Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/rC90kcZNW54LrvFLpMwTVnMBnHs.roa
File: rC90kcZNW54LrvFLpMwTVnMBnHs.roa (raw, json)
Hash identifier: RWZhAczsJxs5fuz8yuu21IuO3k3muY/pNjO3bxfZ66w=
Subject key identifier: AC:2F:74:91:C6:4D:5B:9E:0B:AE:F1:4B:A4:CC:13:56:73:01:9C:7B
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 01856F700BABF5C6709B5450D1D5CA4C5EAC
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/rC90kcZNW54LrvFLpMwTVnMBnHs.roa
Signing time: Sun 01 Jan 2023 22:24:51 +0000
ROA not before: Sun 01 Jan 2023 22:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62336
IP address blocks: 212.53.216.0/22 maxlen: 22
212.53.224.0/20 maxlen: 20
212.48.116.64/26 maxlen: 26
212.53.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:0b:ab:f5:c6:70:9b:54:50:d1:d5:ca:4c:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 22:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac2f7491c64d5b9e0baef14ba4cc135673019c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:26:f6:18:9d:77:cb:ec:bc:df:87:d8:a9:
eb:1f:68:16:1c:4f:90:00:86:9b:e3:c7:ef:f2:06:
2b:de:08:4d:30:84:5b:8d:87:62:9f:d5:ff:55:d9:
65:ec:ce:ab:ea:4d:23:74:e9:bc:2b:db:90:71:f6:
96:eb:fc:93:24:1d:55:85:e7:8d:78:f9:16:c8:f2:
1f:b0:a1:99:fe:2b:93:55:b5:25:f7:35:8b:4b:11:
9a:22:3e:fe:86:2c:22:8a:c7:9b:73:59:87:b4:30:
02:ea:85:41:53:20:19:4d:6b:93:62:47:81:d6:67:
d1:44:bf:49:ca:06:07:2d:01:8b:e6:bf:35:3f:28:
f1:1f:c1:fd:5f:6b:15:13:f5:9d:53:1b:3d:f2:0d:
20:58:68:4b:23:8a:4e:80:de:c4:1b:2a:4b:d8:28:
d8:2c:10:e7:6e:cb:d9:e3:f0:ce:a8:79:8f:59:45:
a6:e5:f5:45:ee:24:01:4b:70:31:b7:9a:52:cc:74:
d5:91:17:08:05:99:43:e5:d5:33:bd:81:a0:82:48:
65:4f:7c:35:2c:3f:61:43:03:3e:90:7e:a8:1d:d8:
a1:28:bc:60:7c:6a:0d:e9:cc:63:32:7c:b2:6e:f2:
f8:b5:09:8a:a3:e6:16:cf:9d:69:45:e4:e2:81:d3:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:74:91:C6:4D:5B:9E:0B:AE:F1:4B:A4:CC:13:56:73:01:9C:7B
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/rC90kcZNW54LrvFLpMwTVnMBnHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.116.64/26
212.53.216.0/22
212.53.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:72:5e:b9:69:81:7c:bd:c8:8f:23:a0:a6:94:29:b0:f1:7d:
4d:de:4c:fd:1b:e7:a3:3b:e6:05:16:04:8e:24:3a:b3:19:6e:
31:80:a9:a3:12:1b:7d:07:5c:03:93:b4:c4:d9:f7:6e:13:1c:
1a:dd:a4:6d:f9:ff:6d:13:09:2d:43:60:57:be:ef:1f:f6:61:
fc:f7:15:80:9f:44:c5:7f:eb:18:91:7c:38:7b:1c:81:5b:91:
54:0f:50:26:83:a8:e4:cc:1f:e6:83:cd:1c:c3:16:a0:db:56:
78:43:82:f4:7f:9d:5c:f2:be:14:42:52:8d:4f:18:87:e7:c8:
93:56:53:b3:24:f4:10:59:6d:06:cf:40:3f:21:a5:0f:63:a9:
17:ad:6a:d9:10:e1:5d:42:78:8b:6f:5d:23:1b:34:09:43:8e:
bf:9b:81:e1:4e:6d:68:23:68:0e:71:8c:44:93:d4:73:09:a8:
86:35:7b:07:c0:e5:b0:93:5c:d2:a7:f7:e9:22:c4:47:31:c1:
8d:4d:8a:32:64:59:bb:88:57:2e:1d:1a:9d:f3:a8:bf:21:4d:
2e:80:f7:f8:60:2c:ab:a8:83:4a:44:1c:1c:ef:17:dc:65:69:
39:79:b8:05:6a:e9:d3:ce:93:fa:a0:88:96:d0:9d:31:45:7a:
3f:1b:13:d7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYVvcAur9cZwm1RQ0dXKTF6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg5NTM5NTIwMDA0MjcwZDM0MjUzYmRjMTZkODc3ODQx
NTZlMWEwHhcNMjMwMTAxMjIyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzJmNzQ5MWM2NGQ1YjllMGJhZWYxNGJhNGNjMTM1NjczMDE5YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD0m9hidd8vsvN+H2KnrH2gWHE+Q
AIab48fv8gYr3ghNMIRbjYdin9X/Vdll7M6r6k0jdOm8K9uQcfaW6/yTJB1VheeN
ePkWyPIfsKGZ/iuTVbUl9zWLSxGaIj7+hiwiisebc1mHtDAC6oVBUyAZTWuTYkeB
1mfRRL9JygYHLQGL5r81PyjxH8H9X2sVE/WdUxs98g0gWGhLI4pOgN7EGypL2CjY
LBDnbsvZ4/DOqHmPWUWm5fVF7iQBS3Axt5pSzHTVkRcIBZlD5dUzvYGggkhlT3w1
LD9hQwM+kH6oHdihKLxgfGoN6cxjMnyybvL4tQmKo+YWz51pReTigdPW6wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKwvdJHGTVueC67xS6TME1ZzAZx7MB8GA1UdIwQY
MBaAFCWolTlSAAQnDTQlO9wW2HeEFW4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgt
ZDAwNTI2YjkxNjA1LzEvckM5MGtjWk5XNTRMcnZGTHBNd1RWbk1CbkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgtZDAwNTI2YjkxNjA1
LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwUG1DB0QAME
AtQ12AMEBdQ14DANBgkqhkiG9w0BAQsFAAOCAQEAXXJeuWmBfL3IjyOgppQpsPF9
Td5M/RvnozvmBRYEjiQ6sxluMYCpoxIbfQdcA5O0xNn3bhMcGt2kbfn/bRMJLUNg
V77vH/Zh/PcVgJ9ExX/rGJF8OHscgVuRVA9QJoOo5Mwf5oPNHMMWoNtWeEOC9H+d
XPK+FEJSjU8Yh+fIk1ZTsyT0EFltBs9APyGlD2OpF61q2RDhXUJ4i29dIxs0CUOO
v5uB4U5taCNoDnGMRJPUcwmohjV7B8DlsJNc0qf36SLERzHBjU2KMmRZu4hXLh0a
nfOovyFNLoD3+GAsq6iDSkQcHO8X3GVpOXm4BWrp086T+qCIltCdMUV6PxsT1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:30 2024 by rpki-client on console-ams.rpki-client.org