Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-gULiHDXhJ5ktfS9JwhoqTO0Oe8.roa
File: 1-gULiHDXhJ5ktfS9JwhoqTO0Oe8.roa (raw, json)
Hash identifier: 3/DvBRgYSylaYwnkYPt/s0CemovqI+wwIJ2t9FVKll4=
Subject key identifier: FA:05:0B:88:70:D7:84:9E:64:B5:F4:BD:27:08:68:A9:33:B4:39:EF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018E77590046B0885249F0B2A543EB85C898
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-gULiHDXhJ5ktfS9JwhoqTO0Oe8.roa
Signing time: Mon 25 Mar 2024 20:41:45 +0000
ROA not before: Mon 25 Mar 2024 20:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12687
IP address blocks: 212.111.192.0/19 maxlen: 24
212.111.192.0/20 maxlen: 24
212.111.192.0/21 maxlen: 24
212.111.198.0/24 maxlen: 24
212.111.199.0/24 maxlen: 24
212.111.201.0/24 maxlen: 24
212.111.202.0/23 maxlen: 24
212.111.205.0/24 maxlen: 24
212.111.206.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.208.0/22 maxlen: 22
212.111.212.0/23 maxlen: 23
212.111.213.0/24 maxlen: 24
2a01:5c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 27 Mar 2024 10:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:59:00:46:b0:88:52:49:f0:b2:a5:43:eb:85:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 25 20:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa050b8870d7849e64b5f4bd270868a933b439ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:b8:04:9e:59:31:4f:5a:85:00:99:73:26:
57:c7:53:66:2e:ed:bb:5f:62:77:1b:24:6d:9c:b7:
d0:a9:a6:fc:86:a5:04:64:5b:21:5d:9c:ab:af:d0:
41:01:9a:f9:75:b9:30:4f:08:83:b8:74:8b:fe:37:
e7:7c:c2:3c:e1:88:88:09:f9:fa:81:5a:70:59:6a:
3f:f2:dd:31:35:61:19:d6:1a:01:f4:9e:f1:76:ab:
6b:d6:46:67:fc:98:14:c0:72:0d:db:04:37:b8:51:
72:15:2e:25:c9:d0:4b:a7:62:30:a0:0d:3b:19:b8:
f4:fa:70:66:d1:44:46:8d:35:b8:3d:25:11:40:0f:
56:5a:59:96:f8:89:19:a8:ff:d0:39:6c:57:34:4c:
41:d6:6b:99:e6:50:b8:7d:ed:45:86:55:a2:e4:b9:
23:62:e3:3d:9b:d2:84:8a:0d:fb:b2:e9:7b:ae:a8:
49:e9:30:93:f8:9c:0f:8e:57:39:16:43:54:0f:de:
55:79:bb:02:f2:c8:53:8b:88:7a:81:03:4f:a4:7b:
58:2b:45:4e:c2:f7:8c:01:2b:cc:01:e0:80:71:25:
60:98:94:e4:38:29:dd:5e:ff:8b:5d:f6:6b:63:4b:
ef:1f:13:17:bc:ce:ce:7a:2a:1d:77:d6:b9:c1:c4:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:0B:88:70:D7:84:9E:64:B5:F4:BD:27:08:68:A9:33:B4:39:EF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-gULiHDXhJ5ktfS9JwhoqTO0Oe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.192.0/19
IPv6:
2a01:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
8a:e9:70:5f:27:f7:20:33:0b:65:62:84:07:43:98:c9:f2:eb:
78:d9:8f:51:fe:eb:98:cf:a1:8a:70:56:3a:18:5b:d3:4d:12:
0e:5e:58:7c:53:98:1b:ab:7e:6e:9d:20:18:d2:c2:d2:e2:9d:
21:64:1a:40:ec:02:be:ea:36:67:c3:38:ad:b2:19:f3:75:f1:
2f:33:39:71:97:28:9f:38:7b:09:17:e9:c7:70:0e:30:48:2d:
2c:ca:bd:62:60:ac:2c:66:ee:dc:11:d8:9e:82:35:87:a2:44:
aa:c0:ec:31:4e:50:a5:f5:7a:b1:e5:2b:33:2b:3f:1e:38:59:
9b:e9:d9:f3:6a:65:ec:31:1b:c2:f4:ba:b5:b8:32:be:73:d1:
33:20:7c:34:4e:5f:cc:61:f8:ad:dd:53:c9:20:e2:df:cf:97:
ef:9e:93:50:43:c4:14:4b:95:c8:96:75:67:12:98:32:d6:fb:
00:ee:7f:72:c7:5b:4f:b4:cc:2f:90:d0:a3:a6:ff:e0:44:50:
f9:bf:6c:61:6c:e7:d2:8a:92:0e:b6:eb:0a:8b:bb:38:a1:e1:
a4:d9:05:2f:67:1c:fd:9f:e4:f6:96:64:19:5a:24:e3:73:b1:
78:11:d7:7c:b7:bd:d4:6b:ab:18:3b:43:df:55:a5:25:e2:be:
bb:dd:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org