Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/X35c7RmLBBddFi9TrwF2mIPUo_g.roa
File: X35c7RmLBBddFi9TrwF2mIPUo_g.roa (raw, json)
Hash identifier: H1+HBDKJ9gXOnWi/YfZSjomP3IHXdh9VrtGZco1cZGw=
Subject key identifier: 5F:7E:5C:ED:19:8B:04:17:5D:16:2F:53:AF:01:76:98:83:D4:A3:F8
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D4C9048BFD861FECED6F595D1C49
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/X35c7RmLBBddFi9TrwF2mIPUo_g.roa
Signing time: Sun 01 Jan 2023 16:44:56 +0000
ROA not before: Sun 01 Jan 2023 16:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212397
IP address blocks: 212.111.199.0/24 maxlen: 24
2a01:5c40:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d4:c9:04:8b:fd:86:1f:ec:ed:6f:59:5d:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7e5ced198b04175d162f53af01769883d4a3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:f4:3d:70:f3:20:41:31:93:82:7b:9d:71:
07:4a:95:c7:15:5d:11:05:4d:60:a1:b8:41:27:df:
39:63:3a:61:b3:de:a2:42:08:99:9f:67:c6:a2:13:
cc:d4:d5:03:10:60:a4:5c:f9:51:bc:37:37:68:2a:
5c:8b:be:9e:50:0c:a6:2b:9c:93:aa:1e:98:d2:4a:
6e:64:97:77:cf:17:da:96:ae:13:51:65:75:93:03:
75:6a:73:27:f8:2e:b3:48:6a:8c:9d:7b:fd:44:80:
a8:f1:47:28:9b:fc:7f:2b:e8:52:52:c8:e1:11:8d:
04:97:8b:08:c8:d3:79:41:1a:9b:fa:fa:77:63:c6:
8c:b3:bf:7a:cf:6a:a1:74:11:a6:91:42:4d:77:a6:
e8:0f:e5:d2:ad:75:0e:bc:e9:47:c6:c0:59:4d:da:
c6:29:71:71:9d:45:3a:80:c7:2c:89:21:3f:ef:2a:
ca:20:be:91:12:d4:7d:d9:5e:8d:b2:ac:12:56:3c:
05:ca:67:8f:a0:aa:b2:08:e0:8d:1b:70:98:3b:f5:
c5:75:d4:4a:05:bc:a5:00:07:a1:27:9f:aa:0f:6f:
e6:1e:42:f7:cc:ff:9f:55:14:d6:c3:f4:7c:0a:b9:
ad:d1:a8:39:8f:0d:38:61:8c:54:c9:25:62:4d:78:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:5C:ED:19:8B:04:17:5D:16:2F:53:AF:01:76:98:83:D4:A3:F8
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/X35c7RmLBBddFi9TrwF2mIPUo_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.199.0/24
IPv6:
2a01:5c40:6::/48
Signature Algorithm: sha256WithRSAEncryption
89:66:20:81:dd:a6:81:1c:1b:4c:fa:5c:fd:77:ef:4d:d6:35:
c8:f8:ca:79:a0:0a:18:81:7a:6a:5a:d9:a9:8e:f8:dc:bb:c1:
ad:5c:51:56:6c:ae:e5:0d:ad:86:23:28:ac:2d:c4:e9:a1:4d:
87:5f:57:4e:40:ec:83:e9:88:d5:89:3e:8e:09:ff:5d:6e:fa:
c6:5f:60:11:b7:91:b9:76:60:83:2f:64:15:61:0f:37:6a:fd:
a5:c3:16:66:2a:7b:be:d9:63:e1:62:fe:48:a0:05:fc:21:61:
58:57:97:0e:dc:9a:74:ef:8d:a7:03:28:80:7b:e7:78:5d:62:
2b:77:52:18:99:82:5f:f7:be:3d:ec:cf:4b:9f:27:d6:ce:a2:
e3:2e:c1:bc:7d:f2:3c:fc:09:ff:17:97:08:12:6a:ef:06:80:
69:18:71:9f:4e:6c:cd:90:f9:34:57:eb:d6:9f:32:27:d2:ec:
e0:71:bc:d1:b7:b2:9d:8c:e7:f4:89:96:d7:b0:3b:de:e4:38:
48:66:48:6a:e2:23:60:29:63:d8:7e:c0:a5:4a:2d:7c:9b:6a:
5e:34:3e:8c:47:2d:c5:15:f6:f2:47:73:90:4d:04:f5:78:7d:
3a:e1:c0:3d:48:b1:db:4d:70:7d:2b:ea:6f:1b:74:c4:e4:01:
bb:41:90:d1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVuONTJBIv9hh/s7W9ZXRxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTAxMTY0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjdlNWNlZDE5OGIwNDE3NWQxNjJmNTNhZjAxNzY5ODgzZDRhM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMH0PXDzIEExk4J7nXEHSpXHFV0R
BU1gobhBJ985Yzphs96iQgiZn2fGohPM1NUDEGCkXPlRvDc3aCpci76eUAymK5yT
qh6Y0kpuZJd3zxfalq4TUWV1kwN1anMn+C6zSGqMnXv9RICo8Ucom/x/K+hSUsjh
EY0El4sIyNN5QRqb+vp3Y8aMs796z2qhdBGmkUJNd6boD+XSrXUOvOlHxsBZTdrG
KXFxnUU6gMcsiSE/7yrKIL6REtR92V6NsqwSVjwFymePoKqyCOCNG3CYO/XFddRK
BbylAAehJ5+qD2/mHkL3zP+fVRTWw/R8Crmt0ag5jw04YYxUySViTXg2WwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF9+XO0ZiwQXXRYvU68BdpiD1KP4MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvWDM1YzdSbUxCQmRkRmk5VHJ3RjJtSVBVb19nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1G/HMA8E
AgACMAkDBwAqAVxAAAYwDQYJKoZIhvcNAQELBQADggEBAIlmIIHdpoEcG0z6XP13
703WNcj4ynmgChiBempa2amO+Ny7wa1cUVZsruUNrYYjKKwtxOmhTYdfV05A7IPp
iNWJPo4J/11u+sZfYBG3kbl2YIMvZBVhDzdq/aXDFmYqe77ZY+Fi/kigBfwhYVhX
lw7cmnTvjacDKIB753hdYit3UhiZgl/3vj3sz0ufJ9bOouMuwbx98jz8Cf8XlwgS
au8GgGkYcZ9ObM2Q+TRX69afMifS7OBxvNG3sp2M5/SJltewO97kOEhmSGriI2Ap
Y9h+wKVKLXybal40PoxHLcUV9vJHc5BNBPV4fTrhwD1IsdtNcH0r6m8bdMTkAbtB
kNE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org