Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/A844yvUUQhf4JX4GDG1Imwe6KQ8.roa
File: A844yvUUQhf4JX4GDG1Imwe6KQ8.roa (raw, json)
Hash identifier: 9mBiP+Mt+CVz4GBaQgl+wqRAucTbJBXMvlyo75Ff3wc=
Subject key identifier: 03:CE:38:CA:F5:14:42:17:F8:25:7E:06:0C:6D:48:9B:07:BA:29:0F
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018EDBAE755431F0DDB1D3E60E3D88A0DA58
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/A844yvUUQhf4JX4GDG1Imwe6KQ8.roa
Signing time: Sun 14 Apr 2024 08:17:07 +0000
ROA not before: Sun 14 Apr 2024 08:17:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 212.113.107.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 11:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:ae:75:54:31:f0:dd:b1:d3:e6:0e:3d:88:a0:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Apr 14 08:17:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ce38caf5144217f8257e060c6d489b07ba290f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:ac:e4:94:12:0b:8e:05:c3:61:ce:eb:fb:
ff:64:3d:31:41:a4:1d:a7:69:80:ba:a9:a6:62:fd:
5c:40:bb:46:0b:b3:d7:58:9b:8a:36:c3:e0:48:2d:
62:eb:5b:aa:a8:5d:f4:13:8a:1a:b2:19:3c:a2:73:
a4:fa:d7:cd:31:94:d4:c9:0f:b0:ad:6f:91:8c:5c:
6f:ea:fe:9e:24:05:e0:ef:55:7d:a5:32:78:5b:f7:
c9:db:4f:2f:35:7b:24:74:60:b4:f5:1b:7e:04:6d:
e0:0a:30:0c:26:a4:b0:4d:1c:69:d6:7f:a5:a7:26:
4e:42:5e:8e:07:31:89:90:74:2a:31:66:15:f1:13:
48:97:ab:9c:6b:69:23:ad:90:f7:15:6d:f8:5f:59:
74:07:6c:ba:4c:23:7a:c6:9e:7b:9b:3d:95:df:98:
96:c7:5b:77:c7:06:d5:0d:e7:8c:ff:4a:c4:e3:92:
72:f3:84:73:9c:45:3e:c9:39:36:08:ac:4e:72:85:
a4:f7:10:97:51:25:cc:ce:42:59:a7:59:d3:71:13:
6c:ce:65:42:f6:6e:76:9a:28:30:0f:59:0f:61:5c:
52:41:06:f1:d5:58:d5:19:6e:b6:e5:74:db:5f:19:
1d:44:48:a2:e7:aa:9e:42:c8:e1:73:01:93:63:02:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:38:CA:F5:14:42:17:F8:25:7E:06:0C:6D:48:9B:07:BA:29:0F
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/A844yvUUQhf4JX4GDG1Imwe6KQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.107.0/24
212.113.109.0/24
Signature Algorithm: sha256WithRSAEncryption
57:74:e9:a5:17:b9:c5:45:ef:c3:4d:d3:82:d2:64:c9:55:d8:
4d:fe:79:88:55:7b:99:83:01:2f:d3:14:b6:d6:65:fd:99:c5:
75:e0:cf:c7:74:ad:7f:e3:31:76:1e:2f:a1:5d:de:33:69:bd:
95:21:6f:22:4f:b5:ed:f0:b2:d2:0e:fb:64:4e:7f:38:5b:fc:
5e:8b:aa:dc:b8:68:cf:66:66:34:9c:da:7b:7a:24:51:b3:5a:
3a:3c:93:ef:67:ce:38:48:9f:8b:c7:4e:04:6c:fb:5a:24:42:
b3:cf:e2:db:f0:2f:c9:f7:b6:e1:5a:1b:d9:94:30:cc:e8:6f:
21:d1:33:f1:3e:d5:8b:7a:f1:73:2b:c8:0c:a6:3d:04:00:cc:
00:70:3e:88:a0:f0:41:d2:2d:bf:64:f6:3a:af:6c:9d:7d:88:
61:ec:5d:d6:23:41:05:af:98:53:40:f7:05:af:89:f7:bf:c4:
88:75:ce:00:3d:95:7a:ff:9d:ad:78:d5:7c:76:dc:c1:90:40:
5c:8f:d2:80:53:20:ff:51:93:6f:14:a3:08:66:73:b6:59:4e:
c6:8a:50:8b:ca:b3:59:98:7c:08:51:73:f9:b9:1e:13:4e:f2:
aa:a7:84:21:69:d2:c9:4f:5f:9e:63:23:bd:38:b7:1a:21:43:
c9:c0:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org