Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/1S2DDgPKRQO4sqUe7nwr9ANJYqw.roa
File: 1S2DDgPKRQO4sqUe7nwr9ANJYqw.roa (raw, json)
Hash identifier: dKYGunXCdA6R1SeJUZxI+br6q6XwhpKWfjL5hhlh0ww=
Subject key identifier: D5:2D:83:0E:03:CA:45:03:B8:B2:A5:1E:EE:7C:2B:F4:03:49:62:AC
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0187C73C7AD719F23BD8F15AFA9D1632C168
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/1S2DDgPKRQO4sqUe7nwr9ANJYqw.roa
Signing time: Fri 28 Apr 2023 09:40:42 +0000
ROA not before: Fri 28 Apr 2023 09:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28716
IP address blocks: 212.104.56.0/21 maxlen: 24
212.104.16.0/20 maxlen: 24
212.104.32.0/21 maxlen: 24
212.104.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 10:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:3c:7a:d7:19:f2:3b:d8:f1:5a:fa:9d:16:32:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Apr 28 09:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d52d830e03ca4503b8b2a51eee7c2bf4034962ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:ac:c2:20:7a:9b:a5:07:e9:13:cb:12:14:
cd:c5:12:3b:0f:87:ff:bd:45:cd:70:7f:77:c2:f4:
e2:f6:27:16:9c:ea:ac:d6:49:75:08:05:95:be:25:
ca:82:43:4d:89:80:32:47:d2:e4:32:17:bf:2f:5c:
08:26:f1:38:c9:07:76:3e:0d:b8:65:9e:c2:11:12:
8d:6d:3f:f6:5b:85:9b:e0:29:69:14:d7:9b:28:89:
8e:69:31:6c:b4:37:81:57:8c:3e:50:97:e7:78:da:
1a:6a:65:b6:d2:e5:2e:e3:14:0f:f5:87:99:60:ca:
de:3e:3e:cb:6c:49:82:94:0d:63:4b:53:65:1b:9e:
f2:b3:41:4f:c9:ae:65:bb:d5:11:47:c6:9d:3a:9f:
2e:bc:c7:4e:5b:89:47:12:a8:0d:28:34:a6:74:0f:
12:51:97:8a:ff:dd:4b:38:e4:cf:4b:d8:e6:19:51:
c6:08:d8:ec:3e:c9:0e:90:90:68:14:ed:60:59:35:
35:4d:c9:63:58:fa:66:d7:fb:71:ac:c4:3a:cc:3b:
d1:26:b1:0c:aa:29:d1:db:b9:8a:3f:a0:b6:2f:b9:
2d:bf:76:aa:0c:81:22:33:fa:15:04:3b:60:bf:73:
98:df:32:6c:34:fe:74:ab:d7:1b:da:0a:12:5e:98:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:83:0E:03:CA:45:03:B8:B2:A5:1E:EE:7C:2B:F4:03:49:62:AC
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/1S2DDgPKRQO4sqUe7nwr9ANJYqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.16.0-212.104.39.255
212.104.48.0/20
Signature Algorithm: sha256WithRSAEncryption
41:8e:65:df:cd:ea:4b:e8:b0:16:56:5d:aa:ff:2b:d2:85:0d:
c7:fb:4b:0b:55:ff:f8:2b:e0:26:72:ec:26:69:9a:9f:5b:58:
ef:53:84:aa:e1:03:52:16:93:53:16:d3:0d:ce:4a:e7:99:73:
50:fb:91:11:60:d0:8b:60:72:38:ea:66:42:4e:90:78:e4:96:
6f:89:bc:ed:40:66:75:3d:f1:1b:fa:d9:c1:ef:c5:63:09:a5:
04:ca:82:b3:97:af:5e:e9:96:98:0e:5b:3f:24:30:9b:1f:a0:
16:58:15:89:bb:16:da:34:67:b3:09:92:df:2b:c1:67:aa:b5:
54:7d:3b:fc:93:24:88:0a:d3:cc:6a:f1:b1:ae:b4:61:9b:06:
3d:ad:e4:89:e7:64:c1:23:07:6b:0b:23:87:72:c0:f1:b9:4a:
90:da:78:8b:e7:61:ea:c6:ad:84:07:bf:3e:00:72:32:7e:2f:
1f:fe:fd:dd:94:ae:87:19:34:13:01:bb:0d:fe:ee:f3:bb:a9:
e6:dd:74:6c:28:f0:6a:68:da:f2:dc:ee:10:5f:a3:0a:5e:91:
64:f0:2d:db:d5:d3:cd:67:d6:d4:db:14:51:83:2a:b0:87:df:
c9:fd:59:d1:2e:df:81:9b:1a:82:85:bb:e5:f7:60:b6:10:36:
ee:72:3b:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:13 2024 by rpki-client on console-ams.rpki-client.org