Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/K9lfyO0j5vMmsVuV6BJmwhpMMy4.roa
File: K9lfyO0j5vMmsVuV6BJmwhpMMy4.roa (raw, json)
Hash identifier: Ef1zOdAmzsPDPiueCRYlb1nlpnKr43TsULNXUYFLXPY=
Subject key identifier: 2B:D9:5F:C8:ED:23:E6:F3:26:B1:5B:95:E8:12:66:C2:1A:4C:33:2E
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 0185824C61BCEAA8ABBBF1BABE08FCF15750
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/K9lfyO0j5vMmsVuV6BJmwhpMMy4.roa
Signing time: Thu 05 Jan 2023 14:18:41 +0000
ROA not before: Thu 05 Jan 2023 14:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25244
IP address blocks: 212.126.240.0/21 maxlen: 21
212.126.248.0/21 maxlen: 21
212.126.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:4c:61:bc:ea:a8:ab:bb:f1:ba:be:08:fc:f1:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Jan 5 14:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bd95fc8ed23e6f326b15b95e81266c21a4c332e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:7e:bd:ad:86:34:6d:ff:2f:ec:3d:da:e7:
3b:dc:f6:9d:c2:8b:71:b9:fa:25:6a:43:e0:87:a4:
37:4d:a2:37:41:af:48:68:2d:ac:45:88:68:d6:89:
49:bb:ff:a1:a9:ba:46:64:e6:4c:7a:b1:e3:12:27:
46:82:66:5d:ea:e9:5f:d7:b6:9c:92:46:5d:3d:b4:
28:00:be:8a:78:94:d2:da:09:76:af:5f:f4:48:f0:
a7:4a:25:b0:63:d9:58:f6:73:3d:4f:fb:83:6e:d7:
aa:0e:7d:c4:3b:3a:8e:4a:50:85:6a:28:54:3f:83:
b5:a4:b8:0c:03:d7:3d:68:2c:38:19:c4:76:56:a5:
39:db:62:51:20:ed:87:96:ab:74:e5:40:98:9a:86:
24:84:c9:32:8b:00:d0:a6:b5:52:e9:8c:72:11:38:
46:de:7e:5d:42:d7:24:c5:85:79:69:12:79:06:3c:
22:89:7a:e2:c9:6a:ae:75:99:a3:fa:ed:c2:89:b2:
f8:d4:7a:64:fa:b0:ee:d8:06:42:cf:c5:ea:1e:8b:
60:ca:9a:f8:67:9d:41:eb:99:ce:41:ed:ee:f0:51:
4f:1c:30:05:d6:be:96:53:c1:d7:a6:16:42:e6:43:
94:35:3b:69:84:23:4e:e6:af:b3:98:e7:77:5e:34:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D9:5F:C8:ED:23:E6:F3:26:B1:5B:95:E8:12:66:C2:1A:4C:33:2E
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/K9lfyO0j5vMmsVuV6BJmwhpMMy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.224.0/19
Signature Algorithm: sha256WithRSAEncryption
88:f2:55:9d:11:cf:41:f4:a9:0a:48:fa:f3:10:64:87:1e:23:
bf:77:94:f2:87:2a:04:41:da:1b:0a:66:b4:91:78:e3:3f:49:
ba:dc:39:5b:fd:02:28:c3:95:9f:03:dd:50:47:25:d7:6c:c9:
25:57:e4:63:31:39:35:11:02:70:6d:3b:0b:69:74:48:c4:89:
b4:03:2e:52:22:3a:59:df:46:4a:93:02:3f:87:d5:38:68:a6:
41:e7:d8:60:f6:a5:44:ac:bd:79:df:fa:2c:73:ac:76:94:7b:
21:2d:4e:7e:c3:12:43:2b:53:2d:80:1c:95:9a:56:23:cb:4c:
82:00:87:92:b3:28:72:fc:f9:81:7f:80:36:83:aa:bf:a7:1c:
d1:04:aa:5a:95:02:7b:c4:00:e4:33:75:9c:9d:83:a8:b3:f2:
4c:9f:eb:5f:82:b2:27:4b:09:c9:e6:b4:06:d2:42:bd:32:b8:
d5:c9:dc:45:91:f6:2a:e3:87:df:51:c9:78:ab:71:bd:da:24:
ad:08:d4:13:de:c9:35:e0:f6:3f:e8:6b:01:ce:c9:6b:f5:fd:
8f:d5:6f:62:1b:df:4a:66:66:86:4d:84:32:3e:0d:47:7b:0e:
8c:03:ed:88:c2:ca:33:73:fb:0f:1d:a9:ee:d9:79:13:95:48:
80:a7:cb:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWCTGG86qiru/G6vgj88VdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj
OWQ1MWYwHhcNMjMwMTA1MTQxODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmQ5NWZjOGVkMjNlNmYzMjZiMTViOTVlODEyNjZjMjFhNGMzMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29R+va2GNG3/L+w92uc73Padwotx
ufolakPgh6Q3TaI3Qa9IaC2sRYho1olJu/+hqbpGZOZMerHjEidGgmZd6ulf17ac
kkZdPbQoAL6KeJTS2gl2r1/0SPCnSiWwY9lY9nM9T/uDbteqDn3EOzqOSlCFaihU
P4O1pLgMA9c9aCw4GcR2VqU522JRIO2Hlqt05UCYmoYkhMkyiwDQprVS6YxyEThG
3n5dQtckxYV5aRJ5BjwiiXriyWqudZmj+u3CibL41Hpk+rDu2AZCz8XqHotgypr4
Z51B65nOQe3u8FFPHDAF1r6WU8HXphZC5kOUNTtphCNO5q+zmOd3XjTi3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCvZX8jtI+bzJrFblegSZsIaTDMuMB8GA1UdIwQY
MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt
NzVkNmJlNGU1YzM3LzEvSzlsZnlPMGo1dk1tc1Z1VjZCSm13aHBNTXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3
LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H7gMA0G
CSqGSIb3DQEBCwUAA4IBAQCI8lWdEc9B9KkKSPrzEGSHHiO/d5TyhyoEQdobCma0
kXjjP0m63Dlb/QIow5WfA91QRyXXbMklV+RjMTk1EQJwbTsLaXRIxIm0Ay5SIjpZ
30ZKkwI/h9U4aKZB59hg9qVErL153/osc6x2lHshLU5+wxJDK1MtgByVmlYjy0yC
AIeSsyhy/PmBf4A2g6q/pxzRBKpalQJ7xADkM3WcnYOos/JMn+tfgrInSwnJ5rQG
0kK9MrjVydxFkfYq44ffUcl4q3G92iStCNQT3sk14PY/6GsBzslr9f2P1W9iG99K
ZmaGTYQyPg1Hew6MA+2Iwsozc/sPHanu2XkTlUiAp8ss
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:06 2024 by rpki-client on console-ams.rpki-client.org