Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QQZb1NM5xFxxPy9xgd96Er1fSSk.roa
File: QQZb1NM5xFxxPy9xgd96Er1fSSk.roa (raw, json)
Hash identifier: /q0/TAwMOGPyEcFxXIGOpPWH4WO1OOC9GtirRkIXmjo=
Subject key identifier: 41:06:5B:D4:D3:39:C4:5C:71:3F:2F:71:81:DF:7A:12:BD:5F:49:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B3DDC8F7C806C7BC7741EF913D14F8A90
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QQZb1NM5xFxxPy9xgd96Er1fSSk.roa
Signing time: Tue 17 Oct 2023 13:39:06 +0000
ROA not before: Tue 17 Oct 2023 13:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216145
IP address blocks: 212.192.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:dc:8f:7c:80:6c:7b:c7:74:1e:f9:13:d1:4f:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 13:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41065bd4d339c45c713f2f7181df7a12bd5f4929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:07:7b:96:53:b1:3c:c3:90:d5:f5:39:fc:
90:0a:55:9a:47:7b:2c:bb:e8:cd:cc:d5:04:e6:bc:
0e:9e:f4:86:60:d2:20:2d:d6:80:f2:25:b9:9b:d6:
5b:27:c8:2a:82:fe:84:67:c5:74:b3:5e:0a:01:2a:
ca:3b:a2:79:ed:6f:a7:a4:01:0c:d4:ae:9e:e4:bb:
c8:0d:ac:53:2e:d5:38:c4:dd:51:40:21:5f:56:e2:
81:80:8d:e8:e2:a3:26:9b:0c:5d:47:26:f4:10:22:
32:71:30:5d:3a:a7:60:15:64:9c:6e:54:7c:1c:8e:
0d:6d:df:78:cc:42:a5:2b:5c:31:29:58:0f:ec:ce:
cc:92:f7:81:2b:f1:ad:12:0f:4e:c0:94:6b:ae:3f:
47:48:b2:e1:78:71:01:3c:c0:74:03:87:0e:4d:48:
98:4a:94:fd:89:82:41:bf:6e:41:a4:c8:05:5b:0c:
e3:92:44:fa:e0:fc:6d:d9:af:ac:6d:76:cf:a0:2f:
30:53:8d:c1:b9:ad:a0:ad:57:79:6a:98:e6:b6:bc:
a8:27:a4:f4:cf:db:ee:b9:c6:c7:af:70:4e:98:7f:
8e:3d:91:ce:29:a1:9c:9b:09:56:33:fc:2f:ce:e5:
d3:1c:47:38:23:30:37:32:45:22:6b:69:ab:d6:46:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:5B:D4:D3:39:C4:5C:71:3F:2F:71:81:DF:7A:12:BD:5F:49:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QQZb1NM5xFxxPy9xgd96Er1fSSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bd:ce:c6:7e:1d:65:58:dc:93:65:e6:de:bd:8a:19:3b:f7:
ff:d4:c2:62:74:b3:68:61:28:22:c2:af:e3:94:e1:58:7c:a4:
8f:57:49:37:aa:d0:1a:93:16:b8:3e:e9:2c:4e:28:f1:0e:a9:
9e:7e:3d:16:91:3f:ec:f9:0b:a4:d9:29:51:b2:9f:75:5a:e8:
bf:1b:c9:9f:3d:8f:d1:86:85:e3:c9:76:71:b5:b0:62:cc:2a:
e8:c1:19:ac:66:19:17:5e:f6:2b:fc:71:bc:11:c3:29:17:4f:
57:e9:14:3c:2f:17:d7:64:52:a7:86:51:4e:f7:7f:06:df:e5:
c6:85:75:5c:5b:33:be:a9:91:44:c5:e5:eb:dc:0e:38:b6:9f:
13:7f:eb:47:5b:28:4a:c5:9d:f6:3a:5b:0b:23:f7:ce:b0:80:
8e:b7:e7:34:8e:52:fb:12:9a:22:25:a7:be:c6:b3:44:f0:64:
86:5c:58:48:d2:4d:b4:d5:f4:3d:fb:c0:ed:22:f2:94:cd:d0:
c5:b6:a4:90:36:35:aa:33:0e:0e:17:a6:d6:31:26:e4:5c:32:
00:24:b1:c6:76:62:4a:70:45:96:62:e8:98:a4:ea:85:50:ca:
57:82:69:40:c5:79:fa:2a:fc:cd:02:c7:75:ed:cd:29:56:94:
74:a9:1a:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYs93I98gGx7x3Qe+RPRT4qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDE3MTMzOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTA2NWJkNGQzMzljNDVjNzEzZjJmNzE4MWRmN2ExMmJkNWY0OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsIHe5ZTsTzDkNX1OfyQClWaR3ss
u+jNzNUE5rwOnvSGYNIgLdaA8iW5m9ZbJ8gqgv6EZ8V0s14KASrKO6J57W+npAEM
1K6e5LvIDaxTLtU4xN1RQCFfVuKBgI3o4qMmmwxdRyb0ECIycTBdOqdgFWScblR8
HI4Nbd94zEKlK1wxKVgP7M7MkveBK/GtEg9OwJRrrj9HSLLheHEBPMB0A4cOTUiY
SpT9iYJBv25BpMgFWwzjkkT64Pxt2a+sbXbPoC8wU43Bua2grVd5apjmtryoJ6T0
z9vuucbHr3BOmH+OPZHOKaGcmwlWM/wvzuXTHEc4IzA3MkUia2mr1kYnIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEGW9TTOcRccT8vcYHfehK9X0kpMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUVFaYjFOTTV4Rnh4UHk5eGdkOTZFcjFmU1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDUMA0G
CSqGSIb3DQEBCwUAA4IBAQBWvc7Gfh1lWNyTZebevYoZO/f/1MJidLNoYSgiwq/j
lOFYfKSPV0k3qtAakxa4PuksTijxDqmefj0WkT/s+Quk2SlRsp91Wui/G8mfPY/R
hoXjyXZxtbBizCrowRmsZhkXXvYr/HG8EcMpF09X6RQ8LxfXZFKnhlFO938G3+XG
hXVcWzO+qZFExeXr3A44tp8Tf+tHWyhKxZ32OlsLI/fOsICOt+c0jlL7EpoiJae+
xrNE8GSGXFhI0k201fQ9+8DtIvKUzdDFtqSQNjWqMw4OF6bWMSbkXDIAJLHGdmJK
cEWWYuiYpOqFUMpXgmlAxXn6KvzNAsd17c0pVpR0qRoR
-----END CERTIFICATE-----
Generated at Wed Dec 20 16:39:45 2023 by rpki-client on console-fra.rpki-client.org