Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/EXWHy8pQjHXNfBdxXs_ZK4y_s0Q.roa
File: EXWHy8pQjHXNfBdxXs_ZK4y_s0Q.roa (raw, json)
Hash identifier: 6XmIXpLVJOpNfvxVLSwkKKqYFDd+vPq9c1r+eFKL/yg=
Subject key identifier: 11:75:87:CB:CA:50:8C:75:CD:7C:17:71:5E:CF:D9:2B:8C:BF:B3:44
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 018BA95E654990690B9C4DD5CBACD28B681A
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/EXWHy8pQjHXNfBdxXs_ZK4y_s0Q.roa
Signing time: Tue 07 Nov 2023 10:40:17 +0000
ROA not before: Tue 07 Nov 2023 10:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12693
IP address blocks: 212.110.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:5e:65:49:90:69:0b:9c:4d:d5:cb:ac:d2:8b:68:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Nov 7 10:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=117587cbca508c75cd7c17715ecfd92b8cbfb344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cc:d8:7b:0b:1f:98:a3:0c:cb:e0:62:e4:42:
3e:a6:75:ca:5f:95:dc:89:a8:c3:07:41:c2:1e:52:
46:2a:c7:1f:3b:96:4f:a7:0a:27:86:f7:2f:3c:8a:
78:25:f7:e2:c2:0e:da:f3:e5:ad:11:4f:a4:54:5c:
3d:f7:e3:c0:38:3b:5a:90:95:42:4e:54:b3:ba:18:
be:ae:87:d3:24:e4:45:79:4b:20:e2:38:b7:18:f6:
67:d6:b6:d7:4a:6e:65:3a:c8:3c:e8:f2:67:c1:71:
05:09:a0:3c:b3:b2:ef:d9:af:7b:79:da:f3:4f:78:
b1:c4:63:c2:a4:1a:2b:00:15:2c:43:71:a5:06:77:
86:ce:c8:ca:a6:24:63:48:17:cc:af:77:32:66:26:
3b:d3:52:f1:d4:43:cf:95:5c:6a:01:44:b4:a6:57:
27:5b:75:01:b6:ba:98:c3:f6:4e:2d:97:9c:44:31:
b9:2a:21:a6:45:ca:48:1a:12:9e:94:85:04:01:d3:
44:ce:8d:9d:c7:1d:c6:19:9d:c7:41:d8:25:79:0d:
bb:57:94:97:6f:e0:53:8d:60:40:1f:b4:6a:f8:de:
72:c2:21:64:57:f9:87:66:12:46:50:53:97:4f:5a:
86:ff:f1:34:86:32:4f:1e:fe:76:1d:87:28:3a:c8:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:75:87:CB:CA:50:8C:75:CD:7C:17:71:5E:CF:D9:2B:8C:BF:B3:44
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/EXWHy8pQjHXNfBdxXs_ZK4y_s0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.224.0/19
Signature Algorithm: sha256WithRSAEncryption
56:32:79:ee:9d:46:c0:a4:26:b3:98:44:f5:88:51:01:08:43:
ef:95:bb:61:6e:80:54:7a:e1:e3:ac:14:f2:d6:85:13:d7:32:
fe:6e:b0:50:f1:29:5c:37:96:07:05:b5:fe:da:12:90:db:9f:
da:70:7d:2f:cf:29:f6:2f:f8:d8:4b:26:40:d7:07:45:5f:c4:
c2:25:7c:89:26:30:4b:5a:f5:52:7d:98:7a:fa:d8:10:95:f1:
ac:9d:27:20:52:9f:08:89:ca:17:59:d8:d6:5a:bd:a0:dd:42:
31:4f:28:31:da:8d:a3:c3:a5:6d:e0:5a:5d:17:d9:b1:b1:d2:
83:fa:2b:c5:36:6d:fc:bb:bd:98:17:45:60:18:8f:0c:a3:e2:
8b:83:5c:0e:24:27:84:6a:89:52:6d:2d:0c:06:f3:bd:2e:dc:
e6:84:d0:28:bf:04:45:64:5a:24:a0:43:ae:ca:58:60:7f:51:
04:90:d7:c3:11:ea:27:fc:9f:bd:32:82:f8:6f:49:b0:93:b2:
fb:c7:82:53:b8:d3:78:71:17:2f:af:03:2d:16:53:43:82:df:
65:2b:63:19:a1:57:6c:f2:20:47:27:2e:ec:b2:74:de:08:26:
10:d9:fc:d9:41:ea:12:30:f4:d8:39:28:3c:30:24:2b:33:60:
8a:31:63:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYupXmVJkGkLnE3Vy6zSi2gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz
NzI0OTYwHhcNMjMxMTA3MTA0MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTc1ODdjYmNhNTA4Yzc1Y2Q3YzE3NzE1ZWNmZDkyYjhjYmZiMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68zYewsfmKMMy+Bi5EI+pnXKX5Xc
iajDB0HCHlJGKscfO5ZPpwonhvcvPIp4Jffiwg7a8+WtEU+kVFw99+PAODtakJVC
TlSzuhi+rofTJORFeUsg4ji3GPZn1rbXSm5lOsg86PJnwXEFCaA8s7Lv2a97edrz
T3ixxGPCpBorABUsQ3GlBneGzsjKpiRjSBfMr3cyZiY701Lx1EPPlVxqAUS0plcn
W3UBtrqYw/ZOLZecRDG5KiGmRcpIGhKelIUEAdNEzo2dxx3GGZ3HQdgleQ27V5SX
b+BTjWBAH7Rq+N5ywiFkV/mHZhJGUFOXT1qG//E0hjJPHv52HYcoOsg4CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBF1h8vKUIx1zXwXcV7P2SuMv7NEMB8GA1UdIwQY
MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt
OThmNzQ1NGJhNmNlLzEvRVhXSHk4cFFqSFhOZkJkeFhzX1pLNHlfczBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl
LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1G7gMA0G
CSqGSIb3DQEBCwUAA4IBAQBWMnnunUbApCazmET1iFEBCEPvlbthboBUeuHjrBTy
1oUT1zL+brBQ8SlcN5YHBbX+2hKQ25/acH0vzyn2L/jYSyZA1wdFX8TCJXyJJjBL
WvVSfZh6+tgQlfGsnScgUp8IicoXWdjWWr2g3UIxTygx2o2jw6Vt4FpdF9mxsdKD
+ivFNm38u72YF0VgGI8Mo+KLg1wOJCeEaolSbS0MBvO9LtzmhNAovwRFZFokoEOu
ylhgf1EEkNfDEeon/J+9MoL4b0mwk7L7x4JTuNN4cRcvrwMtFlNDgt9lK2MZoVds
8iBHJy7ssnTeCCYQ2fzZQeoSMPTYOSg8MCQrM2CKMWPU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:17 2024 by rpki-client on console-ams.rpki-client.org