f:1e:5d:13:2a:50:99:1f:e8:62:46:
a8:3e:74:31:cb:64:e6:44:5e:48:41:11:ee:c6:78:
8e:f5:34:97:91:5b:3c:67:11:f3:ee:4c:ce:2f:f0:
1d:00:67:ff:14:d8:3b:54:d4:bd:c6:44:d6:84:36:
43:87:4f:d0:92:04:65:91:f6:b2:91:87:77:fb:bc:
6a:f0:68:6b:26:c3:2d:1e:72:16:d7:38:ac:cc:b2:
06:5f:26:57:12:66:d6:de:2a:47:fb:55:2f:32:44:
2f:24:21:05:25:12:cf:d8:15:72:0a:e9:6f:e0:af:
22:d5:b5:d9:38:cc:be:bb:87:b5:5c:65:1b:3c:78:
11:ed:f3:2e:df:c4:ec:05:03:ed:10:77:2a:f8:6b:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:E0:7A:D7:1F:AE:4A:7C:90:E5:8D:D0:56:1E:1A:6D:21:CA:82
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/RlTgetcfrkp8kOWN0FYeGm0hyoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:bc:fe:cf:24:f7:1c:12:44:bc:fa:44:8f:d8:18:5a:b3:86:
f8:e6:46:60:d7:9d:b2:ff:7e:c7:34:9d:f4:a2:bc:5b:76:6e:
fe:e2:ef:b4:14:3b:bc:f0:10:74:48:a7:56:d6:63:d0:f7:66:
96:11:e0:1c:78:bd:b9:bc:dd:9c:5d:80:c7:1d:0c:33:8b:e5:
68:3c:dc:8b:43:17:3f:be:ef:a3:da:8d:14:a2:0d:75:3f:14:
69:0c:7d:30:00:40:86:2f:eb:21:ad:3a:cb:8a:86:ef:4d:0d:
6d:c0:e9:f1:60:e5:71:5c:68:3e:d0:fd:43:60:25:94:74:3f:
28:cf:0e:27:a2:e7:dd:4e:2b:bc:a4:3b:c6:7c:be:a8:24:86:
a5:65:9a:cb:d5:51:43:70:d8:0b:f2:4a:cf:35:a8:75:0b:8a:
00:af:17:52:2f:36:25:4f:ca:c2:ce:6f:41:66:f8:94:23:b9:
9a:d3:7e:39:5a:ad:a6:fd:8c:07:ba:2b:68:d3:7f:b2:1c:91:
36:2f:5c:4e:a8:be:07:8b:39:ee:c1:cc:2c:88:d1:e0:1e:87:
f2:d9:4d:05:71:ea:71:e9:27:6d:f2:1a:a8:71:3f:ac:32:9b:
9a:cb:25:6c:b7:06:92:cd:b6:d8:32:e1:41:76:87:16:9b:aa:
6b:3c:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org