Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YCuYFM2BkMwM7Ns23ZL6wWLTvAM.roa
File: YCuYFM2BkMwM7Ns23ZL6wWLTvAM.roa (raw, json)
Hash identifier: 7n4G/vBFkJIBcf6/DVjK65RmpkL1VoZ1hYo7m84D7iw=
Subject key identifier: 60:2B:98:14:CD:81:90:CC:0C:EC:DB:36:DD:92:FA:C1:62:D3:BC:03
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE6650B27CC78478F04442DC47C854C
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YCuYFM2BkMwM7Ns23ZL6wWLTvAM.roa
Signing time: Sun 01 Jan 2023 10:35:16 +0000
ROA not before: Sun 01 Jan 2023 10:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197929
IP address blocks: 212.5.152.0/23 maxlen: 23
212.5.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:65:0b:27:cc:78:47:8f:04:44:2d:c4:7c:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602b9814cd8190cc0cecdb36dd92fac162d3bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:a9:fa:22:92:74:88:de:d7:08:d3:34:bb:
9d:70:d9:dc:3f:95:98:29:6a:d5:d7:6b:97:05:b4:
7d:a9:1a:ee:60:ab:1e:9c:0f:aa:6b:06:cd:a4:b7:
c5:bb:43:36:e8:7c:39:e9:1b:10:84:cb:f8:6e:f4:
62:7d:83:19:0e:0b:d1:b6:af:3b:cd:5a:46:0e:5c:
c7:a5:ab:f9:bb:07:65:32:36:29:ac:bd:40:bf:e7:
71:a5:1d:f1:62:01:a5:96:b8:42:34:04:6e:c3:9d:
d1:3d:b9:46:cc:77:0f:6d:5b:80:3d:58:fb:1a:06:
f4:66:59:62:38:de:10:85:ae:57:9f:25:e7:0e:1f:
76:4e:dc:eb:0f:9f:23:7a:6b:14:52:70:3a:26:22:
78:d9:24:1a:05:df:a6:8c:22:40:12:f8:b1:ad:3f:
25:18:cf:91:f0:29:35:83:03:f3:41:6e:5c:a2:43:
b4:24:0c:70:59:61:f7:70:6a:cb:c7:de:20:18:4f:
af:df:f9:86:f6:c3:bd:43:74:3c:21:69:8a:5f:dc:
83:00:db:09:be:98:e3:57:5a:a2:4b:4b:a5:90:8a:
62:c5:df:b6:26:1a:ec:d6:46:52:79:03:9b:ab:00:
f6:32:d3:7a:05:76:b0:d9:95:96:28:83:ff:73:4b:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:98:14:CD:81:90:CC:0C:EC:DB:36:DD:92:FA:C1:62:D3:BC:03
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YCuYFM2BkMwM7Ns23ZL6wWLTvAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1a:d9:ac:92:71:c3:86:44:10:63:01:49:41:4c:23:f4:53:
26:36:7f:4e:81:b1:72:c9:5c:42:fd:35:ea:f7:70:0f:84:49:
aa:c4:79:40:3f:0d:9b:aa:ff:ab:1e:c3:bb:09:57:45:f8:72:
81:d2:2e:3c:36:e7:c5:ba:00:38:c4:0e:36:40:f6:fc:b6:7d:
3b:2f:44:5d:43:2f:e9:d7:c2:79:1c:8f:a0:45:65:14:9f:a7:
1c:c1:b3:58:c4:21:22:0c:dc:d2:22:41:bc:39:1a:f8:e7:cb:
da:9b:c2:7b:c2:4a:d2:b0:37:b6:c7:06:a5:ac:91:86:22:d7:
a1:99:f7:67:62:c0:0a:8a:1d:12:80:f7:d5:9d:c7:33:ea:02:
ff:ca:3c:cb:6c:4e:46:11:cb:d7:9e:f6:26:0b:85:69:21:10:
a7:1a:35:50:49:dc:67:bc:74:2a:fd:71:e4:0f:74:14:0c:8e:
f0:ac:34:f5:6d:c5:64:c1:37:ae:18:dc:31:cb:26:72:d0:aa:
21:86:02:b6:81:c7:13:69:d9:2e:96:6a:f3:56:60:38:83:e6:
29:8a:e9:dc:32:34:46:61:d8:ff:a7:b6:12:d9:7f:51:22:40:
53:e7:05:20:d2:23:d1:f3:74:63:91:f2:ad:d1:91:7f:f8:4e:
f1:49:a9:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5mULJ8x4R48ERC3EfIVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMwMTAxMTAzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDJiOTgxNGNkODE5MGNjMGNlY2RiMzZkZDkyZmFjMTYyZDNiYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBCp+iKSdIje1wjTNLudcNncP5WY
KWrV12uXBbR9qRruYKsenA+qawbNpLfFu0M26Hw56RsQhMv4bvRifYMZDgvRtq87
zVpGDlzHpav5uwdlMjYprL1Av+dxpR3xYgGllrhCNARuw53RPblGzHcPbVuAPVj7
Ggb0ZlliON4Qha5XnyXnDh92TtzrD58jemsUUnA6JiJ42SQaBd+mjCJAEvixrT8l
GM+R8Ck1gwPzQW5cokO0JAxwWWH3cGrLx94gGE+v3/mG9sO9Q3Q8IWmKX9yDANsJ
vpjjV1qiS0ulkIpixd+2Jhrs1kZSeQObqwD2MtN6BXaw2ZWWKIP/c0s5EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGArmBTNgZDMDOzbNt2S+sFi07wDMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvWUN1WUZNMkJrTXdNN05zMjNaTDZ3V0xUdkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1AWYMA0G
CSqGSIb3DQEBCwUAA4IBAQAtGtmsknHDhkQQYwFJQUwj9FMmNn9OgbFyyVxC/TXq
93APhEmqxHlAPw2bqv+rHsO7CVdF+HKB0i48NufFugA4xA42QPb8tn07L0RdQy/p
18J5HI+gRWUUn6ccwbNYxCEiDNzSIkG8ORr458vam8J7wkrSsDe2xwalrJGGIteh
mfdnYsAKih0SgPfVnccz6gL/yjzLbE5GEcvXnvYmC4VpIRCnGjVQSdxnvHQq/XHk
D3QUDI7wrDT1bcVkwTeuGNwxyyZy0KohhgK2gccTadkulmrzVmA4g+YpiuncMjRG
Ydj/p7YS2X9RIkBT5wUg0iPR83RjkfKt0ZF/+E7xSanq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org