Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/euS5fvo8zYrYy07XQMKjhH5GzUc.roa
File: euS5fvo8zYrYy07XQMKjhH5GzUc.roa (raw, json)
Hash identifier: TAnyAwly9MRGFjqL1AtDvBY91BL1hf8jy77DfxSM3X0=
Subject key identifier: 7A:E4:B9:7E:FA:3C:CD:8A:D8:CB:4E:D7:40:C2:A3:84:7E:46:CD:47
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 019258C0951198AC29B29BC21024B3D380CA
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/euS5fvo8zYrYy07XQMKjhH5GzUc.roa
Signing time: Fri 04 Oct 2024 18:17:48 +0000
ROA not before: Fri 04 Oct 2024 18:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.115.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 14:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:c0:95:11:98:ac:29:b2:9b:c2:10:24:b3:d3:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 4 18:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae4b97efa3ccd8ad8cb4ed740c2a3847e46cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:19:02:bb:ad:60:11:a0:e3:17:38:61:88:
fe:d8:ba:00:84:93:72:99:45:26:2d:b8:24:f4:d2:
17:3a:fa:f0:0a:18:6a:31:f7:61:2f:6f:31:0c:b7:
94:0e:a7:8b:7c:ca:9e:08:b5:bc:9d:37:83:30:ff:
da:73:90:c4:e1:7c:82:c4:89:94:6a:03:72:93:e4:
9d:16:23:93:30:86:87:5d:d8:67:9c:a0:ce:97:5a:
91:9f:65:4a:4a:63:40:f7:7a:1c:11:01:48:19:be:
92:48:80:41:ee:60:c7:e7:00:88:46:6c:0a:1f:fe:
aa:ce:f2:40:12:d0:2d:fa:c8:d0:ed:74:77:87:70:
d7:cf:66:9e:11:df:79:46:57:46:b6:70:3f:31:31:
9d:b9:5c:92:a1:de:5a:a3:39:ac:bd:7c:4f:f0:7e:
e9:7e:6d:b2:ab:ba:56:81:37:52:9d:11:20:27:2a:
f4:62:b2:78:cf:a9:2a:0b:c8:4a:13:26:52:54:63:
05:af:fe:8e:a2:23:02:b5:0d:5b:7b:30:7e:62:99:
ba:f8:e6:20:d6:e8:63:c7:e4:2c:e5:cd:31:d5:98:
36:26:63:6f:35:bf:c3:03:ae:19:0f:5b:12:1f:bc:
ee:07:e3:4c:cf:ff:5f:81:a0:8e:91:2f:c5:3f:8e:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:B9:7E:FA:3C:CD:8A:D8:CB:4E:D7:40:C2:A3:84:7E:46:CD:47
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/euS5fvo8zYrYy07XQMKjhH5GzUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:f9:7c:9c:4f:26:a1:82:dd:fd:67:15:7d:6b:b8:73:18:69:
d9:22:36:cc:25:75:f0:e7:cb:70:09:54:71:87:55:c0:4d:cd:
67:9b:45:56:41:71:9e:11:ad:c0:ec:1f:bb:23:ee:74:26:23:
0f:af:68:52:1b:90:ce:1e:ee:d4:3f:a7:8f:0e:ab:52:7f:e0:
af:e5:cb:69:c4:4e:f8:cd:b1:c8:c2:6a:f1:85:22:41:07:26:
1c:e4:80:67:91:96:22:73:42:16:b6:d7:dc:a0:a3:74:5e:33:
13:95:80:86:bb:d7:5e:39:13:15:84:d2:ce:f4:bf:b7:7b:11:
d1:39:e1:64:a9:0f:76:a7:87:5c:d7:00:a2:dd:e8:93:da:ab:
92:7e:cf:15:42:78:66:3b:32:3b:f0:63:f4:37:ef:71:78:78:
00:da:1e:13:d6:59:be:db:e3:a5:71:ba:18:af:b4:4c:3b:a3:
2f:ac:77:4d:6f:5c:ff:4f:35:1c:3d:a3:df:df:ed:bc:bb:5c:
4d:ca:5a:8c:b6:b8:c3:36:de:44:92:86:b1:ea:25:4c:97:40:
72:32:43:f5:13:14:91:6a:1b:0f:53:13:16:91:5a:d3:82:9e:
88:8e:c3:44:d0:46:9b:00:f2:dd:5e:e4:63:0f:4d:5b:70:23:
a6:9e:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 19:35:32 2024 by rpki-client on console-fra.rpki-client.org