Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UjZl0PUPW7pFpOIyhYos2sCd100.roa
File: UjZl0PUPW7pFpOIyhYos2sCd100.roa (raw, json)
Hash identifier: 1Hg8GhWKvHgxAhZnzx5xNFIFEP5VAZNaEq7yp/PbVbg=
Subject key identifier: 52:36:65:D0:F5:0F:5B:BA:45:A4:E2:32:85:8A:2C:DA:C0:9D:D7:4D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C7457E54BB720B0D8E2016856FE327670
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UjZl0PUPW7pFpOIyhYos2sCd100.roa
Signing time: Sat 16 Dec 2023 20:36:06 +0000
ROA not before: Sat 16 Dec 2023 20:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.115.126.0/24 maxlen: 24
212.115.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:57:e5:4b:b7:20:b0:d8:e2:01:68:56:fe:32:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 16 20:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=523665d0f50f5bba45a4e232858a2cdac09dd74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:54:c2:62:6f:f4:0c:af:fa:c3:0b:92:ea:
2e:f4:91:63:f8:34:89:08:e5:3e:e0:e0:02:fe:4f:
84:2a:e8:5e:76:33:ea:03:ab:93:28:3d:4a:4a:11:
cd:56:a3:d8:62:8f:18:67:69:30:f8:75:1c:cc:49:
88:94:b7:77:40:e0:38:97:53:78:b8:a7:5e:7a:0f:
db:fb:6c:24:10:21:70:1d:0b:2d:e3:04:3e:24:2d:
0e:96:5b:a0:db:2e:52:7a:1f:bc:4f:05:a5:4f:35:
2f:e0:e4:e6:0c:bf:43:dc:8f:4d:c1:fc:2c:e7:42:
87:b4:4d:68:40:02:f7:8f:ba:c5:5c:9b:a4:fd:ac:
89:98:8c:c3:6a:bb:ff:e5:7d:bc:6a:93:d6:e1:ca:
76:6e:8b:62:c5:9d:31:8f:97:9c:d5:68:fb:ac:96:
64:03:05:ae:06:42:12:6f:97:a7:a5:df:0a:63:0f:
32:46:13:6c:d5:7f:19:14:8b:2a:0e:23:5a:f8:f9:
77:d2:89:df:30:7f:56:d0:f6:a3:0d:93:74:4b:32:
f0:6d:89:76:37:70:43:8b:f0:03:ce:74:75:94:56:
92:32:33:d8:7d:c2:5a:da:ee:d5:f8:9a:ca:6a:1f:
78:a2:84:70:6a:4b:d4:73:ba:30:57:60:8b:df:08:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:36:65:D0:F5:0F:5B:BA:45:A4:E2:32:85:8A:2C:DA:C0:9D:D7:4D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UjZl0PUPW7pFpOIyhYos2sCd100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:1a:53:7b:fc:f4:2e:61:be:fb:12:bd:46:d9:55:e4:d7:86:
57:14:4f:f1:d4:26:2f:51:a1:e0:27:07:28:cb:d4:62:b6:de:
00:d7:4d:ba:38:01:40:5e:e5:67:6a:6b:44:16:de:63:72:73:
0d:02:49:0f:68:ba:42:cb:a4:77:df:c6:c7:3b:6c:7b:f3:f6:
5c:15:3a:2a:9b:d6:ea:05:34:4d:13:68:de:a7:20:08:74:5c:
d7:ff:bf:08:f0:56:41:9d:eb:6c:63:9d:49:53:c2:74:e3:07:
33:05:fd:cf:dc:28:c4:a7:ec:d4:78:e1:21:bb:d6:30:2b:2f:
c8:51:c2:2d:8b:c6:52:0e:1d:96:d2:ff:61:3c:0a:43:b3:93:
aa:b5:ec:7c:25:e5:15:56:b1:6d:34:b8:e5:21:81:44:18:f7:
9b:86:f4:e3:dd:7e:37:ca:63:f7:c3:f8:ec:ae:c5:74:dd:be:
7f:e2:bc:2c:cd:40:d0:aa:03:8e:5a:96:50:9a:74:aa:6b:ab:
2f:12:95:64:16:f0:84:35:82:49:8b:da:3a:39:05:f9:57:fe:
3e:1d:28:e1:19:4b:06:a3:7e:28:37:e2:dc:f3:63:a9:ef:20:
02:27:57:82:c7:e1:41:5b:7c:ce:e6:96:be:f3:0f:e4:ad:07:
71:bc:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org