Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/yV2W8Pj4AMuWqAe3PrhtpaA27J4.roa
File: yV2W8Pj4AMuWqAe3PrhtpaA27J4.roa (raw, json)
Hash identifier: d8RTnHZ5helxz/HZ66lqsH8IybdV6nb4LR6UHKEy1rs=
Subject key identifier: C9:5D:96:F0:F8:F8:00:CB:96:A8:07:B7:3E:B8:6D:A5:A0:36:EC:9E
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0186A6C1460C1C5DA560BEAB4369B6619CA5
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/yV2W8Pj4AMuWqAe3PrhtpaA27J4.roa
Signing time: Fri 03 Mar 2023 09:15:29 +0000
ROA not before: Fri 03 Mar 2023 09:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.0.0/20 maxlen: 24
212.104.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 03 Mar 2023 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:c1:46:0c:1c:5d:a5:60:be:ab:43:69:b6:61:9c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Mar 3 09:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c95d96f0f8f800cb96a807b73eb86da5a036ec9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:4d:f3:1c:a3:f7:c3:c7:e6:f8:a9:5e:de:
23:5a:11:41:ea:25:81:b2:bb:21:14:00:9d:8f:41:
68:ae:d0:da:6e:8e:8a:c9:96:b0:c9:ea:76:3f:d1:
6f:56:70:07:d9:e7:7f:bc:3e:b2:f5:04:d9:6f:b7:
00:62:81:b5:e7:0e:b9:0f:c7:d1:62:f3:55:0b:5d:
b8:49:cf:25:bd:6e:c7:0a:54:af:92:1b:77:02:db:
81:2e:38:c4:54:65:c8:c8:be:81:12:1f:fc:91:b6:
96:0e:d6:3a:da:ae:dd:41:15:95:14:56:64:26:c2:
5b:b1:c2:96:7f:1c:d4:09:dd:d4:5d:c1:90:b7:f8:
4d:3b:50:dd:ac:cd:9c:32:94:7c:aa:56:e7:3b:e2:
e1:24:fe:8f:0e:61:e0:14:dd:e3:19:80:ba:57:a1:
23:d4:46:f6:e2:a1:ae:44:7f:93:8e:f1:ea:c4:10:
11:76:17:f0:31:5f:f5:ec:78:de:43:97:b5:53:fb:
82:30:45:d4:f3:c7:37:9b:00:c7:bb:79:08:7e:76:
24:a2:03:17:09:13:0f:f7:29:53:c9:d2:54:f9:8e:
8a:2b:3f:31:2b:6a:75:33:9f:aa:66:c5:0e:9e:d3:
47:de:d0:5e:57:46:59:89:f8:0a:40:03:df:51:92:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:96:F0:F8:F8:00:CB:96:A8:07:B7:3E:B8:6D:A5:A0:36:EC:9E
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/yV2W8Pj4AMuWqAe3PrhtpaA27J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/20
212.104.32.0/20
Signature Algorithm: sha256WithRSAEncryption
66:8b:b8:e6:12:b1:12:77:b1:f5:2a:18:ad:a5:68:41:c2:c1:
08:14:78:f6:2c:2b:da:66:01:55:db:c8:e9:da:0e:c7:73:e5:
76:85:f4:61:30:0b:13:c5:92:89:e7:44:0b:fb:e9:62:d4:da:
f4:d4:ee:28:ca:00:bc:6d:90:2d:2b:4b:ba:5e:da:7a:c8:9d:
a0:83:50:50:cc:21:76:ec:9b:f6:b0:b0:dc:6b:d2:58:da:4a:
64:ba:86:05:54:e6:2f:ce:8f:97:52:f6:44:b2:e7:c8:04:4c:
9f:6a:dd:ec:97:fe:3a:45:d4:7b:17:eb:0c:21:8d:9f:89:a6:
51:58:d3:e1:1b:01:cb:6d:de:7c:3b:36:7c:15:77:18:b8:d1:
68:29:14:ac:2b:a3:31:4c:e1:bc:e0:dc:a0:ff:3f:f4:9b:79:
c2:c9:36:7e:f7:fd:15:27:d0:3f:0c:0a:55:cb:7d:a4:0a:80:
47:0f:aa:7e:39:d8:28:f9:9d:e1:6f:b9:7a:4e:55:37:1a:95:
6e:46:9d:86:2e:02:e6:fc:a0:cf:9c:30:a9:76:52:6d:71:5e:
a9:63:c1:96:2a:54:fa:d5:54:bd:71:f2:68:4f:15:62:64:8d:
5e:cb:a6:4c:0e:45:c6:3d:63:d5:13:1d:74:5b:34:1a:12:8a:
33:82:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:13 2024 by rpki-client on console-ams.rpki-client.org