Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bMuWnDMMGwI3wGQ3ldFnBEZWP3k.roa
File: bMuWnDMMGwI3wGQ3ldFnBEZWP3k.roa (raw, json)
Hash identifier: FB/lgzzf+yg7Ru08MkdGDxpSY9s7/yXY3FeK/RNF1P8=
Subject key identifier: 6C:CB:96:9C:33:0C:1B:02:37:C0:64:37:95:D1:67:04:46:56:3F:79
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785809806729E6B5679E47E5BFA749
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bMuWnDMMGwI3wGQ3ldFnBEZWP3k.roa
Signing time: Sun 01 Jan 2023 08:35:04 +0000
ROA not before: Sun 01 Jan 2023 08:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 03:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:58:09:80:67:29:e6:b5:67:9e:47:e5:bf:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ccb969c330c1b0237c0643795d1670446563f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:bb:c3:d7:97:f4:51:a1:a9:ca:af:d2:4c:
67:41:db:f8:fc:f4:66:f6:84:52:1b:df:47:60:ae:
8a:a1:e2:68:4d:9b:d2:6c:00:e3:35:0c:db:8e:60:
7a:a4:4f:7c:73:4c:d8:05:58:2c:08:bd:88:1b:0d:
bf:d1:e8:5d:7b:b5:f5:25:16:84:29:3c:a9:f0:90:
0f:45:b5:e7:35:a0:0d:07:6a:a1:fd:9c:ea:59:91:
4c:53:9d:7c:71:fc:15:71:eb:08:54:39:cc:9f:dc:
7d:e4:a0:0e:23:ee:71:07:07:2d:ad:c2:33:fb:bf:
53:10:03:50:3f:41:8a:0f:d7:42:97:e6:8e:65:9f:
61:a3:68:86:82:11:8a:13:2f:19:47:fa:e8:1a:d4:
bc:ba:71:9d:01:a2:e7:d9:5b:80:01:4d:d1:7f:6e:
5f:c1:f1:9a:3f:7b:17:66:bf:cd:49:21:4b:05:08:
62:aa:d0:a7:4b:bc:7f:42:53:13:0a:00:25:a7:b6:
38:0e:97:7f:99:49:11:da:c9:3f:b6:d1:4f:1b:f1:
7e:19:21:91:ec:f8:01:20:a6:c3:52:8d:0d:68:8f:
4d:65:66:19:9c:59:f9:b9:29:72:19:b5:9b:d4:ca:
26:e2:93:8f:d4:1b:4a:3a:88:55:c3:04:80:7b:3b:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:96:9C:33:0C:1B:02:37:C0:64:37:95:D1:67:04:46:56:3F:79
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bMuWnDMMGwI3wGQ3ldFnBEZWP3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:6d:4b:f4:b0:83:3a:88:8e:13:28:d5:cd:8a:05:4f:8d:ed:
00:0a:5f:99:1b:d7:14:9a:9c:a9:a5:b2:26:91:39:fa:01:54:
28:2e:71:91:84:d5:23:01:01:1b:84:68:e7:89:2e:42:a9:5c:
16:cb:f6:d8:ad:bc:d4:0e:fa:6d:2f:02:8a:7d:3c:b3:74:0a:
7e:38:0d:55:c6:98:e2:a2:38:a7:67:08:91:5c:78:8d:8c:74:
50:9f:51:f8:a5:07:3b:83:10:68:f2:03:e0:78:c8:1a:97:7f:
12:f1:45:56:d6:38:e9:06:6f:f8:cf:bc:06:19:70:68:50:23:
a7:0d:8a:c1:dd:33:42:9e:af:40:34:3e:72:3f:37:72:6e:34:
85:8b:91:88:cc:42:0d:71:22:9a:bb:6b:7d:a5:1e:38:00:3a:
54:5f:89:b9:a0:2b:50:0c:ac:1e:cc:e0:d6:18:23:b9:27:f3:
f9:60:db:01:6d:bc:75:0f:a9:42:ac:62:fd:e6:7c:a2:34:1c:
36:05:28:b9:84:fd:3a:af:68:8a:b8:c7:82:cd:e6:8e:25:59:
84:08:c0:c8:99:14:c4:75:ab:4a:05:1e:f3:d2:a1:01:9e:8a:
45:dd:d2:1d:c1:30:e0:fb:cc:25:86:7c:61:15:26:52:bd:cd:
0d:04:ae:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseFgJgGcp5rVnnkflv6dJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwMTAxMDgzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2NiOTY5YzMzMGMxYjAyMzdjMDY0Mzc5NWQxNjcwNDQ2NTYzZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBm7w9eX9FGhqcqv0kxnQdv4/PRm
9oRSG99HYK6KoeJoTZvSbADjNQzbjmB6pE98c0zYBVgsCL2IGw2/0ehde7X1JRaE
KTyp8JAPRbXnNaANB2qh/ZzqWZFMU518cfwVcesIVDnMn9x95KAOI+5xBwctrcIz
+79TEANQP0GKD9dCl+aOZZ9ho2iGghGKEy8ZR/roGtS8unGdAaLn2VuAAU3Rf25f
wfGaP3sXZr/NSSFLBQhiqtCnS7x/QlMTCgAlp7Y4Dpd/mUkR2sk/ttFPG/F+GSGR
7PgBIKbDUo0NaI9NZWYZnFn5uSlyGbWb1Mom4pOP1BtKOohVwwSAezvtmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzLlpwzDBsCN8BkN5XRZwRGVj95MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvYk11V25ETU1Hd0kzd0dRM2xkRm5CRVpXUDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HN+MA0G
CSqGSIb3DQEBCwUAA4IBAQCwbUv0sIM6iI4TKNXNigVPje0ACl+ZG9cUmpyppbIm
kTn6AVQoLnGRhNUjAQEbhGjniS5CqVwWy/bYrbzUDvptLwKKfTyzdAp+OA1Vxpji
ojinZwiRXHiNjHRQn1H4pQc7gxBo8gPgeMgal38S8UVW1jjpBm/4z7wGGXBoUCOn
DYrB3TNCnq9AND5yPzdybjSFi5GIzEINcSKau2t9pR44ADpUX4m5oCtQDKwezODW
GCO5J/P5YNsBbbx1D6lCrGL95nyiNBw2BSi5hP06r2iKuMeCzeaOJVmECMDImRTE
datKBR7z0qEBnopF3dIdwTDg+8wlhnxhFSZSvc0NBK7h
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org