Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ja-JEeD5UOfOIUVbkrxbeejgkWc.roa
File: Ja-JEeD5UOfOIUVbkrxbeejgkWc.roa (raw, json)
Hash identifier: MB7H+rHpPIJQxDTYJwFIVrNY35tS3OWnihWLek3Fsv4=
Subject key identifier: 25:AF:89:11:E0:F9:50:E7:CE:21:45:5B:92:BC:5B:79:E8:E0:91:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A9493398FB454D2A254922111E91F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ja-JEeD5UOfOIUVbkrxbeejgkWc.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216145
IP address blocks: 212.192.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 14:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:94:93:39:8f:b4:54:d2:a2:54:92:21:11:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25af8911e0f950e7ce21455b92bc5b79e8e09167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:0b:26:a1:9d:a3:5f:5b:a5:86:a9:33:05:
bc:8e:79:ba:d9:40:61:fc:21:7f:53:d9:c9:de:1a:
37:bd:04:36:0f:dd:f3:f4:3e:21:62:74:27:a5:c9:
bd:d8:af:eb:fe:9f:24:ae:1c:37:4e:50:6c:67:df:
bb:3c:f8:6c:06:2d:9c:be:28:22:a8:30:9e:52:6d:
2f:ae:74:eb:ad:f9:93:9a:a9:af:b4:0d:e0:6e:c4:
dc:90:e2:ec:d8:38:98:ec:7a:22:f6:b4:56:bf:0d:
d1:d0:e7:3f:a6:d7:46:b6:6d:a4:ac:f5:3c:da:b5:
7d:32:50:0f:02:0b:b6:c1:cd:1e:d6:a3:55:dc:79:
c4:38:a7:fd:0e:4f:1d:7a:3b:cd:d0:cd:cd:93:e9:
a3:52:1f:67:c2:c6:48:3f:1b:34:f7:83:7d:f2:94:
c5:16:fe:09:33:f4:02:dd:17:a7:c8:47:fa:cf:4c:
a8:6e:27:12:95:24:1e:d1:38:10:21:97:13:ff:3d:
c1:d1:ce:b2:da:9c:9b:67:b6:54:68:1f:34:c9:f7:
ff:82:d8:4c:fc:06:77:5c:ad:62:87:08:4c:6f:0d:
55:17:1d:d4:f9:1a:61:b4:18:00:26:83:f5:91:c7:
92:59:80:76:02:44:6b:e8:0e:8c:b3:68:d0:90:45:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AF:89:11:E0:F9:50:E7:CE:21:45:5B:92:BC:5B:79:E8:E0:91:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ja-JEeD5UOfOIUVbkrxbeejgkWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:77:f9:07:61:79:0c:5c:8c:d6:d5:ab:3d:99:e0:21:bb:10:
18:24:d4:40:03:5d:a5:4e:25:68:ed:1b:1c:c0:78:97:db:af:
64:44:8c:2b:ae:bd:40:e3:9b:a7:9d:e6:eb:be:28:07:0e:5f:
c2:8a:2a:6e:5a:89:26:d3:04:57:93:32:5f:10:7c:59:3b:c5:
0e:3c:6e:c6:52:50:d8:0b:9b:d8:d0:c7:b7:c9:d9:8a:ea:49:
25:ed:a7:3a:87:b8:e2:46:2b:6e:da:06:e8:bd:48:27:28:48:
a1:7f:48:65:9e:f0:3d:cf:a1:e9:02:6e:da:a1:86:16:11:10:
6b:5c:41:50:3f:b0:2d:9a:f4:01:a9:fd:c2:2b:3d:fe:46:4b:
5b:2e:43:54:4c:32:c9:2d:a2:9d:68:cf:61:0a:98:25:57:23:
d4:a8:2a:6e:f6:98:46:71:2b:f6:73:68:fd:86:43:84:e7:bc:
06:42:f4:8f:1a:91:c7:41:48:a2:ad:60:e7:dc:4e:94:4f:66:
6b:49:19:46:a7:27:b7:bb:4d:ac:8b:1b:2b:4c:8e:00:a6:48:
d1:27:8f:77:a6:fe:3b:b5:f1:2f:0d:e8:8f:a3:dd:75:cc:fe:
5f:1a:b6:50:56:e4:02:a6:9b:2c:54:22:ad:b5:58:fd:93:96:
87:9d:b9:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKpSTOY+0VNKiVJIhEekfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFmODkxMWUwZjk1MGU3Y2UyMTQ1NWI5MmJjNWI3OWU4ZTA5MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5ULJqGdo19bpYapMwW8jnm62UBh
/CF/U9nJ3ho3vQQ2D93z9D4hYnQnpcm92K/r/p8krhw3TlBsZ9+7PPhsBi2cvigi
qDCeUm0vrnTrrfmTmqmvtA3gbsTckOLs2DiY7Hoi9rRWvw3R0Oc/ptdGtm2krPU8
2rV9MlAPAgu2wc0e1qNV3HnEOKf9Dk8dejvN0M3Nk+mjUh9nwsZIPxs094N98pTF
Fv4JM/QC3RenyEf6z0yobicSlSQe0TgQIZcT/z3B0c6y2pybZ7ZUaB80yff/gthM
/AZ3XK1ihwhMbw1VFx3U+RphtBgAJoP1kceSWYB2AkRr6A6Ms2jQkEUS/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWviRHg+VDnziFFW5K8W3no4JFnMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSmEtSkVlRDVVT2ZPSVVWYmtyeGJlZWpna1djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDUMA0G
CSqGSIb3DQEBCwUAA4IBAQB/d/kHYXkMXIzW1as9meAhuxAYJNRAA12lTiVo7Rsc
wHiX269kRIwrrr1A45unnebrvigHDl/CiipuWokm0wRXkzJfEHxZO8UOPG7GUlDY
C5vY0Me3ydmK6kkl7ac6h7jiRitu2gbovUgnKEihf0hlnvA9z6HpAm7aoYYWERBr
XEFQP7AtmvQBqf3CKz3+RktbLkNUTDLJLaKdaM9hCpglVyPUqCpu9phGcSv2c2j9
hkOE57wGQvSPGpHHQUiirWDn3E6UT2ZrSRlGpye3u02sixsrTI4ApkjRJ493pv47
tfEvDeiPo911zP5fGrZQVuQCppssVCKttVj9k5aHnbnk
-----END CERTIFICATE-----
Generated at Wed Feb 21 19:06:50 2024 by rpki-client on console-ams.rpki-client.org