Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/ISxXfjBuHlf5NjkN-Xnfy4pNGJ4.roa
File: ISxXfjBuHlf5NjkN-Xnfy4pNGJ4.roa (raw, json)
Hash identifier: S1DD+SaNFHzH1q5OgdRqmnCXSyAAfG7BEA7BybsEOn4=
Subject key identifier: 21:2C:57:7E:30:6E:1E:57:F9:36:39:0D:F9:79:DF:CB:8A:4D:18:9E
Certificate issuer: /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial: 018FBD307DF5DCCFA4A1BC17898D9373D0B0
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/ISxXfjBuHlf5NjkN-Xnfy4pNGJ4.roa
Signing time: Tue 28 May 2024 03:13:42 +0000
ROA not before: Tue 28 May 2024 03:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.254.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bd:30:7d:f5:dc:cf:a4:a1:bc:17:89:8d:93:73:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Validity
Not Before: May 28 03:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=212c577e306e1e57f936390df979dfcb8a4d189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:9c:40:d6:da:9f:06:c0:a5:7f:7e:b3:35:
51:10:93:f9:1f:c7:ed:42:cb:6f:8b:fb:82:59:a7:
46:83:56:3e:58:b7:99:af:d2:99:27:9c:4f:d2:be:
86:f0:c2:19:1d:2f:f6:fc:1f:92:8a:b8:27:91:7a:
2c:9b:38:4f:7d:d5:64:64:05:5d:4b:98:02:67:d6:
ca:0b:e0:6a:3b:56:ee:e1:c2:8a:f9:86:ec:6d:e0:
22:de:e3:03:00:b8:30:05:9b:1b:4c:7e:05:2e:e4:
67:1b:f1:e0:27:a4:dc:98:7e:4f:8b:af:b7:7c:1f:
70:71:3a:0a:70:8e:21:73:39:63:f9:da:8d:9f:73:
90:a8:c4:bb:5b:ff:e0:86:73:7f:a3:c4:e3:7f:64:
c8:13:25:98:61:be:f6:f5:b2:c6:52:fe:75:66:95:
23:9c:c9:f1:7a:38:a0:f4:b0:e1:a7:a9:f6:42:83:
12:60:ea:96:4c:75:5c:52:23:4d:51:b1:80:25:f4:
61:4a:d0:e9:d4:30:05:fa:cf:21:fd:31:35:42:f7:
ec:01:94:f3:7c:fd:96:93:2d:92:75:28:a0:7e:05:
24:47:ab:3b:76:ae:48:d4:83:71:d6:4b:9f:cd:9c:
65:4a:fa:41:56:2f:85:eb:bb:db:ce:1a:d3:75:65:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2C:57:7E:30:6E:1E:57:F9:36:39:0D:F9:79:DF:CB:8A:4D:18:9E
X509v3 Authority Key Identifier:
keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/ISxXfjBuHlf5NjkN-Xnfy4pNGJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.170.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5b:4d:ea:66:34:5e:a3:a8:70:ea:11:4c:e4:05:e0:21:5a:
72:66:2e:62:d1:14:11:1c:1d:05:67:02:10:f9:cc:d9:40:7b:
93:60:0d:6c:e6:e8:d1:51:1f:25:58:f4:77:52:5e:86:f0:4c:
f8:ce:09:65:10:4c:3d:1e:85:34:a3:aa:bf:9a:1b:68:60:4f:
f8:e8:90:d2:e3:84:5c:5f:7d:aa:11:0a:85:1e:ee:5a:8f:91:
5b:7a:34:19:5d:8c:d4:64:21:b9:5b:28:20:46:4f:24:00:d4:
61:23:bb:8a:28:b6:2f:f5:c3:f5:31:21:32:a7:ec:3c:c3:76:
e3:d1:2f:db:11:a1:53:96:3b:bd:5c:91:fc:4e:e9:ca:b7:1b:
d8:7b:5f:af:16:e3:54:42:f9:22:50:0d:51:5b:91:61:64:90:
4b:6c:51:12:13:4c:7e:61:c9:eb:a1:b7:de:82:43:7f:54:0b:
85:54:da:c3:70:d2:72:c7:e9:ee:aa:ee:ae:21:74:90:ad:32:
f2:dc:dd:fc:fd:f7:be:a8:3d:4d:c3:3f:fd:63:59:53:69:f1:
01:e7:e9:e5:a4:d1:54:40:79:9b:92:3f:34:63:22:66:d0:e4:
0c:21:4e:de:6a:ea:81:3f:b5:e4:cc:d8:7e:70:f5:c7:dd:32:
2c:ed:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org