Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/g8qJSglwwgBTOaN1jY8qLZuWpVc.roa
File: g8qJSglwwgBTOaN1jY8qLZuWpVc.roa (raw, json)
Hash identifier: hIBh2E9Ra18B47hxvBlEcNiktDtFu/yxzjRTpUowsTw=
Subject key identifier: 83:CA:89:4A:09:70:C2:00:53:39:A3:75:8D:8F:2A:2D:9B:96:A5:57
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 018570DE3C32847BBB7F8BEF92450AED0E26
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/g8qJSglwwgBTOaN1jY8qLZuWpVc.roa
Signing time: Mon 02 Jan 2023 05:04:50 +0000
ROA not before: Mon 02 Jan 2023 05:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204548
IP address blocks: 113.30.190.0/24 maxlen: 24
113.30.191.0/24 maxlen: 24
212.115.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 07:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:3c:32:84:7b:bb:7f:8b:ef:92:45:0a:ed:0e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 2 05:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83ca894a0970c2005339a3758d8f2a2d9b96a557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:71:48:4e:f0:ca:4b:0b:19:75:3e:76:ef:
a1:d2:c4:6c:b1:65:c8:30:1d:2b:73:fa:32:75:0c:
48:72:6a:07:c1:7d:36:45:fe:7e:03:6d:8d:d1:d3:
af:7d:b9:60:64:31:8b:26:32:39:8c:d5:14:ee:99:
dc:ea:b2:27:a6:c1:0d:d1:ff:a4:d3:3e:54:ee:45:
b3:6c:c0:36:54:8a:14:77:bd:0e:11:dd:ac:dd:bb:
1f:e7:a9:43:ce:68:fe:22:f2:cd:3e:5b:71:ac:c1:
26:6a:8c:ab:4e:a9:39:1a:b8:d0:4a:6b:b9:f2:30:
22:68:2d:72:1e:b0:6a:ee:ed:7b:de:30:ce:73:6b:
4d:d9:37:66:3d:2b:11:3b:25:17:c2:08:98:61:44:
3c:ba:90:87:39:61:41:5b:68:00:e0:54:2c:7e:17:
cb:0a:3e:dc:2b:59:65:a1:7f:56:f7:16:45:5b:9e:
17:e8:f6:3d:4c:fb:1c:89:74:13:5d:aa:03:b7:60:
10:f9:2b:c9:5d:0a:0f:ab:66:74:23:9a:40:82:78:
ec:ba:13:90:4c:39:26:55:ee:ff:ed:21:16:40:e8:
94:b0:f0:84:cd:99:41:71:e0:af:43:f6:65:ef:4a:
73:37:4d:be:5c:c2:64:a2:7f:21:22:a3:4e:19:81:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:89:4A:09:70:C2:00:53:39:A3:75:8D:8F:2A:2D:9B:96:A5:57
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/g8qJSglwwgBTOaN1jY8qLZuWpVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.30.190.0/23
212.115.110.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:13:14:9e:f1:f2:26:43:08:ea:d9:75:09:6e:4c:2b:71:9a:
63:b8:e9:28:c8:d6:4d:13:47:d3:8a:3c:84:ab:a6:78:2e:b8:
dc:bd:37:ea:52:df:ed:c5:3f:55:72:81:41:6c:b7:55:73:0c:
9f:bc:af:ff:fb:ca:32:39:45:90:46:e7:64:ed:01:a5:f1:fa:
12:83:62:90:8d:61:10:8e:f0:bd:dd:07:24:b1:d6:01:85:1e:
e3:8c:cb:66:ca:20:15:ed:db:76:92:e9:77:21:b4:02:94:e1:
9a:e4:c3:06:1a:90:a1:5c:41:31:fa:a0:11:5c:22:c4:f3:b8:
0f:f1:21:57:6f:59:e5:c8:de:cf:c4:91:b8:4e:2f:da:70:50:
f0:ae:83:e8:9a:2c:52:00:e0:60:a2:e4:f3:33:cf:d4:55:2b:
3c:dd:e4:69:49:7f:32:d8:17:71:79:d9:39:32:bc:96:1a:ca:
bb:f3:50:ba:89:76:c7:1c:ff:1f:a9:60:00:53:6b:84:48:b8:
31:0f:8e:b7:0c:e7:25:0a:d0:7f:b2:33:89:78:a4:d6:99:bb:
f3:28:62:7d:97:f8:c0:47:86:ce:1e:a8:cd:fb:79:5a:41:97:
55:8a:d7:74:e9:c5:62:c0:48:3a:ee:ab:70:2e:b7:61:37:bf:
ce:52:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org