Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1rTgqcW4Y-5apJRwLHRJUvuG4Og.roa
File: 1rTgqcW4Y-5apJRwLHRJUvuG4Og.roa (raw, json)
Hash identifier: KTuSyt2gH+YOwlfwRV+tOKM8/QLpelD82Hlipei4ztA=
Subject key identifier: D6:B4:E0:A9:C5:B8:63:EE:5A:A4:94:70:2C:74:49:52:FB:86:E0:E8
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018751E9E008D8D25E77BD7AA326A6B5249E
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1rTgqcW4Y-5apJRwLHRJUvuG4Og.roa
Signing time: Wed 05 Apr 2023 14:54:54 +0000
ROA not before: Wed 05 Apr 2023 14:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 212.113.119.0/24 maxlen: 24
212.113.106.0/24 maxlen: 24
212.113.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:e9:e0:08:d8:d2:5e:77:bd:7a:a3:26:a6:b5:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Apr 5 14:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6b4e0a9c5b863ee5aa494702c744952fb86e0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:3f:cb:dd:b3:dd:a5:ba:4b:70:af:4a:34:
a9:8d:f4:08:3c:d1:d3:3a:59:5e:bd:6e:87:35:3c:
54:a3:85:9e:31:e8:72:1b:10:d7:b2:79:62:b6:06:
82:db:89:34:45:8c:91:71:c6:da:31:75:02:d3:9e:
20:29:6e:19:00:93:ae:7b:f9:01:78:74:3a:dd:24:
40:6d:72:f9:7f:09:2d:1f:a3:a0:bf:b7:a9:5b:9b:
82:38:52:33:8f:e9:62:3f:0c:46:a1:5c:a3:61:02:
d8:f9:56:ba:e5:0b:23:a8:3f:a5:65:30:59:69:62:
8b:58:23:08:e7:ef:b6:16:37:17:a7:1f:a0:5e:5f:
20:c2:fe:78:39:0a:bc:6e:c1:86:cb:f2:05:b4:87:
31:9b:eb:ec:59:c4:eb:0c:34:e1:a1:88:92:e9:60:
1f:f9:6b:f3:78:47:21:0b:ad:34:6e:8f:ee:55:82:
8f:8a:d2:75:62:53:34:f5:b6:9f:66:b9:18:81:20:
20:1f:37:3c:e2:54:5a:5d:ab:cf:e1:eb:07:23:81:
96:4e:b0:c4:ec:76:aa:10:fb:2d:30:ff:a5:15:69:
ae:fe:00:b3:20:f5:c2:65:8a:f1:cd:54:06:75:b8:
76:0f:f6:ca:21:fc:21:9e:1e:ce:89:e1:9c:f6:f9:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B4:E0:A9:C5:B8:63:EE:5A:A4:94:70:2C:74:49:52:FB:86:E0:E8
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1rTgqcW4Y-5apJRwLHRJUvuG4Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.106.0/24
212.113.116.0/24
212.113.119.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a5:d0:b8:ae:f4:bc:27:7b:2c:22:e1:0f:af:51:ae:19:a0:
57:0e:fb:a7:19:c2:37:83:79:b9:89:fe:10:8c:a9:eb:5a:48:
44:ce:23:a3:2b:75:01:96:59:cc:bc:d6:b4:68:10:45:6a:ee:
b6:59:a1:32:35:2b:4c:eb:cb:58:4f:ba:20:a8:c2:07:05:91:
f2:af:8f:f3:6d:6f:bb:c5:46:54:15:18:8b:9e:88:51:da:19:
ba:4a:5f:e5:a0:0d:62:26:93:87:1b:c9:35:96:8e:81:f6:01:
12:30:e1:15:83:1e:a4:fa:c7:0d:4f:1a:f3:3d:e8:54:42:27:
a7:35:be:ad:67:87:54:cb:9c:78:cb:92:6c:49:8a:38:39:1c:
91:02:50:34:de:a1:32:39:74:6a:f9:40:37:9f:39:bb:6c:3e:
2a:6d:2a:0b:4d:a4:fc:0b:dd:5e:d0:4c:20:db:80:d6:2f:b8:
87:62:42:63:a3:df:f8:ba:90:fa:da:16:35:83:b1:fd:4d:93:
fd:b5:0e:84:b1:c8:9e:9f:d8:3f:b0:d9:22:6a:82:9d:fb:21:
a6:fb:5b:f4:77:4e:6b:a8:f1:16:1d:78:fe:ef:c9:4e:39:5c:
f6:65:4a:fa:9e:cf:02:dc:36:77:50:4e:80:d2:36:d7:d0:7b:
22:62:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org