Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/guBbhBesoqj6Vt3g7fR9Pptgoks.roa
File: guBbhBesoqj6Vt3g7fR9Pptgoks.roa (raw, json)
Hash identifier: B3mT71PZRAhceY5Nsq+hWlM+cme5dO3uldv4iUvxJoA=
Subject key identifier: 82:E0:5B:84:17:AC:A2:A8:FA:56:DD:E0:ED:F4:7D:3E:9B:60:A2:4B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D44B1614905D72380D9B42472DF3
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/guBbhBesoqj6Vt3g7fR9Pptgoks.roa
Signing time: Sun 01 Jan 2023 16:44:56 +0000
ROA not before: Sun 01 Jan 2023 16:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212343
IP address blocks: 212.111.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d4:4b:16:14:90:5d:72:38:0d:9b:42:47:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82e05b8417aca2a8fa56dde0edf47d3e9b60a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:b1:d7:04:95:d6:93:84:5b:e7:86:34:ec:
bb:ca:0d:7a:c9:29:5a:49:ca:d5:ce:a8:6e:52:29:
c3:34:16:c5:fe:e2:c1:2f:1c:3d:b7:20:c9:5d:93:
e3:56:d5:7d:47:8e:b8:fe:16:08:12:1b:d3:a0:75:
85:a0:ae:21:42:e9:99:4f:08:e9:5b:64:c1:f5:5f:
f4:2a:90:31:8a:bd:28:6d:1a:09:e9:09:ce:e4:50:
72:f9:b2:6a:91:46:2d:63:a2:9a:5f:0c:3f:bc:c7:
77:0c:04:09:3c:5f:b3:6c:89:46:69:96:88:3a:73:
34:98:09:43:02:e9:eb:37:53:b4:8f:e7:77:30:b1:
45:84:da:20:f2:b9:de:6c:30:ee:22:2a:fb:cb:63:
d1:b6:41:f0:8a:d8:e6:21:ac:7c:f3:3c:26:2e:eb:
6e:28:88:d2:0f:bd:63:85:c7:cf:a4:1b:fd:1a:a5:
2a:34:38:dc:36:e2:ba:07:2c:b3:99:01:64:89:63:
e7:ac:c3:29:50:12:a2:9b:bf:f6:3c:75:91:65:06:
cf:51:7c:4e:9c:e9:b3:9a:9e:49:9a:12:3c:e2:62:
30:2e:ba:94:55:81:58:11:76:2d:87:7e:b0:f2:c4:
68:fd:d4:34:8d:e6:1e:f0:96:0d:26:ff:f6:9d:e6:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:5B:84:17:AC:A2:A8:FA:56:DD:E0:ED:F4:7D:3E:9B:60:A2:4B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/guBbhBesoqj6Vt3g7fR9Pptgoks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:70:f8:be:e6:47:dc:42:a8:1d:59:9f:eb:8b:47:ca:af:77:
42:d6:66:04:22:e4:3b:88:14:01:71:82:9c:13:92:83:2e:f4:
3d:c3:4b:0d:0d:43:6b:22:22:08:3b:97:2d:93:f0:87:11:fe:
9c:2c:50:fa:9b:59:e1:39:15:b4:ec:ba:d2:48:d7:7f:94:c7:
7e:be:e8:73:a1:e2:27:f2:3e:c3:35:8d:68:2c:8e:38:26:f1:
4b:a9:26:6b:ef:a1:3f:04:bc:37:ee:ad:e5:ea:5e:d3:2d:c2:
1d:d5:fe:2d:b9:3a:93:41:a7:2f:77:e9:61:74:45:1d:57:31:
cb:b8:ae:69:15:d8:7e:fa:07:d3:7e:3a:69:de:ee:4f:50:e5:
af:f8:e7:0c:ed:41:fa:29:60:ff:4b:c5:62:01:c9:be:3a:aa:
80:51:52:cf:d6:65:bb:3a:e1:67:34:25:c2:77:b3:25:d4:07:
7e:db:ad:87:51:5b:30:c6:33:7c:c2:9d:66:32:30:76:d8:53:
f5:bd:64:07:4f:a6:f8:5e:4a:72:63:aa:28:5b:d2:ec:e3:db:
62:e3:ab:09:e1:33:c7:bf:92:76:35:a9:84:13:e1:87:79:dd:
7d:8a:e0:90:08:8b:25:0f:41:7e:2e:ce:b4:71:c6:98:59:34:
89:65:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org