Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/z5F71XuRMAsarfiPK77vzMQS11c.roa
File: z5F71XuRMAsarfiPK77vzMQS11c.roa (raw, json)
Hash identifier: lfygb1Qk7y5asTooqHUEAkLPc0byxVe9+2faocuYiTc=
Subject key identifier: CF:91:7B:D5:7B:91:30:0B:1A:AD:F8:8F:2B:BE:EF:CC:C4:12:D7:57
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0187E89FB044E2225953C6914B72B4B8A669
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/z5F71XuRMAsarfiPK77vzMQS11c.roa
Signing time: Thu 04 May 2023 21:16:32 +0000
ROA not before: Thu 04 May 2023 21:16:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 212.115.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:9f:b0:44:e2:22:59:53:c6:91:4b:72:b4:b8:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 4 21:16:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf917bd57b91300b1aadf88f2bbeefccc412d757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:bd:d2:cd:8f:0b:a7:ef:0a:fa:00:ed:c2:
1e:db:7e:68:72:4c:d2:3a:8d:2a:68:ae:6d:75:47:
0d:a3:cf:f2:67:2e:d7:b5:ae:c6:85:ec:fd:17:87:
32:8f:ed:68:83:26:45:de:32:d5:fd:f0:6f:93:dd:
7f:ff:7e:7b:eb:2f:d7:46:83:e3:9b:93:3b:11:b2:
15:95:51:a6:16:17:20:fa:f7:40:1d:66:71:6b:01:
58:6e:19:cb:62:90:d9:2f:c3:9e:53:89:f0:41:20:
4a:b3:3d:98:ee:2c:fc:1b:6b:01:f4:fc:df:b9:10:
f5:f8:9d:9e:73:b9:52:38:29:bf:87:97:2a:96:c4:
0c:19:8e:a5:83:6b:48:f8:b5:4c:7b:e8:05:79:5b:
ad:3b:f8:46:7d:5d:2a:11:88:b8:7b:0c:8e:dd:6e:
81:36:cc:15:6f:59:37:a5:60:68:d4:ac:1e:fc:55:
12:a0:b9:c7:fa:67:91:45:c4:01:30:dd:32:e4:13:
f3:02:c2:d5:2d:9a:37:49:87:46:4a:1d:1b:34:62:
c5:3d:f1:8c:7a:1d:1c:39:21:9e:ae:93:96:76:db:
88:09:ea:ec:04:dc:58:65:96:41:67:22:b0:65:7a:
24:26:32:ba:3a:69:5d:a4:3d:53:0a:2d:d5:3f:80:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:91:7B:D5:7B:91:30:0B:1A:AD:F8:8F:2B:BE:EF:CC:C4:12:D7:57
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/z5F71XuRMAsarfiPK77vzMQS11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:d2:e9:ca:13:46:47:8a:18:a7:21:68:c3:4c:ed:0b:95:37:
c4:0d:b2:09:e7:7c:46:dc:a9:6b:b4:14:da:c1:a5:d4:f8:21:
9a:26:fc:65:ea:98:0b:d3:65:77:10:2b:6c:52:37:13:76:ac:
90:51:2f:be:5a:1c:f1:fd:c8:86:e3:f1:70:2b:66:58:55:91:
fd:6c:f6:64:06:2c:d9:9e:98:26:3d:9b:e8:ad:e7:ae:9b:a5:
3c:91:39:c4:6e:09:01:81:33:66:73:02:9d:14:3c:cd:0b:e0:
5f:45:27:10:cf:b0:25:16:28:5b:f8:74:c4:6d:18:9c:75:ed:
b8:87:4d:14:45:c6:b9:f0:f6:56:14:9e:e5:e6:af:f5:89:9c:
37:bc:ae:63:96:d6:27:77:03:61:09:3e:17:9f:65:df:86:19:
41:44:53:a6:08:f8:9e:c0:b5:2c:99:23:38:04:36:55:2e:ac:
99:5c:e0:6c:39:41:fa:73:bb:09:83:2b:3f:a0:7e:39:6d:47:
9b:79:f5:c8:f1:ee:27:4c:fd:8d:f8:2f:5b:b7:d2:f9:55:bd:
97:4d:74:b2:a7:73:24:31:67:8b:35:57:36:18:bc:10:1b:fe:
94:c0:8e:a7:d3:dd:29:27:ba:0e:1b:73:95:94:71:9a:80:58:
2d:0a:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org