Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/amvuMRqWCBuEfwKOnL_WRo02x8I.roa
File: amvuMRqWCBuEfwKOnL_WRo02x8I.roa (raw, json)
Hash identifier: DSWOvQ8bKqQds2pYFwxmnwl6s1WBdYErWluPZKJP9fM=
Subject key identifier: 6A:6B:EE:31:1A:96:08:1B:84:7F:02:8E:9C:BF:D6:46:8D:36:C7:C2
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 018F386A268D770A4887243C523AA948F7EB
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/amvuMRqWCBuEfwKOnL_WRo02x8I.roa
Signing time: Thu 02 May 2024 08:27:11 +0000
ROA not before: Thu 02 May 2024 08:27:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202108
IP address blocks: 212.227.117.50/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 May 2024 10:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:6a:26:8d:77:0a:48:87:24:3c:52:3a:a9:48:f7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: May 2 08:27:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a6bee311a96081b847f028e9cbfd6468d36c7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:4b:3d:45:46:45:00:1b:27:14:2e:ac:37:
51:d7:b4:c1:05:20:26:98:f2:a6:a0:09:2e:c9:d4:
01:93:b0:22:34:90:4b:21:5e:7f:56:02:58:e6:11:
16:22:28:6f:15:5e:1a:dd:42:ee:41:f2:22:1d:de:
5d:e0:ff:24:02:54:77:5a:d9:ef:d4:65:36:0f:4a:
35:00:19:93:e5:7e:08:a3:b8:1c:4b:3d:3d:ac:d0:
30:c7:d6:4e:e7:28:81:95:7f:c0:f3:fe:c6:3e:0b:
64:6c:87:2c:ae:c7:18:d7:5b:22:18:fb:90:18:fd:
67:8a:b2:e5:cf:fb:d8:cf:f5:1b:48:37:ff:12:17:
4a:bf:20:2a:16:25:2c:42:9d:12:87:1d:5c:a3:48:
4d:9a:be:28:1b:3c:a7:a7:19:5e:f0:fa:1d:e6:48:
39:5a:a1:3c:a5:0a:38:00:05:33:bf:e3:c5:05:ab:
78:39:6e:0a:3f:e5:10:27:4a:4c:51:48:1f:75:ff:
8c:77:f0:55:ad:65:13:17:e9:c2:5a:71:60:60:ce:
4d:4c:40:69:9a:56:dc:5b:ca:61:27:28:82:f3:2a:
30:d5:58:31:3d:3b:fa:16:70:d7:85:93:3b:cf:67:
97:21:f7:b6:1d:3e:a2:af:73:14:b9:17:1e:df:cc:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:EE:31:1A:96:08:1B:84:7F:02:8E:9C:BF:D6:46:8D:36:C7:C2
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/amvuMRqWCBuEfwKOnL_WRo02x8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.227.117.50/32
Signature Algorithm: sha256WithRSAEncryption
98:b5:40:8d:33:96:13:f6:ad:77:45:93:75:b9:29:c8:ff:b1:
62:b9:b6:e6:00:ce:75:58:9f:b5:e4:b0:fb:b8:61:e9:f6:3f:
32:01:ea:4e:86:19:f9:db:77:1c:9b:54:e0:52:65:d5:86:a0:
93:a3:67:17:93:de:f7:24:4b:d3:3f:46:23:00:2d:86:5c:18:
f6:ff:b9:4a:b0:8c:f2:38:da:72:9f:33:3e:c3:40:2c:6b:83:
1e:4d:f2:37:13:c7:ef:d3:94:7b:5b:88:b2:ba:3f:1e:34:0d:
fc:78:78:6b:e9:09:8b:ab:7c:1b:26:f6:bb:0b:03:fa:bb:5a:
ad:63:7e:53:cf:26:50:3e:17:f4:cc:1a:e7:ec:ce:01:63:92:
6e:30:1e:12:71:56:08:e3:d1:a7:6f:c4:ab:a8:2d:26:eb:ab:
ad:31:dd:e6:b0:41:6d:76:40:9e:8a:d2:5c:9a:93:e3:b8:05:
f2:71:81:85:96:99:09:33:5f:b8:14:5f:62:89:01:a2:6b:9c:
65:4c:2c:87:b4:85:48:5f:4c:a4:ba:90:75:2b:1b:91:d6:86:
c0:a0:3a:bf:20:7a:3e:cd:da:b1:90:cb:d2:69:43:67:0e:fc:
5f:4e:b3:8a:94:7d:00:57:62:ea:e7:4e:42:80:b3:d2:8d:0b:
20:83:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:13 2024 by rpki-client on console-ams.rpki-client.org