Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qwHzp6ReuA4XVOQ7At2WIRqlG58.roa
File: qwHzp6ReuA4XVOQ7At2WIRqlG58.roa (raw, json)
Hash identifier: HcfwGxcC9kjX/urT0D9eTpeQBU2K2NZIju2vp1cw0jU=
Subject key identifier: AB:01:F3:A7:A4:5E:B8:0E:17:54:E4:3B:02:DD:96:21:1A:A5:1B:9F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38CD76CC2099D42EE079905B7A37D7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qwHzp6ReuA4XVOQ7At2WIRqlG58.roa
Signing time: Sun 01 Jan 2023 16:44:54 +0000
ROA not before: Sun 01 Jan 2023 16:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203757
IP address blocks: 212.111.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:cd:76:cc:20:99:d4:2e:e0:79:90:5b:7a:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab01f3a7a45eb80e1754e43b02dd96211aa51b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:73:08:60:ae:45:bc:dd:d4:29:3c:d3:92:
01:2c:2b:bd:e6:95:43:fb:6e:7c:58:9f:78:a5:cd:
bf:c6:39:84:1b:af:d5:9e:6f:c0:1e:e6:17:80:ac:
54:a0:1e:10:a3:42:27:31:a7:fd:83:c8:67:97:18:
ac:78:06:6b:55:34:c1:3d:00:1f:b2:61:a4:bb:45:
c1:38:74:3e:91:5f:75:a8:07:ad:30:00:12:83:b8:
75:c3:2a:1e:8e:76:74:65:c5:c3:b1:07:3c:4e:d8:
8f:92:aa:e0:e9:8f:86:34:55:4a:4c:6b:55:f4:99:
63:c8:16:7c:15:87:46:02:62:f5:05:69:0c:6c:3d:
5c:f8:d8:d8:5a:aa:53:98:b8:21:f3:72:61:74:db:
3f:3b:dc:31:7a:f5:c5:eb:aa:40:f4:92:b5:2e:96:
9e:88:12:ba:6b:69:b7:ef:c0:32:1f:68:4e:f4:0b:
a7:8f:c4:64:ef:c7:b8:c0:e9:b6:f8:42:03:2f:c0:
ed:2c:99:e1:cf:e9:eb:8c:e1:1a:df:5d:89:11:50:
91:4b:9b:0e:48:61:94:c5:58:ac:aa:a0:bb:9d:38:
ab:45:7f:19:ed:95:8c:84:b3:d5:57:6e:ec:bb:14:
e2:f2:81:01:f6:18:07:4f:bb:e5:b0:08:3c:27:a6:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:F3:A7:A4:5E:B8:0E:17:54:E4:3B:02:DD:96:21:1A:A5:1B:9F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qwHzp6ReuA4XVOQ7At2WIRqlG58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cd:be:cd:77:32:e6:44:14:ad:be:94:93:4b:9b:aa:f2:f2:
85:ef:fa:eb:db:58:89:cd:6d:3c:a8:71:bb:d7:83:94:ee:5b:
cd:32:d4:61:9b:a3:a8:cc:5c:df:3b:b4:3e:50:d1:77:a9:68:
3d:e0:f6:03:fd:20:e1:e6:9a:bf:8d:43:99:88:35:95:ca:94:
44:92:64:4a:69:8c:9e:c0:6c:eb:d3:09:0e:d0:db:54:e0:6f:
de:6a:88:53:08:76:78:af:1a:93:cd:4b:fe:38:95:0a:61:1c:
de:fc:5a:98:1b:f2:71:0c:64:3a:66:13:65:91:92:22:d2:01:
4e:2c:d2:80:82:24:c1:3c:6e:ef:a5:9e:bd:94:db:75:a4:df:
e8:b0:23:38:b3:c8:29:8b:71:6b:c5:32:82:c5:0a:f9:3c:e7:
a2:29:9d:db:2a:e7:9b:e2:de:55:b1:13:a7:bc:89:13:e4:34:
fd:f0:da:ad:ae:f9:f6:9e:1a:4d:aa:97:a6:c3:ef:83:3c:49:
da:c7:a7:a1:2f:40:82:18:cc:7e:87:5d:64:73:32:aa:1d:a0:
9a:38:5a:2b:1a:de:76:e0:79:9c:d3:db:e5:e6:98:b6:cf:60:
45:18:d4:6d:5a:d0:b4:cb:65:58:de:b1:02:6e:99:6e:af:26:
ae:59:3b:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuOM12zCCZ1C7geZBbejfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTAxMTY0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjAxZjNhN2E0NWViODBlMTc1NGU0M2IwMmRkOTYyMTFhYTUxYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKxzCGCuRbzd1Ck805IBLCu95pVD
+258WJ94pc2/xjmEG6/Vnm/AHuYXgKxUoB4Qo0InMaf9g8hnlxiseAZrVTTBPQAf
smGku0XBOHQ+kV91qAetMAASg7h1wyoejnZ0ZcXDsQc8TtiPkqrg6Y+GNFVKTGtV
9JljyBZ8FYdGAmL1BWkMbD1c+NjYWqpTmLgh83JhdNs/O9wxevXF66pA9JK1Lpae
iBK6a2m378AyH2hO9Aunj8Rk78e4wOm2+EIDL8DtLJnhz+nrjOEa312JEVCRS5sO
SGGUxVisqqC7nTirRX8Z7ZWMhLPVV27suxTi8oEB9hgHT7vlsAg8J6bNxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsB86ekXrgOF1TkOwLdliEapRufMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvcXdIenA2UmV1QTRYVk9RN0F0MldJUnFsRzU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/IMA0G
CSqGSIb3DQEBCwUAA4IBAQBfzb7NdzLmRBStvpSTS5uq8vKF7/rr21iJzW08qHG7
14OU7lvNMtRhm6OozFzfO7Q+UNF3qWg94PYD/SDh5pq/jUOZiDWVypREkmRKaYye
wGzr0wkO0NtU4G/eaohTCHZ4rxqTzUv+OJUKYRze/FqYG/JxDGQ6ZhNlkZIi0gFO
LNKAgiTBPG7vpZ69lNt1pN/osCM4s8gpi3FrxTKCxQr5POeiKZ3bKueb4t5VsROn
vIkT5DT98Nqtrvn2nhpNqpemw++DPEnax6ehL0CCGMx+h11kczKqHaCaOForGt52
4Hmc09vl5pi2z2BFGNRtWtC0y2VY3rECbpluryauWTu/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org