Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/G1EJerU9WMmcqXGBQeoBlt0HIIM.roa
File: G1EJerU9WMmcqXGBQeoBlt0HIIM.roa (raw, json)
Hash identifier: 8gyaOTLMYQWHK/7OzAD2yXuRnhjma1nW2NUBHyHrPuQ=
Subject key identifier: 1B:51:09:7A:B5:3D:58:C9:9C:A9:71:81:41:EA:01:96:DD:07:20:83
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01859CB66C291B0A33A1FB0F610FD20AAC5F
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/G1EJerU9WMmcqXGBQeoBlt0HIIM.roa
Signing time: Tue 10 Jan 2023 17:24:39 +0000
ROA not before: Tue 10 Jan 2023 17:24:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 212.113.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 06:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:b6:6c:29:1b:0a:33:a1:fb:0f:61:0f:d2:0a:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 10 17:24:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b51097ab53d58c99ca9718141ea0196dd072083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:52:1a:42:fd:d0:d0:c3:6d:7e:d9:f5:32:
8c:e5:5a:24:88:d9:54:97:94:a5:69:0a:2b:cb:45:
9a:cf:3d:b0:9a:68:1f:e5:07:be:42:bf:d7:4d:49:
6a:cc:7a:2f:aa:2b:95:bc:b4:08:c5:82:44:75:d6:
00:67:dd:69:c6:ac:18:1c:02:4f:7e:bd:0f:97:a9:
23:26:8a:eb:e6:c7:45:d7:56:80:4e:dd:30:98:36:
d1:1e:65:25:7b:15:6e:b0:98:c1:4b:2f:fd:a3:da:
aa:94:14:b4:0c:fb:d7:3d:ba:76:e6:19:42:2b:b2:
13:f0:2c:25:02:e9:38:92:76:a1:b8:53:c2:ab:7c:
bb:43:03:78:19:f2:96:b4:ee:e1:d9:ac:ba:a0:89:
a7:53:8f:f5:f3:5d:5b:14:a0:84:d8:8b:44:7f:c2:
33:57:6b:93:5d:fd:cd:e9:3b:15:77:bb:46:2a:dc:
95:67:d8:57:f1:34:0c:21:3a:ee:88:78:ad:3b:bc:
01:c3:d8:f9:99:a7:74:be:44:b9:bf:17:fc:f0:95:
10:b8:c8:6a:91:4f:fe:91:e9:d1:ad:65:b7:6e:93:
94:93:fc:8b:e8:55:37:b8:50:19:82:95:f7:db:89:
5b:55:ce:5f:78:9c:a4:43:5a:ec:85:52:b9:c2:1b:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:51:09:7A:B5:3D:58:C9:9C:A9:71:81:41:EA:01:96:DD:07:20:83
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/G1EJerU9WMmcqXGBQeoBlt0HIIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.106.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5e:6a:f8:5d:de:ff:70:50:6a:aa:b3:f9:a9:52:c0:29:32:
fd:47:93:d8:74:53:c1:b7:b6:e9:83:1f:91:3c:4f:35:30:04:
0d:47:a9:d7:3e:5c:18:70:8e:d7:92:6e:21:3b:58:12:a0:8f:
aa:8b:bc:3f:cd:76:86:cc:54:89:47:b7:f5:a7:f8:42:09:17:
3a:45:68:79:3a:a2:08:d2:38:c7:9c:9e:47:18:74:00:0f:fa:
dd:85:39:89:ea:73:51:74:e4:e3:3a:ef:89:85:5f:e6:4e:91:
d6:00:4a:96:9a:93:e4:57:21:8d:63:c9:76:95:9b:8e:91:cf:
2e:21:98:df:04:34:49:39:bd:61:33:70:b0:97:21:a3:52:54:
16:93:41:c6:68:f4:17:d6:33:1a:c5:3a:1d:87:6b:99:d1:0f:
d0:f9:a8:d1:f3:53:e3:b5:21:84:a5:00:12:0b:3a:b3:8d:d9:
d3:48:40:fb:4d:4f:b8:ff:a0:a1:af:2d:a7:9b:a9:4a:49:f0:
bd:b7:67:cb:b0:5a:e4:f8:62:64:9c:3b:bb:0d:9c:e8:a2:36:
85:35:1d:8d:be:f3:7b:32:72:b8:ae:75:6d:f4:ba:54:8e:2b:
3a:cf:b3:ff:87:bb:77:7b:93:13:e9:da:73:29:5a:ec:96:27:
a3:22:52:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWctmwpGwozofsPYQ/SCqxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjMwMTEwMTcyNDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjUxMDk3YWI1M2Q1OGM5OWNhOTcxODE0MWVhMDE5NmRkMDcyMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvJSGkL90NDDbX7Z9TKM5VokiNlU
l5SlaQory0Wazz2wmmgf5Qe+Qr/XTUlqzHovqiuVvLQIxYJEddYAZ91pxqwYHAJP
fr0Pl6kjJorr5sdF11aATt0wmDbRHmUlexVusJjBSy/9o9qqlBS0DPvXPbp25hlC
K7IT8CwlAuk4knahuFPCq3y7QwN4GfKWtO7h2ay6oImnU4/1811bFKCE2ItEf8Iz
V2uTXf3N6TsVd7tGKtyVZ9hX8TQMITruiHitO7wBw9j5mad0vkS5vxf88JUQuMhq
kU/+kenRrWW3bpOUk/yL6FU3uFAZgpX324lbVc5feJykQ1rshVK5whvmZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtRCXq1PVjJnKlxgUHqAZbdByCDMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvRzFFSmVyVTlXTW1jcVhHQlFlb0JsdDBISUlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HFqMA0G
CSqGSIb3DQEBCwUAA4IBAQBRXmr4Xd7/cFBqqrP5qVLAKTL9R5PYdFPBt7bpgx+R
PE81MAQNR6nXPlwYcI7Xkm4hO1gSoI+qi7w/zXaGzFSJR7f1p/hCCRc6RWh5OqII
0jjHnJ5HGHQAD/rdhTmJ6nNRdOTjOu+JhV/mTpHWAEqWmpPkVyGNY8l2lZuOkc8u
IZjfBDRJOb1hM3CwlyGjUlQWk0HGaPQX1jMaxTodh2uZ0Q/Q+ajR81PjtSGEpQAS
CzqzjdnTSED7TU+4/6Chry2nm6lKSfC9t2fLsFrk+GJknDu7DZzoojaFNR2NvvN7
MnK4rnVt9LpUjis6z7P/h7t3e5MT6dpzKVrsliejIlIt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org