Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/St1eATkO5YO6Rr9y2EL0BMhVQyI.roa
File: St1eATkO5YO6Rr9y2EL0BMhVQyI.roa (raw, json)
Hash identifier: cYdUMiFezPX+M/UhU4bwFaeWNj4xPMZPLZZ5V3eCCy4=
Subject key identifier: 4A:DD:5E:01:39:0E:E5:83:BA:46:BF:72:D8:42:F4:04:C8:55:43:22
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB8378DB7E9A319BE31E7DC01CAA306
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/St1eATkO5YO6Rr9y2EL0BMhVQyI.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8567
IP address blocks: 217.167.116.0/24 maxlen: 24
217.167.117.0/24 maxlen: 24
212.234.160.0/24 maxlen: 24
212.234.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:37:8d:b7:e9:a3:19:be:31:e7:dc:01:ca:a3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4add5e01390ee583ba46bf72d842f404c8554322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:3c:06:98:88:94:1c:d4:ea:ab:10:72:e4:
73:e9:46:75:ef:b9:b0:54:c3:3b:a4:5e:cd:15:fb:
62:f5:cf:a3:e8:ee:85:23:88:eb:41:d1:e1:50:9d:
e5:4a:77:fe:ab:e2:b2:2e:ef:46:c7:5e:03:74:be:
91:7c:9b:73:24:14:f1:5c:16:33:e0:3a:c3:ff:d0:
55:6d:50:a6:85:99:b6:ee:22:a8:1c:b6:91:4e:05:
5f:8e:03:09:50:a4:a2:3e:d5:99:5f:04:9f:8b:98:
76:02:33:5a:db:95:29:59:65:14:9e:d9:4b:f2:0f:
24:52:68:de:7b:8f:66:06:00:9d:c5:1b:24:a3:b5:
49:93:86:e6:b4:6e:23:98:d1:40:d4:5f:42:0e:67:
43:bc:3a:0c:ad:5e:17:4f:54:cb:58:3a:7a:b1:e0:
1c:ca:1f:c8:12:1d:97:60:93:54:5c:c7:46:a4:8a:
8a:94:4a:d1:24:55:e6:a4:0e:b4:06:37:91:2e:be:
79:aa:f9:33:46:b9:81:c8:89:a4:c2:fe:63:f9:b5:
71:f6:be:dc:93:30:74:43:4d:e6:c1:a2:4c:c7:44:
b6:91:32:64:b4:d5:57:27:e1:a0:21:34:a4:a0:47:
25:27:f8:85:27:5c:ee:6f:ff:85:38:9a:22:10:7e:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:5E:01:39:0E:E5:83:BA:46:BF:72:D8:42:F4:04:C8:55:43:22
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/St1eATkO5YO6Rr9y2EL0BMhVQyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.160.0/23
217.167.116.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:79:51:4f:07:2a:4d:2a:d5:9a:c8:c5:b7:e3:9c:9d:7f:e2:
b9:ee:4b:24:6c:84:a5:ff:6f:ae:27:d4:67:3d:96:36:65:e6:
07:69:17:20:13:49:f0:83:6d:f5:e8:25:24:eb:cd:91:a3:d8:
4e:88:a7:c7:0b:62:c1:3e:c3:01:24:6d:69:2d:84:99:6e:bb:
a4:4a:1e:68:e1:ee:83:c4:f9:25:bc:33:85:1e:ca:83:0f:94:
93:c0:e3:de:b4:94:a1:6a:5c:06:d4:75:05:ed:57:2b:c4:cf:
41:17:4a:17:c6:d7:4f:5c:35:33:18:a7:34:2a:56:5a:fe:00:
ff:af:85:6b:92:08:93:0d:f9:30:a5:e3:57:c0:69:0f:51:13:
55:3a:b3:0c:63:76:9f:f1:77:71:db:71:6b:1b:4a:aa:5d:f5:
8e:07:62:33:19:f4:78:a9:b4:14:f0:43:32:e6:d0:90:20:13:
b2:50:93:14:63:e2:1f:77:7c:08:47:87:c6:df:1a:dd:91:01:
d4:8a:77:0b:a2:06:6b:79:75:70:7a:18:be:56:e6:5a:13:c5:
4e:5c:9a:37:8a:46:b0:13:19:26:7a:f2:33:5c:a2:de:8e:bf:
e1:b6:5c:16:6c:b0:87:5c:f5:55:b5:da:46:64:85:da:68:55:
c5:7d:87:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsuDeNt+mjGb4x59wByqMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjMwMTAxMDk0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWRkNWUwMTM5MGVlNTgzYmE0NmJmNzJkODQyZjQwNGM4NTU0MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG08BpiIlBzU6qsQcuRz6UZ177mw
VMM7pF7NFfti9c+j6O6FI4jrQdHhUJ3lSnf+q+KyLu9Gx14DdL6RfJtzJBTxXBYz
4DrD/9BVbVCmhZm27iKoHLaRTgVfjgMJUKSiPtWZXwSfi5h2AjNa25UpWWUUntlL
8g8kUmjee49mBgCdxRsko7VJk4bmtG4jmNFA1F9CDmdDvDoMrV4XT1TLWDp6seAc
yh/IEh2XYJNUXMdGpIqKlErRJFXmpA60BjeRLr55qvkzRrmByImkwv5j+bVx9r7c
kzB0Q03mwaJMx0S2kTJktNVXJ+GgITSkoEclJ/iFJ1zub/+FOJoiEH447wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFErdXgE5DuWDuka/cthC9ATIVUMiMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvU3QxZUFUa081WU82UnI5eTJFTDBCTWhWUXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1OqgAwQB
2ad0MA0GCSqGSIb3DQEBCwUAA4IBAQAOeVFPBypNKtWayMW345ydf+K57kskbISl
/2+uJ9RnPZY2ZeYHaRcgE0nwg2316CUk682Ro9hOiKfHC2LBPsMBJG1pLYSZbruk
Sh5o4e6DxPklvDOFHsqDD5STwOPetJShalwG1HUF7VcrxM9BF0oXxtdPXDUzGKc0
KlZa/gD/r4VrkgiTDfkwpeNXwGkPURNVOrMMY3af8Xdx23FrG0qqXfWOB2IzGfR4
qbQU8EMy5tCQIBOyUJMUY+Ifd3wIR4fG3xrdkQHUincLogZreXVwehi+VuZaE8VO
XJo3ikawExkmevIzXKLejr/htlwWbLCHXPVVtdpGZIXaaFXFfYfl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org