Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TlhXw6nCogyr0B5Kp4N7Cm3B0ZY.roa
File: TlhXw6nCogyr0B5Kp4N7Cm3B0ZY.roa (raw, json)
Hash identifier: WIWXiEgj2kZIc7optk4pvwkbrpXaNNoN62HxC8RYSEw=
Subject key identifier: 4E:58:57:C3:A9:C2:A2:0C:AB:D0:1E:4A:A7:83:7B:0A:6D:C1:D1:96
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01877CB3D12A345E7381DAE382F577D30422
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TlhXw6nCogyr0B5Kp4N7Cm3B0ZY.roa
Signing time: Thu 13 Apr 2023 22:19:31 +0000
ROA not before: Thu 13 Apr 2023 22:19:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 09:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:b3:d1:2a:34:5e:73:81:da:e3:82:f5:77:d3:04:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 13 22:19:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e5857c3a9c2a20cabd01e4aa7837b0a6dc1d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:b3:eb:0e:84:09:a9:79:74:c1:2b:bf:5b:
b2:50:c9:c5:00:e5:d8:99:5e:c9:48:88:2a:d5:22:
4a:fd:a7:eb:86:a2:52:e4:ec:96:80:2e:be:16:e3:
88:c4:fa:ac:a4:27:73:cb:8c:a3:5e:f9:1c:59:5e:
e3:05:1f:2e:b3:19:62:5b:e8:89:5c:39:20:a9:0b:
7c:af:a9:65:eb:2a:2c:07:af:e7:e6:b8:ea:a4:e8:
c4:e6:38:41:45:38:4d:6a:4f:52:fc:70:7e:21:78:
80:49:67:2d:28:0f:c9:3b:5e:b5:43:d7:7d:d7:75:
9a:b4:2a:41:26:64:77:be:6c:26:9f:e5:cd:0d:b3:
7a:f0:8a:c7:32:30:8d:1b:0f:51:ff:a3:9d:5e:3a:
a1:4a:8f:49:bd:75:cd:7e:c9:0b:40:93:14:76:52:
8c:45:dd:b3:3f:5d:7e:a7:eb:9c:37:43:75:c2:b8:
85:e3:08:b0:fa:65:6e:c2:7e:b6:c6:a0:89:72:10:
eb:36:54:75:51:ee:0a:07:8e:ab:b0:7e:a4:3c:bf:
c8:e7:06:5b:4e:25:8b:14:20:1d:16:38:9e:b0:46:
9e:98:09:f0:80:83:29:cc:4c:da:4e:2f:dc:f0:97:
74:43:8f:ea:a6:db:0b:e1:7a:9c:96:7a:5a:0c:ad:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:57:C3:A9:C2:A2:0C:AB:D0:1E:4A:A7:83:7B:0A:6D:C1:D1:96
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TlhXw6nCogyr0B5Kp4N7Cm3B0ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
75:47:09:82:48:2c:e4:48:12:af:8a:8d:00:d1:9a:af:13:dd:
58:37:0c:3b:11:87:bf:89:ea:02:94:a9:d3:9d:c6:dd:27:94:
3c:aa:e7:d1:44:f0:49:35:29:3c:c0:84:31:f7:21:a6:ef:ca:
c0:77:de:47:63:5b:e9:8f:10:db:e6:14:c9:95:b1:97:50:7d:
24:21:c1:74:a3:d7:a2:ab:e4:86:3d:6b:66:5d:8b:20:0b:4e:
df:3d:64:8f:9c:59:1e:b7:ec:6b:7d:f6:0c:b1:3b:a7:f7:b4:
40:9a:3b:c6:3c:ad:63:74:9e:95:21:a2:34:9f:68:86:4c:d3:
40:ad:21:78:c5:c2:fa:34:cd:44:ab:ec:47:95:66:70:bc:25:
30:66:2a:d9:c4:5b:a4:72:de:08:90:4f:94:da:12:b6:1f:82:
b6:8b:dc:e1:02:74:dc:d7:76:58:ee:58:c5:e8:6c:68:24:73:
75:42:ee:e7:bb:42:44:d7:ea:df:5f:de:29:98:66:d2:c2:3c:
b3:b3:80:2b:bc:4e:ac:d1:b6:5d:06:d5:84:fa:6c:38:7d:ad:
cc:34:be:30:bb:a2:16:e1:2d:0d:52:ad:e6:4a:e7:0a:54:5c:
50:b1:35:68:e5:ac:5e:28:0a:52:de:4a:8d:dc:35:45:e2:b6:
28:47:d3:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd8s9EqNF5zgdrjgvV30wQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDEzMjIxOTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTU4NTdjM2E5YzJhMjBjYWJkMDFlNGFhNzgzN2IwYTZkYzFkMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsyz6w6ECal5dMErv1uyUMnFAOXY
mV7JSIgq1SJK/afrhqJS5OyWgC6+FuOIxPqspCdzy4yjXvkcWV7jBR8usxliW+iJ
XDkgqQt8r6ll6yosB6/n5rjqpOjE5jhBRThNak9S/HB+IXiASWctKA/JO161Q9d9
13WatCpBJmR3vmwmn+XNDbN68IrHMjCNGw9R/6OdXjqhSo9JvXXNfskLQJMUdlKM
Rd2zP11+p+ucN0N1wriF4wiw+mVuwn62xqCJchDrNlR1Ue4KB46rsH6kPL/I5wZb
TiWLFCAdFjiesEaemAnwgIMpzEzaTi/c8Jd0Q4/qptsL4XqclnpaDK1pTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE5YV8OpwqIMq9AeSqeDewptwdGWMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVGxoWHc2bkNvZ3lyMEI1S3A0TjdDbTNCMFpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDTMA0G
CSqGSIb3DQEBCwUAA4IBAQB1RwmCSCzkSBKvio0A0ZqvE91YNww7EYe/ieoClKnT
ncbdJ5Q8qufRRPBJNSk8wIQx9yGm78rAd95HY1vpjxDb5hTJlbGXUH0kIcF0o9ei
q+SGPWtmXYsgC07fPWSPnFket+xrffYMsTun97RAmjvGPK1jdJ6VIaI0n2iGTNNA
rSF4xcL6NM1Eq+xHlWZwvCUwZirZxFukct4IkE+U2hK2H4K2i9zhAnTc13ZY7ljF
6GxoJHN1Qu7nu0JE1+rfX94pmGbSwjyzs4ArvE6s0bZdBtWE+mw4fa3MNL4wu6IW
4S0NUq3mSucKVFxQsTVo5axeKApS3kqN3DVF4rYoR9Nj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org