Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3oDCt9iHy_6dyA_TL22Ciu9dwso.roa
File: 3oDCt9iHy_6dyA_TL22Ciu9dwso.roa (raw, json)
Hash identifier: L0SvZu/jg9vnDbiVGbaSNCkhwuVZBs+rdcI9+EHUN9A=
Subject key identifier: DE:80:C2:B7:D8:87:CB:FE:9D:C8:0F:D3:2F:6D:82:8A:EF:5D:C2:CA
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEAFE923FA55BB0B5513C201704F1E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3oDCt9iHy_6dyA_TL22Ciu9dwso.roa
Signing time: Sun 01 Jan 2023 06:04:42 +0000
ROA not before: Sun 01 Jan 2023 06:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13086
IP address blocks: 213.216.64.0/18 maxlen: 18
213.186.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:af:e9:23:fa:55:bb:0b:55:13:c2:01:70:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de80c2b7d887cbfe9dc80fd32f6d828aef5dc2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:ec:34:ab:c5:17:0f:c9:05:f8:29:d8:75:
27:54:3f:fe:52:ac:7e:17:c4:78:fb:d9:f3:6a:31:
9e:c9:c7:2e:9f:ca:07:79:04:03:9e:01:c6:0d:be:
cd:21:fd:93:60:01:63:ad:de:b5:f4:82:6f:21:5d:
68:d7:bb:08:13:34:28:72:6f:7e:68:33:90:2e:fe:
d1:98:b9:99:34:d7:76:3d:47:b1:d5:05:dc:af:19:
00:78:e7:02:a3:f7:33:34:78:a8:a8:c8:fe:ab:d9:
d7:ea:1b:2d:5c:75:ef:d5:13:8c:ac:1a:ec:36:9c:
d7:a1:63:48:18:86:4d:bd:aa:bf:05:02:f3:4d:ea:
2a:01:db:4b:2a:bc:3b:b4:6f:e6:59:14:13:c8:95:
a5:50:07:44:ea:02:7e:a4:6c:7d:4f:ff:95:1a:89:
39:3b:f9:e6:b4:76:1f:f0:b4:c1:4f:b4:33:15:0b:
7d:4f:c9:cb:ab:03:dc:d4:7f:96:c7:70:32:11:27:
3e:ce:c8:6d:2c:b9:a1:21:17:1d:e5:fe:7c:d7:fd:
d6:9e:a6:23:c8:23:35:6e:3d:61:2d:79:0e:4b:9a:
ca:5d:bb:63:58:5b:9f:fd:dd:9c:31:0a:48:af:5b:
e4:18:db:c9:02:ac:3f:6c:6e:a4:fd:9e:1a:c2:69:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:C2:B7:D8:87:CB:FE:9D:C8:0F:D3:2F:6D:82:8A:EF:5D:C2:CA
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3oDCt9iHy_6dyA_TL22Ciu9dwso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.186.64.0/19
213.216.64.0/18
Signature Algorithm: sha256WithRSAEncryption
80:52:66:16:4d:d5:12:e0:84:11:ca:33:1d:e7:88:ec:43:c4:
0e:3d:30:9f:06:70:96:4c:48:37:c0:0e:b5:ed:0f:bc:da:3b:
9d:a2:2e:ce:12:8e:97:b6:d8:80:d2:63:74:6c:1e:f9:f2:96:
ed:f4:bc:85:05:76:62:20:89:f7:43:3e:7a:48:4f:c3:50:0b:
00:f6:3a:a6:20:1c:fa:2f:55:a7:4c:e1:65:6d:0c:f0:56:11:
3c:67:7d:7f:99:19:ee:13:42:cf:01:52:6b:ef:1a:d8:fc:ce:
dd:f4:ea:9b:6d:59:57:74:d6:65:ef:3b:07:49:b5:e8:ff:f9:
26:64:e8:e0:e0:0f:c3:69:bf:e2:1a:a4:6d:80:61:ea:85:ea:
ff:ae:b2:b7:2a:4e:99:60:d6:ab:db:03:9e:98:39:08:9b:e6:
ee:38:39:ab:ee:59:8c:d8:86:02:06:f0:fe:25:e9:53:27:21:
93:d9:84:56:78:85:ac:0d:d4:ce:42:1f:43:38:75:bc:31:88:
68:ff:34:5c:c0:3c:a1:99:14:08:d6:01:19:05:b6:e9:ab:b9:
fa:6a:68:b0:0a:5a:d9:3d:57:1d:88:d7:81:04:8c:9a:aa:ed:
07:5c:b3:70:a8:b6:a6:fd:6b:98:c6:2c:2b:e2:ca:a2:5f:1e:
a9:85:85:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVr7q/pI/pVuwtVE8IBcE8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTgwYzJiN2Q4ODdjYmZlOWRjODBmZDMyZjZkODI4YWVmNWRjMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XLsNKvFFw/JBfgp2HUnVD/+Uqx+
F8R4+9nzajGeyccun8oHeQQDngHGDb7NIf2TYAFjrd619IJvIV1o17sIEzQocm9+
aDOQLv7RmLmZNNd2PUex1QXcrxkAeOcCo/czNHioqMj+q9nX6hstXHXv1ROMrBrs
NpzXoWNIGIZNvaq/BQLzTeoqAdtLKrw7tG/mWRQTyJWlUAdE6gJ+pGx9T/+VGok5
O/nmtHYf8LTBT7QzFQt9T8nLqwPc1H+Wx3AyESc+zshtLLmhIRcd5f581/3WnqYj
yCM1bj1hLXkOS5rKXbtjWFuf/d2cMQpIr1vkGNvJAqw/bG6k/Z4awmnqmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN6AwrfYh8v+ncgP0y9tgorvXcLKMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvM29EQ3Q5aUh5XzZkeUFfVEwyMkNpdTlkd3NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF1bpAAwQG
1dhAMA0GCSqGSIb3DQEBCwUAA4IBAQCAUmYWTdUS4IQRyjMd54jsQ8QOPTCfBnCW
TEg3wA617Q+82judoi7OEo6XttiA0mN0bB758pbt9LyFBXZiIIn3Qz56SE/DUAsA
9jqmIBz6L1WnTOFlbQzwVhE8Z31/mRnuE0LPAVJr7xrY/M7d9OqbbVlXdNZl7zsH
SbXo//kmZOjg4A/Dab/iGqRtgGHqher/rrK3Kk6ZYNar2wOemDkIm+buODmr7lmM
2IYCBvD+JelTJyGT2YRWeIWsDdTOQh9DOHW8MYho/zRcwDyhmRQI1gEZBbbpq7n6
amiwClrZPVcdiNeBBIyaqu0HXLNwqLam/WuYxiwr4sqiXx6phYXw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org