Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RqoOrwjbNSTqoRPcAqOwLXIIbeY.roa
File: RqoOrwjbNSTqoRPcAqOwLXIIbeY.roa (raw, json)
Hash identifier: FQpL1E8XZsFnj2tugplkmhGkcgCKPXevNe/gVX1PDzU=
Subject key identifier: 46:AA:0E:AF:08:DB:35:24:EA:A1:13:DC:02:A3:B0:2D:72:08:6D:E6
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4DD2FA5B970409659858EA6D6C9BF
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RqoOrwjbNSTqoRPcAqOwLXIIbeY.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.119.0/24 maxlen: 24
212.113.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 06 Jan 2023 08:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:dd:2f:a5:b9:70:40:96:59:85:8e:a6:d6:c9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46aa0eaf08db3524eaa113dc02a3b02d72086de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:1e:af:1a:09:68:92:61:33:e5:44:aa:83:
8a:65:2f:56:30:55:cd:ca:be:94:c1:73:4f:db:40:
7d:3b:99:aa:b4:90:85:13:d3:a5:62:36:6c:a9:ca:
a1:39:c9:7e:1a:37:2d:9b:39:e5:e3:50:98:5c:4a:
bb:e4:c5:0d:79:3b:cf:34:aa:e9:d7:b0:29:4e:41:
5d:3d:30:b6:2d:88:cb:e8:b3:3c:b8:a9:57:94:85:
cb:49:e4:fc:3b:ef:73:4e:17:41:7a:94:19:6b:c0:
68:49:f7:3b:3f:f5:fa:b9:42:1b:8e:3c:7f:4f:0a:
cc:03:b5:d5:18:bd:c4:62:f8:e2:4f:b6:83:cf:83:
40:07:8f:4e:67:6d:2e:2b:b9:f2:8d:28:7e:88:c0:
c2:0b:47:b3:6c:2c:f4:ba:b1:11:e9:b5:d6:02:83:
b2:02:ac:d3:8b:4e:7b:a5:61:f2:2d:76:ce:0c:6c:
b6:6c:32:b5:5a:0a:3f:ee:51:a4:db:a1:3a:f0:be:
86:f0:3b:0b:03:0d:65:b2:17:7f:ae:35:c3:91:b2:
7a:58:2a:ee:98:ad:f1:c3:38:cc:aa:3c:0c:69:c7:
2b:c5:fa:8d:d1:24:ae:8a:65:4a:d1:31:f6:7b:30:
cd:b2:49:b1:02:32:0e:f2:00:1c:37:31:12:a4:ab:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:0E:AF:08:DB:35:24:EA:A1:13:DC:02:A3:B0:2D:72:08:6D:E6
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RqoOrwjbNSTqoRPcAqOwLXIIbeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/22
Signature Algorithm: sha256WithRSAEncryption
60:9e:8e:a4:0a:80:a6:b4:da:9b:79:fc:66:20:85:fd:52:c9:
8a:7d:1b:5c:82:1a:cc:ae:b0:f5:97:40:21:17:e2:e4:a0:9f:
24:fd:c1:a7:25:f9:6a:f6:4a:11:39:63:46:2c:23:78:2f:04:
6b:e6:4b:c2:d4:00:83:ee:f7:b2:b8:63:93:67:0f:b6:c8:12:
84:5f:d9:7f:a9:32:54:2a:af:ef:72:8e:74:86:3d:73:98:8d:
cb:12:f6:9d:45:73:ad:fb:4b:a8:5a:a6:39:59:5a:2a:df:19:
a6:fa:e6:07:a7:b6:7c:54:6f:aa:6a:a3:d8:a6:74:e2:da:2f:
af:9c:25:c1:00:e2:c7:1e:59:30:af:62:20:8d:94:c2:4d:01:
ce:80:fd:70:3b:49:28:77:41:c9:99:61:cd:65:e5:ee:b2:c4:
e5:55:7f:87:8a:44:fc:13:98:51:16:e3:d7:78:d6:20:1e:47:
38:2f:34:ad:77:08:68:61:ad:42:86:60:ae:c5:ce:33:bb:07:
6d:e9:de:5c:0e:be:8e:27:0f:5f:3e:c8:dc:10:03:37:99:10:
fa:19:1f:45:42:58:f7:74:03:db:c7:f0:7b:e1:b8:4d:f0:83:
3f:ce:20:19:8a:e5:23:62:db:8e:02:25:af:7c:27:ee:ec:6f:
01:9e:1c:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1N0vpblwQJZZhY6m1sm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjMwMTAxMTkzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFhMGVhZjA4ZGIzNTI0ZWFhMTEzZGMwMmEzYjAyZDcyMDg2ZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidserxoJaJJhM+VEqoOKZS9WMFXN
yr6UwXNP20B9O5mqtJCFE9OlYjZsqcqhOcl+Gjctmznl41CYXEq75MUNeTvPNKrp
17ApTkFdPTC2LYjL6LM8uKlXlIXLSeT8O+9zThdBepQZa8BoSfc7P/X6uUIbjjx/
TwrMA7XVGL3EYvjiT7aDz4NAB49OZ20uK7nyjSh+iMDCC0ezbCz0urER6bXWAoOy
AqzTi057pWHyLXbODGy2bDK1Wgo/7lGk26E68L6G8DsLAw1lshd/rjXDkbJ6WCru
mK3xwzjMqjwMaccrxfqN0SSuimVK0TH2ezDNskmxAjIO8gAcNzESpKstOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaqDq8I2zUk6qET3AKjsC1yCG3mMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvUnFvT3J3amJOU1Rxb1JQY0FxT3dMWElJYmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HF0MA0G
CSqGSIb3DQEBCwUAA4IBAQBgno6kCoCmtNqbefxmIIX9UsmKfRtcghrMrrD1l0Ah
F+LkoJ8k/cGnJflq9koROWNGLCN4LwRr5kvC1ACD7veyuGOTZw+2yBKEX9l/qTJU
Kq/vco50hj1zmI3LEvadRXOt+0uoWqY5WVoq3xmm+uYHp7Z8VG+qaqPYpnTi2i+v
nCXBAOLHHlkwr2IgjZTCTQHOgP1wO0kod0HJmWHNZeXussTlVX+HikT8E5hRFuPX
eNYgHkc4LzStdwhoYa1ChmCuxc4zuwdt6d5cDr6OJw9fPsjcEAM3mRD6GR9FQlj3
dAPbx/B74bhN8IM/ziAZiuUjYtuOAiWvfCfu7G8BnhwY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org