Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/5LgfFJlV5_Y-a0bHQjwSouPCvu4.roa
File: 5LgfFJlV5_Y-a0bHQjwSouPCvu4.roa (raw, json)
Hash identifier: H0p0wOCgWkw3qSPgJk7v7xI2jvRx5woIIAbidzzfdG0=
Subject key identifier: E4:B8:1F:14:99:55:E7:F6:3E:6B:46:C7:42:3C:12:A2:E3:C2:BE:EE
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 01856D540A05ED2684442E206604E0806A4B
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/5LgfFJlV5_Y-a0bHQjwSouPCvu4.roa
Signing time: Sun 01 Jan 2023 12:35:01 +0000
ROA not before: Sun 01 Jan 2023 12:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 212.11.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0a:05:ed:26:84:44:2e:20:66:04:e0:80:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 1 12:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b81f149955e7f63e6b46c7423c12a2e3c2beee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:03:19:e1:ab:db:e1:61:25:34:5f:b9:7d:
c9:10:2e:b1:02:61:b3:d5:6d:b8:f7:62:ce:00:f5:
c3:50:f4:76:be:85:0e:a0:54:dd:92:61:80:51:8f:
c8:43:22:2d:bc:11:55:c2:a1:a4:19:bc:b2:61:c3:
d3:c0:d7:b2:b5:5c:84:bc:97:b8:ee:e9:0f:41:e9:
d8:fb:4a:0e:8f:92:b8:fd:61:d9:0a:b0:fc:30:34:
6c:2f:50:bb:4c:64:cc:8c:fa:79:2f:fc:0f:45:00:
b1:56:4f:fb:8a:72:ee:2f:77:64:0d:48:12:07:53:
ee:5a:1f:90:64:9c:74:c9:68:7c:58:52:82:00:dc:
72:a8:6e:e6:03:4e:b1:08:07:4d:b9:52:44:b1:40:
b3:a9:3b:59:21:f5:0e:9a:9a:ed:17:13:98:b1:18:
00:17:c7:65:e2:54:48:b8:4d:f9:88:fb:1e:76:46:
61:4f:b1:2e:b0:52:2f:46:3b:c7:fe:a8:78:6b:fe:
af:67:6b:c0:34:93:90:84:ed:a8:76:55:f0:26:b3:
2d:eb:f4:e0:6d:9d:df:f0:d4:1b:97:9a:a4:ab:42:
13:6a:f4:3f:d3:a7:b2:a8:2f:4b:fe:09:72:62:f7:
cd:d2:29:4f:a6:26:05:c1:5c:03:7f:91:b7:d9:c9:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:1F:14:99:55:E7:F6:3E:6B:46:C7:42:3C:12:A2:E3:C2:BE:EE
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/5LgfFJlV5_Y-a0bHQjwSouPCvu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:83:5a:a0:8e:c7:58:d4:a6:ad:4f:02:0f:89:1f:69:c4:70:
2a:72:0d:ba:aa:29:ce:66:74:35:50:13:95:62:97:2a:01:fd:
9e:68:a9:d3:f0:f7:ce:61:59:60:7a:82:23:11:b0:bd:fa:83:
db:c5:d6:3e:40:fb:1a:01:14:37:b9:9b:81:a0:16:51:ee:1a:
71:3c:52:98:b8:b8:2f:62:cf:14:cd:19:6b:5b:46:64:f2:42:
a0:56:9d:2e:e2:75:77:08:39:e5:0f:2b:43:fe:28:75:c6:5b:
6a:fd:ce:6c:40:6a:8f:f1:8e:f3:70:ea:49:da:a6:94:4a:b1:
75:27:f1:36:56:ec:84:87:91:77:55:58:ff:08:75:ff:58:49:
8b:41:63:70:4d:46:ca:09:7f:c1:67:51:4a:04:8c:3b:da:95:
db:aa:e6:1f:f9:d1:59:a8:41:f1:c6:a5:f9:89:6a:7f:51:e1:
5c:35:c8:ef:f6:61:f7:d5:38:42:86:2e:53:b3:45:a6:d8:b7:
3c:e0:e5:75:2b:d6:7d:8e:74:91:f2:b6:6a:e3:bd:15:8f:4c:
ac:80:df:0f:11:cb:8f:50:b7:48:b3:14:f6:63:5b:aa:2f:cd:
87:30:72:b8:72:84:25:84:cf:83:d6:08:d8:bf:98:6a:5c:b3:
8b:a4:11:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtVAoF7SaERC4gZgTggGpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTk4ZDNjOWQ4YmRjOWMxZGZmOGUzMTk0MjQ0MTJiNmNk
YzFkZDMwHhcNMjMwMTAxMTIzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGI4MWYxNDk5NTVlN2Y2M2U2YjQ2Yzc0MjNjMTJhMmUzYzJiZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVsDGeGr2+FhJTRfuX3JEC6xAmGz
1W2492LOAPXDUPR2voUOoFTdkmGAUY/IQyItvBFVwqGkGbyyYcPTwNeytVyEvJe4
7ukPQenY+0oOj5K4/WHZCrD8MDRsL1C7TGTMjPp5L/wPRQCxVk/7inLuL3dkDUgS
B1PuWh+QZJx0yWh8WFKCANxyqG7mA06xCAdNuVJEsUCzqTtZIfUOmprtFxOYsRgA
F8dl4lRIuE35iPsedkZhT7EusFIvRjvH/qh4a/6vZ2vANJOQhO2odlXwJrMt6/Tg
bZ3f8NQbl5qkq0ITavQ/06eyqC9L/glyYvfN0ilPpiYFwVwDf5G32cksfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOS4HxSZVef2PmtGx0I8EqLjwr7uMB8GA1UdIwQY
MBaAFGCZjTydi9ycHf+OMZQkQSts3B3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUptTlBKMkwzSndkXzQ0eGxDUkJLMnpjSGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NzlhZTktN2QyMi00MjUyLThjNWIt
MGVhNGQ1MzFiNzkzLzEvNUxnZkZKbFY1X1ktYTBiSFFqd1NvdVBDdnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83NzlhZTktN2QyMi00MjUyLThjNWItMGVhNGQ1MzFiNzkz
LzEvWUptTlBKMkwzSndkXzQ0eGxDUkJLMnpjSGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AtAMA0G
CSqGSIb3DQEBCwUAA4IBAQCpg1qgjsdY1KatTwIPiR9pxHAqcg26qinOZnQ1UBOV
YpcqAf2eaKnT8PfOYVlgeoIjEbC9+oPbxdY+QPsaARQ3uZuBoBZR7hpxPFKYuLgv
Ys8UzRlrW0Zk8kKgVp0u4nV3CDnlDytD/ih1xltq/c5sQGqP8Y7zcOpJ2qaUSrF1
J/E2VuyEh5F3VVj/CHX/WEmLQWNwTUbKCX/BZ1FKBIw72pXbquYf+dFZqEHxxqX5
iWp/UeFcNcjv9mH31ThChi5Ts0Wm2Lc84OV1K9Z9jnSR8rZq470Vj0ysgN8PEcuP
ULdIsxT2Y1uqL82HMHK4coQlhM+D1gjYv5hqXLOLpBFW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org