Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/qNLrMW6bGGcwOEi_94gJMmQznO4.roa
File: qNLrMW6bGGcwOEi_94gJMmQznO4.roa (raw, json)
Hash identifier: 5FmEW+U0rjcXdexh5rAhOCcU541BDT77JKTTpGrHzAw=
Subject key identifier: A8:D2:EB:31:6E:9B:18:67:30:38:48:BF:F7:88:09:32:64:33:9C:EE
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018CC6B8A39F35D6BCB5A83DB9FBF4E7947E
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/qNLrMW6bGGcwOEi_94gJMmQznO4.roa
Signing time: Mon 01 Jan 2024 20:30:38 +0000
ROA not before: Mon 01 Jan 2024 20:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206248
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
212.113.107.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 12:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a3:9f:35:d6:bc:b5:a8:3d:b9:fb:f4:e7:94:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8d2eb316e9b1867303848bff788093264339cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:f6:cb:ba:c7:b1:a7:84:7f:07:20:0f:32:
d6:01:5a:b8:a0:51:d2:d7:40:10:4c:60:65:0d:36:
d6:05:f4:bc:82:09:99:c7:b4:ee:aa:f7:71:06:de:
f9:de:09:39:91:b2:02:42:2c:b6:f7:a1:cd:08:e5:
a0:d8:cf:8a:25:e5:04:4b:f1:43:ac:78:13:ec:17:
5b:01:9a:3e:35:5a:61:ae:2a:1c:26:2c:fd:b7:8d:
ce:d4:17:c7:12:4c:e3:b7:e8:55:18:f5:bf:37:06:
64:5f:e2:ca:e8:2b:c0:34:d7:12:98:24:8d:10:b3:
cb:f6:29:8e:68:75:11:f3:3e:20:0c:68:6e:de:7f:
5d:c3:e1:55:e2:85:d5:b6:15:d9:0f:51:e1:b8:bb:
d2:86:75:29:6c:99:64:d3:39:d4:4e:f2:8c:27:35:
a8:2d:d3:a9:20:8d:1b:dd:a3:2d:2f:db:20:af:9b:
f2:4d:d6:5f:2f:ad:c1:7e:fa:17:ef:d9:bd:1f:3e:
fd:ff:9d:55:07:e5:8a:e3:ad:22:14:31:d3:54:d0:
ee:42:c8:94:0f:9f:ab:b3:7e:81:b4:34:e9:3f:d3:
ad:6a:97:ff:34:e0:d1:ee:3b:9d:e3:f3:a3:63:75:
ca:56:46:7c:6c:ac:63:30:60:dd:18:40:73:ed:6b:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:EB:31:6E:9B:18:67:30:38:48:BF:F7:88:09:32:64:33:9C:EE
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/qNLrMW6bGGcwOEi_94gJMmQznO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.107.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:33:5d:be:cc:cf:9d:cc:35:47:c3:84:06:75:5c:24:f0:1d:
18:60:2c:00:e1:a4:b7:48:c9:26:9b:5e:bb:35:61:c5:81:53:
2b:fa:48:b9:ef:ca:9b:66:00:a5:43:57:5d:4d:a8:da:cb:f2:
03:33:04:37:c2:a9:09:e4:a9:c0:75:4d:0f:62:a3:d4:1f:4a:
5d:cd:f2:12:50:e3:a4:1f:7b:f8:97:bc:5c:17:d8:65:a8:24:
1d:7b:af:17:50:e3:41:4a:e1:72:10:f3:f7:a1:29:65:72:d8:
67:68:75:97:ec:80:96:e2:0e:60:74:d5:4e:3a:7f:8e:66:38:
b5:21:97:a3:ae:fa:22:16:75:dc:9b:98:02:dc:69:80:20:93:
b6:84:32:45:49:13:b6:26:86:63:5e:f0:f4:5c:55:88:6c:a6:
64:f5:34:c8:d0:36:99:0c:57:dc:4d:4c:15:00:e0:7f:83:45:
85:99:de:3b:ec:3a:ad:b3:c6:0a:7f:e3:46:57:b3:7d:32:68:
0b:af:be:1b:5c:0e:b4:2d:a7:5b:a0:88:3f:36:aa:6d:7d:ee:
c8:dc:91:f6:3c:16:f5:99:4a:62:81:fa:fc:c0:70:71:a5:b2:
ba:8a:ac:d7:f4:bf:55:32:ab:b2:6c:91:0b:d6:c3:29:e6:77:
b3:47:c5:ff
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzGuKOfNda8tag9ufv055R+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjQwMTAxMjAzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGQyZWIzMTZlOWIxODY3MzAzODQ4YmZmNzg4MDkzMjY0MzM5Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LX2y7rHsaeEfwcgDzLWAVq4oFHS
10AQTGBlDTbWBfS8ggmZx7TuqvdxBt753gk5kbICQiy296HNCOWg2M+KJeUES/FD
rHgT7BdbAZo+NVphriocJiz9t43O1BfHEkzjt+hVGPW/NwZkX+LK6CvANNcSmCSN
ELPL9imOaHUR8z4gDGhu3n9dw+FV4oXVthXZD1HhuLvShnUpbJlk0znUTvKMJzWo
LdOpII0b3aMtL9sgr5vyTdZfL63BfvoX79m9Hz79/51VB+WK460iFDHTVNDuQsiU
D5+rs36BtDTpP9Otapf/NODR7jud4/OjY3XKVkZ8bKxjMGDdGEBz7WtvNwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKjS6zFumxhnMDhIv/eICTJkM5zuMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvcU5Mck1XNmJHR2N3T0VpXzk0Z0pNbVF6bk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1HFjAwQA
1HFrAwQA1HFtAwQA1HFwMA0GCSqGSIb3DQEBCwUAA4IBAQCOM12+zM+dzDVHw4QG
dVwk8B0YYCwA4aS3SMkmm167NWHFgVMr+ki578qbZgClQ1ddTajay/IDMwQ3wqkJ
5KnAdU0PYqPUH0pdzfISUOOkH3v4l7xcF9hlqCQde68XUONBSuFyEPP3oSllcthn
aHWX7ICW4g5gdNVOOn+OZji1IZejrvoiFnXcm5gC3GmAIJO2hDJFSRO2JoZjXvD0
XFWIbKZk9TTI0DaZDFfcTUwVAOB/g0WFmd477Dqts8YKf+NGV7N9MmgLr74bXA60
LadboIg/Nqptfe7I3JH2PBb1mUpigfr8wHBxpbK6iqzX9L9VMquybJEL1sMp5nez
R8X/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org