Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7SnpdBDWOBmO5S1ZiQMda9WHF40.roa
File: 7SnpdBDWOBmO5S1ZiQMda9WHF40.roa (raw, json)
Hash identifier: 307UD4pqdnvRvso+1Og5nURBR+YnLevs69TBW4+S+lY=
Subject key identifier: ED:29:E9:74:10:D6:38:19:8E:E5:2D:59:89:03:1D:6B:D5:87:17:8D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188E3478C77A81112F6E3528795F7B3C1E3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7SnpdBDWOBmO5S1ZiQMda9WHF40.roa
Signing time: Thu 22 Jun 2023 13:24:57 +0000
ROA not before: Thu 22 Jun 2023 13:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:47:8c:77:a8:11:12:f6:e3:52:87:95:f7:b3:c1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 22 13:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed29e97410d638198ee52d5989031d6bd587178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:f2:9a:46:84:5e:97:ef:29:ee:d7:cd:6f:
24:11:e5:5d:24:79:b0:cb:96:51:a3:75:9d:b8:02:
7f:8e:04:e5:8f:1e:9a:c9:1d:08:4f:97:b0:73:61:
22:96:1f:7f:b7:fe:da:1f:e6:5c:b4:99:f3:4d:00:
19:2a:9d:b8:1d:1c:4d:ae:dc:14:c3:c4:52:3c:78:
fc:33:c9:b8:06:0b:a6:ca:6e:f6:f4:cd:a5:b4:54:
88:9b:1b:0d:4c:09:4a:69:dc:9a:19:e3:05:9e:74:
aa:a6:c0:e1:79:d7:79:da:9f:7a:b3:44:85:4c:59:
f7:a4:3c:9d:7c:ef:40:00:cb:ea:1a:fd:6b:dc:fe:
ac:b0:09:9d:2f:82:f9:9e:be:4e:a6:2c:35:28:aa:
a1:c1:9d:29:94:77:e8:4a:20:07:22:32:69:e2:a4:
a1:ec:60:c0:26:f3:19:ae:e4:0b:f4:44:01:95:e8:
c8:38:b6:c0:b2:8e:0c:09:89:15:23:5f:cb:fe:94:
a0:75:67:c0:68:94:e5:69:b3:02:c9:2f:dc:3b:ce:
23:49:5a:2b:7f:a6:a8:e7:d5:0a:80:3f:69:f8:17:
14:0e:a9:72:ec:f6:7a:3d:af:41:6b:d5:21:91:e0:
36:07:f7:6b:95:41:5b:b4:16:f4:df:4b:3c:dc:ff:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:E9:74:10:D6:38:19:8E:E5:2D:59:89:03:1D:6B:D5:87:17:8D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7SnpdBDWOBmO5S1ZiQMda9WHF40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9e:8b:39:d9:32:e3:75:24:82:fb:dd:f8:be:14:32:5c:0d:
a4:b4:64:12:4a:16:9a:16:d2:c1:b1:cc:69:da:5b:ba:31:7f:
d4:87:18:bc:7a:a4:66:0a:bb:a0:ba:a7:74:ad:e2:33:d0:e3:
48:64:a1:12:59:cd:81:d2:39:d0:03:16:f3:ea:d4:4f:f0:a2:
9c:ce:44:cd:53:f1:6a:1f:3c:fd:3d:4a:7c:d6:0a:ab:8c:0a:
2d:86:79:fe:fc:25:da:d0:c7:17:35:86:5c:ea:c3:da:16:45:
d6:5c:26:6f:1d:bc:a5:aa:67:f9:e0:d5:5f:26:12:9e:b0:a7:
89:10:c8:98:32:d9:2e:05:65:48:7c:50:46:90:9b:d9:a2:0c:
ac:b2:0a:79:76:a5:ea:a3:9d:1e:c6:d0:d4:04:b7:4a:7a:2b:
64:11:c2:57:df:ae:ca:2e:c5:20:be:79:6c:14:03:d0:59:93:
63:ae:7e:4b:64:7c:ff:89:5a:d5:37:c8:5a:bb:e0:dd:8c:f8:
5f:3c:a8:1a:d7:20:8d:91:eb:6e:b0:4a:7f:06:a2:cc:1e:e6:
c1:7e:fe:ac:d9:2c:c7:95:e2:ff:c1:19:e7:c6:94:aa:90:35:
fc:00:44:fe:a6:37:23:bd:59:63:1a:fa:5e:ea:c3:ae:de:3c:
15:a3:e8:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjjR4x3qBES9uNSh5X3s8HjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjIyMTMyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI5ZTk3NDEwZDYzODE5OGVlNTJkNTk4OTAzMWQ2YmQ1ODcxNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW/ymkaEXpfvKe7XzW8kEeVdJHmw
y5ZRo3WduAJ/jgTljx6ayR0IT5ewc2Eilh9/t/7aH+ZctJnzTQAZKp24HRxNrtwU
w8RSPHj8M8m4Bgumym729M2ltFSImxsNTAlKadyaGeMFnnSqpsDhedd52p96s0SF
TFn3pDydfO9AAMvqGv1r3P6ssAmdL4L5nr5Opiw1KKqhwZ0plHfoSiAHIjJp4qSh
7GDAJvMZruQL9EQBlejIOLbAso4MCYkVI1/L/pSgdWfAaJTlabMCyS/cO84jSVor
f6ao59UKgD9p+BcUDqly7PZ6Pa9Ba9UhkeA2B/drlUFbtBb030s83P/CKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0p6XQQ1jgZjuUtWYkDHWvVhxeNMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvN1NucGRCRFdPQm1PNVMxWmlRTWRhOVdIRjQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDQMA0G
CSqGSIb3DQEBCwUAA4IBAQBjnos52TLjdSSC+934vhQyXA2ktGQSShaaFtLBscxp
2lu6MX/Uhxi8eqRmCruguqd0reIz0ONIZKESWc2B0jnQAxbz6tRP8KKczkTNU/Fq
Hzz9PUp81gqrjAothnn+/CXa0McXNYZc6sPaFkXWXCZvHbylqmf54NVfJhKesKeJ
EMiYMtkuBWVIfFBGkJvZogyssgp5dqXqo50extDUBLdKeitkEcJX367KLsUgvnls
FAPQWZNjrn5LZHz/iVrVN8hau+DdjPhfPKga1yCNketusEp/BqLMHubBfv6s2SzH
leL/wRnnxpSqkDX8AET+pjcjvVljGvpe6sOu3jwVo+h7
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org