Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1qzSUtpVUAL6a08wzzgSPRsbjjU.roa
File: 1qzSUtpVUAL6a08wzzgSPRsbjjU.roa (raw, json)
Hash identifier: bOaBrcrOSl24DgA4juN2wCKDO2uhbxaz0euNKohcJuI=
Subject key identifier: D6:AC:D2:52:DA:55:50:02:FA:6B:4F:30:CF:38:12:3D:1B:1B:8E:35
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4DC9AED7423BF5D46FC3F1FE91FF7
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1qzSUtpVUAL6a08wzzgSPRsbjjU.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206248
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 03:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:dc:9a:ed:74:23:bf:5d:46:fc:3f:1f:e9:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6acd252da555002fa6b4f30cf38123d1b1b8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:0a:87:95:81:bf:c2:54:fa:5b:84:38:7a:
aa:8d:0f:8d:ea:2c:91:1a:28:cd:53:e5:52:03:d0:
a3:a6:f0:61:6c:87:71:f7:96:2a:f9:30:6a:25:fc:
9d:2b:80:1c:f4:ac:cf:81:7a:99:4a:39:25:a9:71:
86:6a:13:dd:73:7f:e3:16:90:9f:3b:63:0e:de:83:
e1:04:87:ed:52:ef:89:2e:76:4a:63:04:90:35:c8:
b7:29:5b:f8:91:11:ac:75:79:a1:d4:cf:c8:9d:d5:
03:f3:52:6e:55:ec:e4:40:a0:b8:2d:7b:6f:50:b5:
13:b6:8a:3f:8a:3e:22:6a:72:f5:c7:d6:d8:82:85:
ae:89:96:a6:ea:10:10:60:3a:92:e6:81:b1:4a:71:
dd:1b:0b:c4:22:31:28:2b:c8:2a:18:95:82:2f:81:
bd:fd:b1:e5:23:6c:a6:35:87:e8:ce:15:fb:83:75:
76:5a:bc:7a:a5:5a:95:74:23:73:45:b5:07:2d:aa:
2a:09:bf:42:a3:f8:4b:01:bd:90:2f:81:f4:2f:81:
d7:a2:1b:03:3a:2f:6a:cb:26:77:b5:6e:12:da:7f:
f9:f7:85:06:67:50:cc:9c:12:4a:83:8d:89:3f:4c:
a9:48:cc:31:ba:5e:14:63:95:93:fe:34:08:4b:ad:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:D2:52:DA:55:50:02:FA:6B:4F:30:CF:38:12:3D:1B:1B:8E:35
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1qzSUtpVUAL6a08wzzgSPRsbjjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
54:07:42:dd:62:04:25:61:11:6c:d6:47:ad:60:34:68:45:a8:
fa:a3:ff:fd:b2:3b:68:a6:a9:25:02:e0:85:6b:60:ba:e5:9a:
8a:95:7e:f8:e3:e1:17:fa:17:3b:d0:9e:b5:11:9a:46:a6:d0:
a2:ca:55:f7:ad:5c:1d:3d:bc:27:0e:9b:0e:c5:4f:71:0f:74:
05:d2:1d:ac:64:51:d6:92:f1:8a:28:4e:4e:26:31:d3:41:ad:
1d:1a:08:8c:92:9f:b2:55:6c:98:16:f8:61:bd:0c:ce:f0:73:
3b:3b:6e:3b:63:c2:e8:10:9b:4c:ef:ce:78:b2:6a:65:f9:da:
6f:77:b4:7d:1d:96:c6:80:2a:07:65:a4:26:21:f0:c3:6a:d7:
08:55:ec:ec:49:a5:c5:cc:79:14:44:38:5a:cf:ce:ce:cc:ab:
69:33:7e:7d:11:03:b8:93:40:16:40:04:42:96:2e:2b:4a:b8:
c6:32:9b:f5:70:38:e9:63:7e:8c:c3:f0:3a:ef:72:e0:50:63:
94:50:39:e8:75:2e:41:5f:60:68:de:84:19:64:c4:df:cd:ee:
a1:49:f1:ea:21:42:99:ab:94:97:79:8d:ef:59:28:52:da:f0:
48:16:7a:f2:54:e6:1d:fe:46:a5:30:50:27:ae:e8:41:d4:22:
18:e5:aa:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVu1Nya7XQjv11G/D8f6R/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjMwMTAxMTkzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmFjZDI1MmRhNTU1MDAyZmE2YjRmMzBjZjM4MTIzZDFiMWI4ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsUKh5WBv8JU+luEOHqqjQ+N6iyR
GijNU+VSA9CjpvBhbIdx95Yq+TBqJfydK4Ac9KzPgXqZSjklqXGGahPdc3/jFpCf
O2MO3oPhBIftUu+JLnZKYwSQNci3KVv4kRGsdXmh1M/IndUD81JuVezkQKC4LXtv
ULUTtoo/ij4ianL1x9bYgoWuiZam6hAQYDqS5oGxSnHdGwvEIjEoK8gqGJWCL4G9
/bHlI2ymNYfozhX7g3V2Wrx6pVqVdCNzRbUHLaoqCb9Co/hLAb2QL4H0L4HXohsD
Oi9qyyZ3tW4S2n/594UGZ1DMnBJKg42JP0ypSMwxul4UY5WT/jQIS60h/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNas0lLaVVAC+mtPMM84Ej0bG441MB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvMXF6U1V0cFZVQUw2YTA4d3p6Z1NQUnNiampVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1HFjAwQA
1HFtAwQA1HFwMA0GCSqGSIb3DQEBCwUAA4IBAQBUB0LdYgQlYRFs1ketYDRoRaj6
o//9sjtopqklAuCFa2C65ZqKlX744+EX+hc70J61EZpGptCiylX3rVwdPbwnDpsO
xU9xD3QF0h2sZFHWkvGKKE5OJjHTQa0dGgiMkp+yVWyYFvhhvQzO8HM7O247Y8Lo
EJtM7854smpl+dpvd7R9HZbGgCoHZaQmIfDDatcIVezsSaXFzHkURDhaz87OzKtp
M359EQO4k0AWQARCli4rSrjGMpv1cDjpY36Mw/A673LgUGOUUDnodS5BX2Bo3oQZ
ZMTfze6hSfHqIUKZq5SXeY3vWShS2vBIFnryVOYd/kalMFAnruhB1CIY5aqZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org