Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/AqI_KogMr2irDOl-E8AosFNr4y8.roa
File: AqI_KogMr2irDOl-E8AosFNr4y8.roa (raw, json)
Hash identifier: GiTulLY0Z/jdC6OJyzCqGn7s0wtnTZj46BniPx7YEco=
Subject key identifier: 02:A2:3F:2A:88:0C:AF:68:AB:0C:E9:7E:13:C0:28:B0:53:6B:E3:2F
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0192F031B1E7CA4BE99C6E54B46026CD87BB
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/AqI_KogMr2irDOl-E8AosFNr4y8.roa
Signing time: Sun 03 Nov 2024 04:04:01 +0000
ROA not before: Sun 03 Nov 2024 04:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 212.113.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 06:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:31:b1:e7:ca:4b:e9:9c:6e:54:b4:60:26:cd:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Nov 3 04:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02a23f2a880caf68ab0ce97e13c028b0536be32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:e2:31:33:9a:94:c8:9b:d7:f4:64:79:86:
97:e2:f6:6d:3a:16:52:e9:7d:8c:b0:eb:5b:f6:f7:
c8:4d:55:27:1c:8b:7a:ca:1e:42:78:9e:04:04:ee:
7b:a3:e9:09:dd:f1:ac:1d:3f:70:a6:4e:ae:47:82:
e5:47:dc:01:2a:1c:bb:70:ce:cc:d4:50:76:1c:fd:
f9:41:ec:2f:ec:7a:40:fb:9c:d8:9f:d1:24:20:17:
a0:3f:c8:1a:ef:9c:cb:37:54:d6:a7:73:57:dd:83:
e6:15:c5:d4:e4:d2:23:cc:68:60:3a:0d:5f:b2:d7:
c4:15:d6:78:38:d7:e7:91:53:38:80:69:9f:09:cf:
3f:dc:48:6f:db:e6:8b:1a:35:88:d9:67:b9:83:5f:
b1:f3:85:25:2d:49:86:3b:e2:53:ca:2a:af:b0:79:
0c:0e:63:ba:a7:60:8f:96:c9:ea:55:73:0c:c5:40:
b2:5e:e3:b0:05:3f:8c:2b:c4:50:8a:4d:38:e3:cb:
1c:a4:95:9b:d0:cb:27:1d:2b:5b:53:68:c3:04:a7:
06:34:18:59:16:f0:48:43:40:1d:cb:6c:27:6a:13:
fa:dc:94:fa:9e:b2:75:13:3c:fd:a6:b4:bc:7d:ef:
69:10:51:61:be:98:d7:96:60:02:2f:67:4a:40:8a:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:3F:2A:88:0C:AF:68:AB:0C:E9:7E:13:C0:28:B0:53:6B:E3:2F
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/AqI_KogMr2irDOl-E8AosFNr4y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:13:38:35:bd:b3:14:9f:94:cb:ac:76:5a:b8:b3:73:af:fc:
02:fa:c7:ee:f9:64:19:21:bd:21:7e:56:ec:ef:bb:31:40:e1:
d1:0d:e4:34:bb:74:79:0a:a6:e9:fe:52:2e:88:37:bd:fe:bd:
0e:e8:ab:7d:c9:83:f2:f9:30:22:80:df:79:e8:c6:a5:29:3b:
2a:21:52:33:15:67:95:bb:48:a7:78:c3:ce:25:78:9c:64:c6:
69:73:0e:32:9b:f1:3d:ba:c1:2d:db:a7:1a:2b:92:1e:ea:96:
3a:cf:e6:bb:89:e6:7a:15:20:56:1e:75:a0:87:8a:20:52:0f:
76:f1:49:4c:8a:75:34:56:71:28:aa:50:d2:36:04:93:5f:43:
44:22:a3:0c:2a:2a:31:0b:19:b7:05:64:88:5e:df:9b:56:bb:
e1:cc:e2:07:71:9b:64:e8:e3:2d:3e:72:55:9f:6e:63:b4:68:
54:4b:57:a6:9f:cb:5e:7c:18:4b:73:d4:b1:8c:49:ee:63:1e:
13:6f:d5:fa:86:70:7e:1c:35:8e:b5:d5:8a:ce:b7:92:b1:2b:
ea:86:2e:cd:24:c3:7a:f4:68:b2:9b:09:eb:79:d1:83:5a:26:
41:ae:6a:69:90:e2:19:d6:59:55:53:30:43:d8:4e:2a:57:4f:
0e:fb:34:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLwMbHnykvpnG5UtGAmzYe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjQxMTAzMDQwNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmEyM2YyYTg4MGNhZjY4YWIwY2U5N2UxM2MwMjhiMDUzNmJlMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ziMTOalMib1/RkeYaX4vZtOhZS
6X2MsOtb9vfITVUnHIt6yh5CeJ4EBO57o+kJ3fGsHT9wpk6uR4LlR9wBKhy7cM7M
1FB2HP35Qewv7HpA+5zYn9EkIBegP8ga75zLN1TWp3NX3YPmFcXU5NIjzGhgOg1f
stfEFdZ4ONfnkVM4gGmfCc8/3Ehv2+aLGjWI2We5g1+x84UlLUmGO+JTyiqvsHkM
DmO6p2CPlsnqVXMMxUCyXuOwBT+MK8RQik0448scpJWb0MsnHStbU2jDBKcGNBhZ
FvBIQ0Ady2wnahP63JT6nrJ1Ezz9prS8fe9pEFFhvpjXlmACL2dKQIrSPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKiPyqIDK9oqwzpfhPAKLBTa+MvMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvQXFJX0tvZ01yMmlyRE9sLUU4QW9zRk5yNHk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HFwMA0G
CSqGSIb3DQEBCwUAA4IBAQB7Ezg1vbMUn5TLrHZauLNzr/wC+sfu+WQZIb0hflbs
77sxQOHRDeQ0u3R5Cqbp/lIuiDe9/r0O6Kt9yYPy+TAigN956MalKTsqIVIzFWeV
u0ineMPOJXicZMZpcw4ym/E9usEt26caK5Ie6pY6z+a7ieZ6FSBWHnWgh4ogUg92
8UlMinU0VnEoqlDSNgSTX0NEIqMMKioxCxm3BWSIXt+bVrvhzOIHcZtk6OMtPnJV
n25jtGhUS1emn8tefBhLc9SxjEnuYx4Tb9X6hnB+HDWOtdWKzreSsSvqhi7NJMN6
9GiymwnredGDWiZBrmppkOIZ1llVUzBD2E4qV08O+zRz
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:23 2025 by rpki-client