Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/zPLp0sMW2vdRqziMGw5EjTOEIiU.roa
File: zPLp0sMW2vdRqziMGw5EjTOEIiU.roa (raw, json)
Hash identifier: afj1GnUjigalv/AvZ/bzeVqXw6TEfBRNf6yWBL5yUD8=
Subject key identifier: CC:F2:E9:D2:C3:16:DA:F7:51:AB:38:8C:1B:0E:44:8D:33:84:22:25
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0185F37B15ACE68653751B0E67AA104CFB22
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/zPLp0sMW2vdRqziMGw5EjTOEIiU.roa
Signing time: Fri 27 Jan 2023 13:46:48 +0000
ROA not before: Fri 27 Jan 2023 13:46:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56443
IP address blocks: 212.82.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:7b:15:ac:e6:86:53:75:1b:0e:67:aa:10:4c:fb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Jan 27 13:46:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf2e9d2c316daf751ab388c1b0e448d33842225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:f9:ba:ae:ac:db:d4:09:ea:d8:8a:52:a7:
c9:79:3b:b8:5a:34:55:e8:fd:87:ae:c2:e1:10:b6:
73:61:89:a3:eb:3d:ee:8d:48:9c:90:01:44:92:1c:
e6:88:87:e7:80:91:16:4a:53:36:04:c0:b9:11:13:
9c:6d:f1:18:57:2a:fc:2c:97:b5:17:9a:eb:92:de:
a4:60:83:cc:91:09:4b:44:d9:4a:38:d1:bb:1c:b4:
38:54:21:ec:e6:fa:50:37:b6:2c:ce:5b:93:1a:80:
53:e0:00:cc:4d:9b:2e:96:e5:95:3b:f2:06:62:d4:
6d:bc:fd:48:6a:ed:5a:92:59:18:c7:c9:9f:8e:50:
04:0e:31:c1:86:8d:ea:9b:4c:f3:d0:0e:15:02:04:
c8:15:d2:4c:e7:da:3c:1e:f3:39:ad:67:b4:9e:fd:
90:23:7a:d0:a8:1e:e9:7e:ec:9c:b7:97:70:e2:ac:
65:18:06:b7:0e:a6:7a:b5:0e:90:bd:8d:72:e9:b3:
a1:44:6e:a0:d7:a0:c9:de:7e:8a:a9:f6:f2:41:18:
b2:59:10:7d:ff:18:42:33:0e:7d:12:1b:01:8d:22:
03:d5:4f:31:e6:3a:a0:0c:a6:d8:13:9c:ea:ad:89:
e1:60:0b:17:61:7b:dc:17:a1:63:7d:01:cb:85:5d:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:E9:D2:C3:16:DA:F7:51:AB:38:8C:1B:0E:44:8D:33:84:22:25
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/zPLp0sMW2vdRqziMGw5EjTOEIiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.82.40.0/22
Signature Algorithm: sha256WithRSAEncryption
29:e2:e4:5a:0c:5c:a5:f7:e4:7a:67:9c:38:6e:26:8d:88:da:
b2:0d:1c:24:a0:91:75:81:c0:50:64:bb:f5:0b:59:b9:f3:9a:
92:93:8e:5c:11:a2:6f:ac:4d:54:b0:6d:b9:29:b1:52:e8:ed:
46:11:ce:36:f7:7b:03:f9:88:e6:50:02:da:5b:c0:73:9e:b8:
ed:f3:43:8a:27:d0:5e:f9:27:df:06:7f:b4:c3:f1:7d:d6:b1:
35:b3:1f:82:27:3e:23:8c:bf:2f:44:29:a0:33:2c:57:5e:bd:
a1:be:1e:4e:26:6d:c5:2c:e2:b7:fa:e6:8d:2a:f7:d7:42:31:
c2:72:72:0f:d8:69:9c:7a:9d:92:82:ce:9f:4d:79:5e:fc:74:
93:b9:02:7e:f5:d5:01:13:6d:3a:14:be:4c:02:e0:7b:0e:e3:
b2:9c:99:17:4a:f1:fc:e8:98:28:c3:a1:2a:20:2c:00:17:5b:
67:a7:7a:57:bb:29:f5:2f:e4:49:1a:af:30:86:90:d0:03:84:
f7:75:e1:77:77:bc:eb:00:c6:25:94:d6:81:92:aa:8a:1f:9c:
72:fa:87:c8:c4:7f:7a:b8:5b:cf:80:33:37:39:6f:35:48:5b:
7f:71:ce:d8:2e:61:c9:f9:7e:7e:9e:25:e6:3a:81:86:fe:3f:
9c:fb:93:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXzexWs5oZTdRsOZ6oQTPsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTdhMGQyZmM1N2E2N2JiMmI3ZTg1YzNlOGQ3ODE5MmJj
YTBmMTgwHhcNMjMwMTI3MTM0NjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2YyZTlkMmMzMTZkYWY3NTFhYjM4OGMxYjBlNDQ4ZDMzODQyMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneT5uq6s29QJ6tiKUqfJeTu4WjRV
6P2HrsLhELZzYYmj6z3ujUickAFEkhzmiIfngJEWSlM2BMC5EROcbfEYVyr8LJe1
F5rrkt6kYIPMkQlLRNlKONG7HLQ4VCHs5vpQN7YszluTGoBT4ADMTZsuluWVO/IG
YtRtvP1Iau1aklkYx8mfjlAEDjHBho3qm0zz0A4VAgTIFdJM59o8HvM5rWe0nv2Q
I3rQqB7pfuyct5dw4qxlGAa3DqZ6tQ6QvY1y6bOhRG6g16DJ3n6KqfbyQRiyWRB9
/xhCMw59EhsBjSID1U8x5jqgDKbYE5zqrYnhYAsXYXvcF6FjfQHLhV23cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzy6dLDFtr3Uas4jBsORI0zhCIlMB8GA1UdIwQY
MBaAFKTnoNL8V6Z7srfoXD6NeBkryg8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMt
YTYxMjZiNTQwOTRkLzEvelBMcDBzTVcydmRScXppTUd3NUVqVE9FSWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMtYTYxMjZiNTQwOTRk
LzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1FIoMA0G
CSqGSIb3DQEBCwUAA4IBAQAp4uRaDFyl9+R6Z5w4biaNiNqyDRwkoJF1gcBQZLv1
C1m585qSk45cEaJvrE1UsG25KbFS6O1GEc4293sD+YjmUALaW8Bznrjt80OKJ9Be
+SffBn+0w/F91rE1sx+CJz4jjL8vRCmgMyxXXr2hvh5OJm3FLOK3+uaNKvfXQjHC
cnIP2Gmcep2Sgs6fTXle/HSTuQJ+9dUBE206FL5MAuB7DuOynJkXSvH86Jgow6Eq
ICwAF1tnp3pXuyn1L+RJGq8whpDQA4T3deF3d7zrAMYllNaBkqqKH5xy+ofIxH96
uFvPgDM3OW81SFt/cc7YLmHJ+X5+niXmOoGG/j+c+5O6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:55 2024 by rpki-client on console-ams.rpki-client.org