Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/M53qajsCrg5zm6MqwWYiwAGsJHg.roa
File: M53qajsCrg5zm6MqwWYiwAGsJHg.roa (raw, json)
Hash identifier: N/vwdPgKQ6SVlY9mn79HgN7f9eexTfzr+uDVDoR4kZg=
Subject key identifier: 33:9D:EA:6A:3B:02:AE:0E:73:9B:A3:2A:C1:66:22:C0:01:AC:24:78
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D744B76816AC3BC344042317173C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/M53qajsCrg5zm6MqwWYiwAGsJHg.roa
Signing time: Sun 01 Jan 2023 16:44:56 +0000
ROA not before: Sun 01 Jan 2023 16:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399618
IP address blocks: 212.111.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d7:44:b7:68:16:ac:3b:c3:44:04:23:17:17:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339dea6a3b02ae0e739ba32ac16622c001ac2478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:f6:7a:04:83:e2:44:6a:8b:a0:fb:5f:c2:
9f:aa:f8:05:e5:78:2c:b7:b3:5b:e8:af:ae:d4:8c:
ee:7b:cf:08:aa:bb:1a:02:19:91:eb:ea:0f:31:24:
e1:60:fe:3f:61:aa:f1:7f:f2:2a:95:f7:dd:11:69:
68:47:65:d1:dc:8a:ee:91:75:ea:c4:5b:ba:eb:61:
f4:c1:a3:72:db:61:c8:67:50:86:7f:2d:35:91:66:
99:d9:47:a8:5e:b2:c0:bf:3e:b4:57:1f:d7:06:7d:
c6:5a:22:1c:b1:2b:b9:93:14:33:9c:5c:66:cd:75:
cc:9c:87:47:ec:77:f4:55:51:65:d1:cd:25:e2:51:
e1:ac:b1:b5:75:ee:52:a2:55:f5:cb:4b:b6:4b:d8:
f4:48:7e:1b:d7:3b:48:62:33:67:7b:21:36:28:6a:
ee:7d:3e:58:49:54:0f:ae:5f:2f:c9:d4:77:0a:e4:
4b:bf:31:09:1e:6a:cd:4d:c4:6b:c8:e3:75:7b:ba:
a9:49:f9:c3:6a:f0:41:04:f6:de:cb:27:99:e9:ad:
71:32:61:0d:8e:0c:c6:bb:85:8f:c9:25:72:43:22:
52:ab:a3:62:29:ec:70:d2:ed:07:06:ef:6a:2d:4b:
d2:cd:13:db:0e:5f:c5:41:c8:21:d1:5b:85:19:96:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:EA:6A:3B:02:AE:0E:73:9B:A3:2A:C1:66:22:C0:01:AC:24:78
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/M53qajsCrg5zm6MqwWYiwAGsJHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:48:8a:64:4a:a0:90:51:64:99:b6:81:ba:13:1c:21:fd:8e:
01:46:4b:41:93:5c:3c:31:7d:2c:c6:4c:0e:1f:cd:34:a3:49:
ba:64:e9:54:ce:2c:b0:98:e5:a0:2f:f6:61:dc:47:10:f6:27:
ab:05:2e:db:72:05:14:cd:f1:89:cc:f4:a4:04:7a:c0:b1:26:
45:e2:f5:36:89:40:47:1f:c4:82:56:e3:c9:7d:88:d5:a9:d4:
16:76:be:14:6a:50:e9:fc:d4:94:c4:14:44:ef:13:eb:7a:29:
ed:90:71:ff:47:26:bb:b0:94:43:ca:49:cd:58:65:ab:cc:f1:
a4:cf:d4:1e:44:02:26:40:31:96:bc:e0:73:b3:7a:8e:e6:8e:
f2:9a:76:b4:b0:b8:b7:9d:43:ae:24:89:04:45:20:29:cd:92:
73:81:d0:b4:79:fd:00:26:66:b4:ed:17:e8:7c:00:93:f4:94:
2d:17:eb:be:9f:e8:e8:d9:bc:f5:d7:c3:b2:9c:a8:fe:d4:ee:
ad:23:31:3f:e4:f1:bc:c7:3a:22:f0:d9:24:2c:54:94:2f:7a:
3f:b4:22:90:36:4b:0c:3a:82:0c:d5:bf:af:9d:a7:64:b8:93:
b6:80:b4:56:4d:21:2c:74:07:e7:f1:eb:bd:a5:bd:d5:df:58:
c1:b0:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org