Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SU0heshVxr3cMWg9UAxYs2EmG-w.roa
File: SU0heshVxr3cMWg9UAxYs2EmG-w.roa (raw, json)
Hash identifier: jSAoK2fDcAETUbZOqjPQZz46Aqp2bkujN6InTA//bwg=
Subject key identifier: 49:4D:21:7A:C8:55:C6:BD:DC:31:68:3D:50:0C:58:B3:61:26:1B:EC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F2A2FB1860CA6CD6DA0890A416C2DEAB8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SU0heshVxr3cMWg9UAxYs2EmG-w.roa
Signing time: Mon 29 Apr 2024 14:08:39 +0000
ROA not before: Mon 29 Apr 2024 14:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139660
IP address blocks: 213.210.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 12:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2a:2f:b1:86:0c:a6:cd:6d:a0:89:0a:41:6c:2d:ea:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 29 14:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=494d217ac855c6bddc31683d500c58b361261bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:2a:d2:ac:2e:57:7f:b3:30:ca:f4:5f:ce:
39:57:4e:19:9e:4a:0a:50:59:4d:a6:bb:ad:64:b5:
35:1a:8c:19:78:60:d7:9f:98:69:ea:2f:c8:eb:81:
2c:4f:33:16:af:ce:bd:04:c0:d9:87:22:4e:ae:da:
5a:93:06:b8:d4:18:49:98:c2:0d:6e:31:d1:d2:60:
f4:f5:e2:e8:1b:42:94:bc:70:27:c9:d1:0e:c8:5f:
2f:86:18:4c:26:54:c3:94:d5:f5:d3:d8:89:4d:8d:
7d:c4:22:7b:43:bf:f3:16:12:85:87:1d:7a:d8:a0:
1e:17:f9:95:cd:e8:e8:16:b9:02:fa:da:12:6d:44:
2c:bb:24:87:79:b8:7f:d9:cc:5f:86:d2:4c:25:61:
dd:81:68:81:6d:0a:c6:92:cb:bc:7f:6a:9c:22:ae:
e9:46:d8:ef:c0:55:c3:af:49:b4:7d:b4:56:a5:cf:
a5:6a:df:76:73:6e:95:41:f2:c3:48:08:b9:99:cd:
ee:16:4e:64:88:5b:43:14:17:39:4e:96:bb:dd:1f:
f2:09:79:46:8e:99:86:0f:f2:75:9c:34:5f:6f:8d:
ea:44:0b:f7:f5:c2:4c:75:06:60:29:a8:1e:85:00:
e9:96:99:f8:62:7a:45:f2:08:5d:aa:d8:1d:d0:27:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:21:7A:C8:55:C6:BD:DC:31:68:3D:50:0C:58:B3:61:26:1B:EC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SU0heshVxr3cMWg9UAxYs2EmG-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9a:71:d4:1e:db:a4:37:40:8f:d4:08:43:be:f4:89:bd:67:
3e:e1:3b:1c:63:be:af:79:04:81:86:c0:9a:bc:1d:25:71:86:
47:95:a0:24:51:22:c1:38:5e:e6:9e:95:f9:4f:b6:40:59:9d:
d6:07:75:c5:e8:e5:c1:f5:d9:40:b9:23:9e:43:5b:cd:4b:af:
78:0a:eb:78:65:39:27:4f:00:90:d1:94:b6:f4:b5:d1:a3:7a:
d9:ef:4b:5f:6b:e2:b6:d4:fb:8d:3d:2f:32:69:1d:8d:05:a3:
aa:85:91:62:2a:53:1c:37:de:7d:21:a2:52:60:2c:01:8c:d9:
af:0f:9a:1e:4c:aa:d8:61:44:56:a5:fd:d2:c8:3c:61:29:99:
41:8d:fa:9d:41:71:19:b9:f9:dd:bd:12:e3:64:08:52:78:86:
4d:d6:27:d3:ce:94:26:87:18:1d:36:b7:7a:84:56:f0:4c:28:
c8:c1:97:fa:93:af:76:a3:f4:bc:d9:4f:50:e5:b3:09:b9:63:
be:b5:84:a4:09:d9:3e:aa:19:1c:39:44:de:0d:d2:f9:6c:8f:
c6:08:1f:0c:59:e3:7d:5f:1a:c0:af:b2:d9:18:3c:62:e7:81:
cf:42:96:46:19:82:ee:8a:88:33:37:a9:83:1c:b1:90:f4:45:
fd:69:3d:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8qL7GGDKbNbaCJCkFsLeq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDI5MTQwODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTRkMjE3YWM4NTVjNmJkZGMzMTY4M2Q1MDBjNThiMzYxMjYxYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXQq0qwuV3+zMMr0X845V04ZnkoK
UFlNprutZLU1GowZeGDXn5hp6i/I64EsTzMWr869BMDZhyJOrtpakwa41BhJmMIN
bjHR0mD09eLoG0KUvHAnydEOyF8vhhhMJlTDlNX109iJTY19xCJ7Q7/zFhKFhx16
2KAeF/mVzejoFrkC+toSbUQsuySHebh/2cxfhtJMJWHdgWiBbQrGksu8f2qcIq7p
RtjvwFXDr0m0fbRWpc+lat92c26VQfLDSAi5mc3uFk5kiFtDFBc5Tpa73R/yCXlG
jpmGD/J1nDRfb43qRAv39cJMdQZgKagehQDplpn4YnpF8ghdqtgd0Ce1RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFElNIXrIVca93DFoPVAMWLNhJhvsMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvU1UwaGVzaFZ4cjNjTVdnOVVBeFlzMkVtRy13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dI/MA0G
CSqGSIb3DQEBCwUAA4IBAQCdmnHUHtukN0CP1AhDvvSJvWc+4TscY76veQSBhsCa
vB0lcYZHlaAkUSLBOF7mnpX5T7ZAWZ3WB3XF6OXB9dlAuSOeQ1vNS694Cut4ZTkn
TwCQ0ZS29LXRo3rZ70tfa+K21PuNPS8yaR2NBaOqhZFiKlMcN959IaJSYCwBjNmv
D5oeTKrYYURWpf3SyDxhKZlBjfqdQXEZufndvRLjZAhSeIZN1ifTzpQmhxgdNrd6
hFbwTCjIwZf6k692o/S82U9Q5bMJuWO+tYSkCdk+qhkcOUTeDdL5bI/GCB8MWeN9
XxrAr7LZGDxi54HPQpZGGYLuiogzN6mDHLGQ9EX9aT2U
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org