Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/aqNnV7-qhyn_QxqsyMYtc66Rrx8.roa
File: aqNnV7-qhyn_QxqsyMYtc66Rrx8.roa (raw, json)
Hash identifier: 6lVYG1Va8LvmwFJkllYraTBlENeGfxV37YfrNUXONkE=
Subject key identifier: 6A:A3:67:57:BF:AA:87:29:FF:43:1A:AC:C8:C6:2D:73:AE:91:AF:1F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB84C919B42107343F91B216C6BE854
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/aqNnV7-qhyn_QxqsyMYtc66Rrx8.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38926
IP address blocks: 212.234.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4c:91:9b:42:10:73:43:f9:1b:21:6c:6b:e8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aa36757bfaa8729ff431aacc8c62d73ae91af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:2c:c3:88:e1:56:3f:ce:eb:17:ac:ff:84:
f9:23:ca:aa:c6:97:4d:67:37:db:37:7d:29:83:54:
e0:06:74:45:ec:54:4c:21:c9:8e:a2:24:55:22:76:
f4:18:ca:be:ad:cf:59:3b:09:57:31:15:c9:41:b7:
ab:37:f7:8f:2e:00:1f:78:79:71:71:08:fe:23:c2:
e5:59:6b:6e:77:65:70:a4:5b:02:dd:17:6f:42:dd:
dd:b9:e1:33:3e:75:63:d7:54:56:63:35:c6:df:fa:
ae:61:f6:a8:f5:03:b9:b6:95:c6:0e:7a:a0:a1:25:
34:40:ac:b6:3b:2f:0c:b7:ba:a3:c7:04:95:c0:5b:
58:50:9f:96:8d:7c:d5:89:b9:01:e7:61:b5:97:52:
e2:02:89:29:66:47:e9:72:67:f6:b0:52:5b:67:e1:
93:ed:45:57:93:88:39:f0:b2:3e:72:ab:fe:0e:b3:
2a:c3:9e:92:9d:61:4f:4a:6f:cd:28:74:8e:01:c2:
a8:99:90:6c:60:fe:af:a6:20:aa:a1:a3:ae:c8:05:
f1:e4:ec:6c:6b:11:9b:8a:88:36:54:4d:7e:37:d9:
72:12:f5:2b:16:1c:ce:0e:c6:1d:80:d8:df:f0:d6:
44:53:3c:72:d8:5c:d0:5b:63:77:34:91:40:4d:86:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:67:57:BF:AA:87:29:FF:43:1A:AC:C8:C6:2D:73:AE:91:AF:1F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/aqNnV7-qhyn_QxqsyMYtc66Rrx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:72:37:a3:8b:77:38:69:2f:c0:58:c8:1e:14:f9:81:70:24:
56:98:86:1a:18:12:ec:cd:a5:64:ed:84:84:4f:6f:fe:8a:08:
34:10:0e:c1:00:f0:79:0d:98:4f:29:0e:d3:6d:bc:ee:25:27:
5f:c3:0b:53:c5:75:53:c3:f4:47:56:02:72:a9:6d:30:fe:31:
56:c9:06:19:66:a9:52:48:5b:42:6f:a8:c3:d2:56:1c:ae:81:
97:c5:61:d9:ef:69:35:63:cf:5c:5d:57:a9:05:ea:e8:64:8e:
a3:f2:bb:a5:7a:1e:b5:23:c6:de:0c:86:53:e0:e0:09:30:60:
99:87:31:d8:40:5c:b9:05:e9:2f:06:50:d4:44:ce:36:89:60:
be:e8:5a:c2:0a:e4:27:32:ed:51:27:84:e7:0f:b5:54:ea:b2:
b7:cb:00:06:e6:16:8c:fc:58:f2:bf:d3:e3:de:fa:b4:96:ce:
92:f2:04:10:4f:08:1c:63:70:f0:04:8b:fd:77:50:be:e7:12:
57:45:1a:13:e6:3e:59:de:07:a4:6e:36:6d:df:29:c2:8f:14:
dc:df:97:8e:13:87:a5:3e:38:86:7f:df:88:09:18:c6:90:38:
0c:47:5f:7d:3a:35:99:14:6b:23:48:58:e5:89:76:90:fa:bd:
46:83:9b:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsuEyRm0IQc0P5GyFsa+hUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjMwMTAxMDk0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWEzNjc1N2JmYWE4NzI5ZmY0MzFhYWNjOGM2MmQ3M2FlOTFhZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsIsw4jhVj/O6xes/4T5I8qqxpdN
ZzfbN30pg1TgBnRF7FRMIcmOoiRVInb0GMq+rc9ZOwlXMRXJQberN/ePLgAfeHlx
cQj+I8LlWWtud2VwpFsC3RdvQt3dueEzPnVj11RWYzXG3/quYfao9QO5tpXGDnqg
oSU0QKy2Oy8Mt7qjxwSVwFtYUJ+WjXzVibkB52G1l1LiAokpZkfpcmf2sFJbZ+GT
7UVXk4g58LI+cqv+DrMqw56SnWFPSm/NKHSOAcKomZBsYP6vpiCqoaOuyAXx5Oxs
axGbiog2VE1+N9lyEvUrFhzODsYdgNjf8NZEUzxy2FzQW2N3NJFATYYoJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqjZ1e/qocp/0MarMjGLXOuka8fMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvYXFOblY3LXFoeW5fUXhxc3lNWXRjNjZScng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OonMA0G
CSqGSIb3DQEBCwUAA4IBAQBtcjeji3c4aS/AWMgeFPmBcCRWmIYaGBLszaVk7YSE
T2/+igg0EA7BAPB5DZhPKQ7TbbzuJSdfwwtTxXVTw/RHVgJyqW0w/jFWyQYZZqlS
SFtCb6jD0lYcroGXxWHZ72k1Y89cXVepBeroZI6j8ruleh61I8beDIZT4OAJMGCZ
hzHYQFy5BekvBlDURM42iWC+6FrCCuQnMu1RJ4TnD7VU6rK3ywAG5haM/Fjyv9Pj
3vq0ls6S8gQQTwgcY3DwBIv9d1C+5xJXRRoT5j5Z3gekbjZt3ynCjxTc35eOE4el
PjiGf9+ICRjGkDgMR199OjWZFGsjSFjliXaQ+r1Gg5v5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org