Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GcVh0qv_aH_W-K6iGh0QnPYUcZ0.roa
File: GcVh0qv_aH_W-K6iGh0QnPYUcZ0.roa (raw, json)
Hash identifier: f4dQ79ApmmzGYW3nb0ro3zSM8TR2AYEm8TDavjTbGLQ=
Subject key identifier: 19:C5:61:D2:AB:FF:68:7F:D6:F8:AE:A2:1A:1D:10:9C:F6:14:71:9D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01928D02514DFC2D2824F678F1FE5454F892
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GcVh0qv_aH_W-K6iGh0QnPYUcZ0.roa
Signing time: Mon 14 Oct 2024 21:49:52 +0000
ROA not before: Mon 14 Oct 2024 21:49:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 212.111.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 09:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8d:02:51:4d:fc:2d:28:24:f6:78:f1:fe:54:54:f8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Oct 14 21:49:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c561d2abff687fd6f8aea21a1d109cf614719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:6e:25:bd:e3:63:cd:62:80:0f:52:11:60:
0b:ab:d6:21:10:7f:70:e0:48:13:8c:ab:48:37:0e:
db:3f:0c:86:18:b0:ec:93:b7:a4:34:e0:dc:46:df:
51:de:df:56:c9:85:3b:95:61:3d:62:5d:40:79:35:
2a:80:1f:3a:85:84:62:54:b8:a8:1b:b5:0d:1f:12:
12:54:d1:44:89:88:28:03:ce:4c:1f:28:96:db:7b:
71:1a:04:d4:b9:64:95:21:38:9f:c0:15:91:e5:2a:
11:2d:39:a0:b2:e3:a9:a5:b9:db:81:79:2b:6e:c1:
9e:c4:0a:c1:53:50:4d:84:b0:76:43:08:6b:2a:b9:
10:59:eb:14:2a:38:47:89:f9:73:27:52:55:bd:81:
0f:00:e2:a3:65:65:c7:d1:7e:4b:23:65:a3:c1:20:
fb:44:6a:d7:a5:23:30:c1:c8:09:0c:84:62:63:32:
c3:35:ac:fb:1a:f0:09:32:7c:95:ac:82:ea:5e:ef:
3f:6c:3e:a8:78:eb:f7:ab:c8:9b:db:a2:a3:7c:68:
48:64:74:3f:2c:16:b7:0e:c0:be:02:83:2d:d6:6a:
a8:d6:a7:a5:35:55:ed:4a:c5:1c:b7:75:ba:ba:6d:
d0:3c:77:63:31:7f:48:f1:83:29:7b:eb:fe:93:2c:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:61:D2:AB:FF:68:7F:D6:F8:AE:A2:1A:1D:10:9C:F6:14:71:9D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GcVh0qv_aH_W-K6iGh0QnPYUcZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3a:e6:e3:2f:65:03:3e:59:f4:10:86:81:ca:70:0e:aa:bb:
0c:40:e1:f7:7f:b4:bb:85:de:30:25:2e:96:7d:75:a5:88:a5:
00:cc:46:b6:38:58:26:e2:b2:4d:7e:41:0e:14:1e:a9:91:6d:
aa:d6:e1:8f:ea:18:ba:13:b6:2d:6a:5f:06:8e:9b:4d:bc:f9:
5a:11:0c:36:f2:ab:50:7d:db:c9:9b:a3:6f:7d:fb:d2:23:c1:
31:22:c5:48:11:be:b4:66:ff:67:44:34:e8:1f:32:06:72:f2:
ac:0e:75:b6:91:06:53:7f:fc:fe:6d:dc:01:43:4f:ff:f9:d8:
53:1c:75:e8:01:4c:0e:ed:f4:d9:16:43:18:dc:05:22:bc:d7:
d1:45:c6:34:6b:50:e6:f8:a3:17:40:c4:4e:28:d9:cf:76:39:
4e:ee:bf:70:b2:9d:66:55:cf:1b:38:76:a5:3e:d2:f8:6e:69:
92:39:94:bb:21:3c:f3:97:89:c7:c0:15:34:c3:e4:87:a5:92:
60:fb:52:33:31:f2:9d:26:44:07:be:f2:d5:ff:ef:ed:d1:0c:
58:af:6a:97:aa:2d:bb:2c:6b:b3:44:3b:d3:72:29:f9:11:df:
fe:05:a1:2a:86:20:c7:b0:8f:08:9e:3e:36:c8:6c:f8:01:e8:
37:7a:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:49 2024 by rpki-client on console-ams.rpki-client.org