Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wVUX3DmEFXzcZR3ZeGy1P3W7BC8.roa
File: wVUX3DmEFXzcZR3ZeGy1P3W7BC8.roa (raw, json)
Hash identifier: cxtBC6plMlU1ZISLLCGfmg2VJBM2TNSAmJ214/UyewI=
Subject key identifier: C1:55:17:DC:39:84:15:7C:DC:65:1D:D9:78:6C:B5:3F:75:BB:04:2F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C64A4BA4E4B2D038929417D4D9D153776
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wVUX3DmEFXzcZR3ZeGy1P3W7BC8.roa
Signing time: Wed 13 Dec 2023 19:26:06 +0000
ROA not before: Wed 13 Dec 2023 19:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.115.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 20:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:a4:ba:4e:4b:2d:03:89:29:41:7d:4d:9d:15:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 13 19:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c15517dc3984157cdc651dd9786cb53f75bb042f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:34:e7:9d:9e:46:96:34:e1:8b:2f:1a:ed:
99:9b:3b:6c:f1:04:f7:5f:4e:df:dd:63:af:22:a8:
55:dd:40:23:49:a5:77:9a:69:31:09:08:d9:3c:e6:
52:9a:50:e1:80:53:2f:5a:7f:82:af:42:f6:09:58:
33:4d:68:8d:b2:0f:9e:78:f2:1e:fe:16:82:0f:d8:
90:12:c7:c6:52:62:96:da:20:55:2d:13:62:15:0c:
57:65:ae:fa:e6:78:85:1e:9c:bd:65:8d:1f:da:fa:
6f:20:96:43:bb:3b:5d:52:fc:d9:29:68:36:c4:11:
f0:3b:75:92:5b:19:bd:f4:4c:bd:3d:a6:5a:8a:d2:
91:8a:d5:b1:e0:d0:d2:11:64:b6:72:b4:7e:78:d1:
0e:1a:f8:5f:45:4e:48:d0:35:31:5a:07:50:a3:51:
8d:f3:d3:69:9e:0c:f4:43:a8:ef:a9:00:07:9a:25:
ae:20:2c:cd:db:41:95:0f:50:60:b8:31:16:f9:a7:
eb:85:cd:b7:0f:82:90:03:57:11:ad:db:75:36:1c:
01:b7:a6:59:42:f2:7a:92:e7:d4:e6:d3:92:7e:ad:
d4:11:c8:b5:af:25:5f:26:f3:53:b4:9c:53:1a:54:
84:1c:de:df:c8:ca:8d:86:e6:d5:a5:85:68:d6:9d:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:17:DC:39:84:15:7C:DC:65:1D:D9:78:6C:B5:3F:75:BB:04:2F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wVUX3DmEFXzcZR3ZeGy1P3W7BC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.127.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e4:25:fb:cb:ca:f2:2c:78:d8:0d:3d:86:6d:4c:7d:4a:4b:
c0:0c:74:02:27:f9:fe:f9:de:8a:00:29:44:ad:48:4c:c4:f6:
4b:05:fb:fa:e2:ad:70:e4:f8:87:79:f2:4f:c5:9b:4e:88:89:
7d:79:02:3d:8c:f6:67:01:d6:ed:e0:1e:66:4a:8b:fc:e3:31:
26:1e:3a:df:05:a9:03:48:cf:99:72:ec:46:70:07:1a:0e:87:
83:c3:66:a8:5d:71:de:4b:f4:bf:07:4f:95:93:ac:fd:80:26:
43:10:b4:59:96:b3:bc:87:a5:da:ab:ca:a9:28:ee:93:34:a7:
e3:37:60:95:8c:57:ab:6e:67:13:67:ec:ed:fb:b1:ca:e4:42:
57:7d:c9:36:8d:f7:23:48:c4:1a:bb:30:b5:35:cc:c3:ae:5d:
20:72:f0:9d:bd:86:09:d2:05:cc:f5:80:86:9c:d2:4d:1a:ba:
f4:cd:ef:54:99:3e:93:96:0f:ac:07:1f:3f:66:94:cd:6b:b4:
dd:5c:5b:53:70:74:b9:6e:20:49:e3:ed:df:bf:bc:ea:83:2e:
0f:09:eb:59:35:23:89:e5:ec:56:3f:ce:e9:1b:dd:77:61:c5:
9c:e3:3c:de:98:db:23:d8:36:5a:09:75:ee:fb:8d:23:22:93:
d9:68:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org