Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ETZvfZ1YYOi6HRgghqLv5xXVxI8.roa
File: ETZvfZ1YYOi6HRgghqLv5xXVxI8.roa (raw, json)
Hash identifier: Qhta4Nc57en9JOwzQpnq1v2+nJSNpkJutR0u8at3d1Y=
Subject key identifier: 11:36:6F:7D:9D:58:60:E8:BA:1D:18:20:86:A2:EF:E7:15:D5:C4:8F
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A982F97AA68577004CD8CF121F1F9819F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ETZvfZ1YYOi6HRgghqLv5xXVxI8.roa
Signing time: Fri 15 Sep 2023 09:32:50 +0000
ROA not before: Fri 15 Sep 2023 09:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12443
IP address blocks: 213.175.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:2f:97:aa:68:57:70:04:cd:8c:f1:21:f1:f9:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11366f7d9d5860e8ba1d182086a2efe715d5c48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:1b:bc:c3:67:f9:0e:b3:fd:16:e6:95:55:
1d:f5:9f:93:f3:46:0d:8d:23:b9:6d:53:73:9d:f6:
09:0b:af:ee:6c:9a:77:39:42:7d:6d:6f:be:b0:ca:
c3:4e:6b:d2:5b:7b:ba:8b:ac:18:30:ff:06:f5:48:
5e:c9:2b:af:cf:b3:88:f4:6e:d5:7f:39:67:58:72:
28:a9:4c:04:53:d1:4f:43:53:fd:33:21:d6:93:8f:
12:93:24:8d:0e:e6:3d:02:22:d7:44:15:e5:44:cd:
d0:4b:db:84:b3:26:f4:26:19:b2:84:b7:f7:5f:57:
1f:c5:cc:39:ff:4e:dc:84:71:43:45:a8:93:4f:3d:
69:b3:9e:7e:94:ad:f8:39:c2:1b:47:96:70:8f:f4:
e8:f0:a2:49:7b:95:ae:f8:8c:a6:02:6d:8b:d6:21:
05:cb:76:38:6d:1f:f6:e8:e6:5b:0f:8e:ca:52:ca:
36:28:27:6c:8e:ce:fe:ea:aa:e4:27:ed:a5:d7:a3:
c0:60:c5:e9:bd:2d:da:51:1d:47:a3:4b:6f:44:66:
66:71:1f:fe:8f:31:bb:e9:5e:f6:d3:34:8b:85:08:
1b:97:2f:b8:3f:5a:f2:b4:36:76:54:24:66:a5:fc:
89:3d:4e:99:d8:b9:3d:d8:0d:71:89:df:33:17:71:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:6F:7D:9D:58:60:E8:BA:1D:18:20:86:A2:EF:E7:15:D5:C4:8F
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ETZvfZ1YYOi6HRgghqLv5xXVxI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:08:11:c8:0f:df:09:9d:ae:58:23:30:d3:26:2d:3b:39:31:
bc:90:d5:7e:95:47:0f:74:b5:bf:2d:66:4b:0d:e5:ec:46:60:
78:36:0f:a7:ee:fb:70:d1:f6:ba:42:ba:52:4d:4c:b2:e2:77:
a4:52:7b:bf:c5:29:7f:47:25:a7:0b:f0:38:61:67:92:14:da:
04:db:f5:9e:63:60:66:28:51:82:66:12:0d:3c:5d:15:04:78:
7e:f0:ab:01:19:13:1a:4b:a1:37:a5:16:94:93:25:16:d7:d6:
2c:08:93:b7:3d:57:2b:a4:29:47:a5:9b:1c:fb:7c:b2:92:b6:
01:f2:56:07:cf:89:b0:c6:ca:91:23:68:7b:db:d1:02:5f:5d:
36:3e:0b:a9:25:a7:3f:bc:46:48:ad:2b:98:dd:81:84:0a:a3:
c7:d2:f1:c9:6c:1c:5a:74:e0:65:0c:49:cd:cc:26:96:d4:d1:
98:33:1e:e4:62:f7:60:0f:33:31:a1:cb:de:49:07:a1:cd:3c:
48:d4:ee:18:d3:7d:0b:57:09:90:43:b3:bf:86:30:44:16:58:
fa:1e:af:8b:5e:b4:11:84:bf:da:fb:ac:90:76:57:9b:44:a0:
76:6d:92:96:66:ed:7c:3b:4f:4b:aa:2f:bf:7c:d7:f6:e6:d1:
ca:c8:f1:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqYL5eqaFdwBM2M8SHx+YGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMwOTE1MDkzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTM2NmY3ZDlkNTg2MGU4YmExZDE4MjA4NmEyZWZlNzE1ZDVjNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCEbvMNn+Q6z/RbmlVUd9Z+T80YN
jSO5bVNznfYJC6/ubJp3OUJ9bW++sMrDTmvSW3u6i6wYMP8G9UheySuvz7OI9G7V
fzlnWHIoqUwEU9FPQ1P9MyHWk48SkySNDuY9AiLXRBXlRM3QS9uEsyb0JhmyhLf3
X1cfxcw5/07chHFDRaiTTz1ps55+lK34OcIbR5Zwj/To8KJJe5Wu+IymAm2L1iEF
y3Y4bR/26OZbD47KUso2KCdsjs7+6qrkJ+2l16PAYMXpvS3aUR1Ho0tvRGZmcR/+
jzG76V720zSLhQgbly+4P1rytDZ2VCRmpfyJPU6Z2Lk92A1xid8zF3EkkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBE2b32dWGDouh0YIIai7+cV1cSPMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvRVRadmZaMVlZT2k2SFJnZ2hxTHY1eFhWeEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1a98MA0G
CSqGSIb3DQEBCwUAA4IBAQDGCBHID98Jna5YIzDTJi07OTG8kNV+lUcPdLW/LWZL
DeXsRmB4Ng+n7vtw0fa6QrpSTUyy4nekUnu/xSl/RyWnC/A4YWeSFNoE2/WeY2Bm
KFGCZhINPF0VBHh+8KsBGRMaS6E3pRaUkyUW19YsCJO3PVcrpClHpZsc+3yykrYB
8lYHz4mwxsqRI2h729ECX102PgupJac/vEZIrSuY3YGECqPH0vHJbBxadOBlDEnN
zCaW1NGYMx7kYvdgDzMxocveSQehzTxI1O4Y030LVwmQQ7O/hjBEFlj6Hq+LXrQR
hL/a+6yQdlebRKB2bZKWZu18O09Lqi+/fNf25tHKyPH3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org