Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DlLuyCBvPLdSJcnVEIu1Ttqr2Ck.roa
File: DlLuyCBvPLdSJcnVEIu1Ttqr2Ck.roa (raw, json)
Hash identifier: CEOxLkBAxehdJua1ljLcfWoKWX7GavTVVr93963t8Xw=
Subject key identifier: 0E:52:EE:C8:20:6F:3C:B7:52:25:C9:D5:10:8B:B5:4E:DA:AB:D8:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D0CC867EA5916F675AB10F2D41359CB32
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DlLuyCBvPLdSJcnVEIu1Ttqr2Ck.roa
Signing time: Mon 15 Jan 2024 11:01:16 +0000
ROA not before: Mon 15 Jan 2024 11:01:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 212.192.244.0/24 maxlen: 24
2a0c:ff40::/29 maxlen: 29
2a03:3ae0::/29 maxlen: 29
2a07:e4c0::/29 maxlen: 29
2a0b:7300::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 06:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:c8:67:ea:59:16:f6:75:ab:10:f2:d4:13:59:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 15 11:01:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e52eec8206f3cb75225c9d5108bb54edaabd829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:98:81:b7:9f:bb:f6:98:06:07:67:74:d9:
37:cb:ef:f9:8d:d1:6e:6d:32:a5:7d:43:00:c8:3f:
eb:83:80:ea:5d:cf:14:ce:b4:68:42:b9:b5:5f:6b:
6a:66:8e:d0:31:69:a2:08:68:1c:c0:6c:89:45:d6:
01:d9:a8:d0:c1:ca:f9:6e:ce:37:0a:15:c8:d4:b2:
fb:61:a8:a9:1f:36:3e:a5:ef:98:d4:22:1f:4f:3e:
96:ac:e7:a5:dc:be:25:95:b0:7d:4f:62:7a:ce:84:
27:17:9e:75:3a:d3:51:e8:90:30:b6:ae:ce:d7:26:
bd:b1:d2:4a:81:31:d1:23:9a:82:ba:32:fd:8c:23:
ce:7c:9b:43:ee:7c:d3:30:e2:79:9a:d9:de:c9:1d:
2c:1e:ba:27:0d:be:a7:dc:c4:70:9c:f1:f5:28:37:
eb:55:c3:4e:c2:13:d3:15:36:94:81:1b:57:9e:83:
f4:a9:53:4f:a9:46:59:fa:77:3f:54:9a:64:2f:94:
9b:3a:61:8e:32:73:c0:7a:cf:80:3d:0d:44:23:92:
65:0f:9c:92:5a:e5:52:ba:29:30:bc:ff:c4:5c:39:
22:d4:dd:ae:4a:2d:bf:6f:06:3a:e4:0c:d2:55:a3:
0d:98:54:dd:05:36:77:fa:ba:12:be:d8:f9:1f:54:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:EE:C8:20:6F:3C:B7:52:25:C9:D5:10:8B:B5:4E:DA:AB:D8:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DlLuyCBvPLdSJcnVEIu1Ttqr2Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.244.0/24
IPv6:
2a03:3ae0::/29
2a07:e4c0::/29
2a0b:7300::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
65:e1:7e:f4:e2:4e:c4:71:35:ba:84:12:4b:28:ba:2d:b7:c1:
bb:9a:32:79:57:13:d9:0c:e7:64:17:88:26:f0:1b:22:97:98:
45:77:04:9f:83:94:54:96:41:d6:64:da:32:2f:a6:b2:9b:f6:
1b:2d:b8:f5:7a:04:70:fd:87:d4:7d:3b:cb:4a:8c:68:5a:82:
5c:a7:f6:1c:55:32:fa:5e:d7:88:45:33:ca:02:8e:5d:d6:ba:
f0:84:94:59:4a:e4:2e:ea:90:12:28:1a:d0:49:a5:58:72:fb:
a5:95:2e:d5:61:63:79:a5:5b:d1:18:ea:22:6a:a7:29:d9:bb:
bb:b6:6e:48:92:c4:35:c1:3b:83:43:42:46:ff:3b:d2:fa:b7:
5a:20:84:f7:05:32:2a:f2:26:1c:66:9b:48:ff:b7:b5:35:b7:
5b:7c:57:f5:a8:17:81:8a:76:34:b1:45:cc:c8:b3:08:5b:69:
3b:13:b7:30:88:36:74:10:b6:24:15:71:2e:59:93:1a:11:b5:
e6:c8:63:4c:dc:67:a7:b5:fd:a1:81:e6:a4:0d:36:f9:3c:f4:
14:2a:c6:d9:b0:73:75:6d:26:15:84:2b:65:ef:83:a7:e5:b8:
52:11:0e:78:4d:ed:b4:8f:71:a2:4c:7b:43:83:af:e2:d1:e5:
0b:57:1b:d8
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY0MyGfqWRb2dasQ8tQTWcsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTE1MTEwMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTUyZWVjODIwNmYzY2I3NTIyNWM5ZDUxMDhiYjU0ZWRhYWJkODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndSYgbefu/aYBgdndNk3y+/5jdFu
bTKlfUMAyD/rg4DqXc8UzrRoQrm1X2tqZo7QMWmiCGgcwGyJRdYB2ajQwcr5bs43
ChXI1LL7YaipHzY+pe+Y1CIfTz6WrOel3L4llbB9T2J6zoQnF551OtNR6JAwtq7O
1ya9sdJKgTHRI5qCujL9jCPOfJtD7nzTMOJ5mtneyR0sHronDb6n3MRwnPH1KDfr
VcNOwhPTFTaUgRtXnoP0qVNPqUZZ+nc/VJpkL5SbOmGOMnPAes+APQ1EI5JlD5yS
WuVSuikwvP/EXDki1N2uSi2/bwY65AzSVaMNmFTdBTZ3+roSvtj5H1RS1wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFA5S7sggbzy3UiXJ1RCLtU7aq9gpMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRGxMdXlDQnZQTGRTSmNuVkVJdTFUdHFyMkNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAMBAIAATAGAwQA1MD0MCIE
AgACMBwDBQMqAzrgAwUDKgfkwAMFAyoLcwADBQMqDP9AMA0GCSqGSIb3DQEBCwUA
A4IBAQBl4X704k7EcTW6hBJLKLott8G7mjJ5VxPZDOdkF4gm8Bsil5hFdwSfg5RU
lkHWZNoyL6aym/YbLbj1egRw/YfUfTvLSoxoWoJcp/YcVTL6XteIRTPKAo5d1rrw
hJRZSuQu6pASKBrQSaVYcvullS7VYWN5pVvRGOoiaqcp2bu7tm5IksQ1wTuDQ0JG
/zvS+rdaIIT3BTIq8iYcZptI/7e1NbdbfFf1qBeBinY0sUXMyLMIW2k7E7cwiDZ0
ELYkFXEuWZMaEbXmyGNM3Gentf2hgeakDTb5PPQUKsbZsHN1bSYVhCtl74On5bhS
EQ54Te20j3GiTHtDg6/i0eULVxvY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org