Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_318UYjTcmOX_zD_jsMOdojceTc.roa
File: _318UYjTcmOX_zD_jsMOdojceTc.roa (raw, json)
Hash identifier: dSa+HqAZu7MA5jC/km0vvLmgy42OXiW4BtDMrdPoNew=
Subject key identifier: FF:7D:7C:51:88:D3:72:63:97:FF:30:FF:8E:C3:0E:76:88:DC:79:37
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CAF573A00688F55FE922FF5F7D085A3C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_318UYjTcmOX_zD_jsMOdojceTc.roa
Signing time: Thu 28 Dec 2023 07:32:58 +0000
ROA not before: Thu 28 Dec 2023 07:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216145
IP address blocks: 212.192.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:57:3a:00:68:8f:55:fe:92:2f:f5:f7:d0:85:a3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 28 07:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7d7c5188d3726397ff30ff8ec30e7688dc7937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:de:2d:5a:18:30:d3:8d:d8:ec:93:ee:ff:
be:94:65:ba:31:49:b3:18:a5:ab:67:ad:78:53:ff:
70:be:16:bd:88:75:d1:37:bd:28:57:6a:e0:19:dd:
18:7f:15:eb:e4:5b:bf:63:f9:fd:95:ef:a3:5e:48:
2a:6e:36:f9:71:e3:66:68:9f:94:24:82:7a:47:c1:
b8:62:57:20:7b:42:2d:c9:02:21:52:55:a5:cd:93:
fd:2d:47:ac:c4:5c:a5:9b:93:65:b8:6d:60:08:83:
fa:23:4c:db:50:0e:53:8e:a6:9a:71:25:de:be:a8:
57:41:cb:0b:34:fe:87:d6:fc:a6:4e:95:6f:b3:cc:
dd:06:ea:2d:15:27:28:ea:ad:6e:07:63:64:94:93:
ad:eb:2a:95:09:a9:56:28:5a:99:b1:8e:e8:58:81:
5c:10:94:be:6b:cb:6e:33:49:39:eb:59:5d:3f:d6:
43:c0:8d:41:fa:05:18:e4:ad:97:94:b8:70:42:ab:
2d:61:f4:27:06:b5:36:8b:f8:da:33:df:c6:f5:42:
ff:ba:03:a2:b1:eb:09:cf:f4:56:ff:50:e2:a9:69:
63:4d:f1:a6:6f:67:87:12:2c:a4:5f:e0:2b:9c:05:
5d:bb:69:78:83:5a:bf:1c:45:9f:5b:f7:57:ae:f0:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:7C:51:88:D3:72:63:97:FF:30:FF:8E:C3:0E:76:88:DC:79:37
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_318UYjTcmOX_zD_jsMOdojceTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ee:d4:d5:d2:55:a1:91:ce:cb:54:68:12:85:ce:3a:e7:19:
1c:83:02:44:8f:12:95:5a:1e:dc:2f:7d:ff:92:e7:b5:55:34:
59:35:cb:fa:0b:11:25:e1:3b:a4:75:d4:5a:52:a4:c0:e7:09:
88:96:a3:4c:08:21:2d:8f:84:38:92:ec:da:5a:bc:7b:59:8d:
04:a4:01:23:f5:4c:d7:0b:3f:a1:f2:d2:8f:f1:fe:31:60:77:
91:3a:40:6a:cf:a3:c6:24:41:92:ed:08:3e:30:c0:8c:ca:12:
48:8b:db:28:8c:c1:d9:6c:52:ce:9b:fc:06:52:72:cc:d2:17:
4d:ab:7e:88:7c:0b:8c:a6:8e:fb:a4:5c:d0:6e:06:d7:3b:fd:
2e:3a:0f:cc:6c:6f:6e:b6:f1:f0:92:9c:53:f2:cf:90:b5:9d:
75:a3:4d:c4:e0:46:4c:ff:09:57:06:30:e5:26:85:38:cb:1d:
fc:4e:bf:ce:a0:48:19:ab:09:2e:8e:d5:e7:a9:fc:17:6c:bb:
07:0c:24:9d:5c:b4:55:8a:de:74:a7:25:4e:af:44:e7:6e:99:
d9:b6:20:c9:02:fe:3b:c1:73:e8:79:94:dd:72:b0:7b:7f:47:
b7:db:f9:c3:94:ed:ec:4f:5f:4d:0f:f9:16:45:54:d8:64:67:
09:27:29:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyvVzoAaI9V/pIv9ffQhaPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMjI4MDczMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjdkN2M1MTg4ZDM3MjYzOTdmZjMwZmY4ZWMzMGU3Njg4ZGM3OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNjeLVoYMNON2OyT7v++lGW6MUmz
GKWrZ614U/9wvha9iHXRN70oV2rgGd0YfxXr5Fu/Y/n9le+jXkgqbjb5ceNmaJ+U
JIJ6R8G4Ylcge0ItyQIhUlWlzZP9LUesxFylm5NluG1gCIP6I0zbUA5TjqaacSXe
vqhXQcsLNP6H1vymTpVvs8zdBuotFSco6q1uB2NklJOt6yqVCalWKFqZsY7oWIFc
EJS+a8tuM0k561ldP9ZDwI1B+gUY5K2XlLhwQqstYfQnBrU2i/jaM9/G9UL/ugOi
sesJz/RW/1DiqWljTfGmb2eHEiykX+ArnAVdu2l4g1q/HEWfW/dXrvBjowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP99fFGI03Jjl/8w/47DDnaI3Hk3MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvXzMxOFVZalRjbU9YX3pEX2pzTU9kb2pjZVRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDUMA0G
CSqGSIb3DQEBCwUAA4IBAQBf7tTV0lWhkc7LVGgShc465xkcgwJEjxKVWh7cL33/
kue1VTRZNcv6CxEl4TukddRaUqTA5wmIlqNMCCEtj4Q4kuzaWrx7WY0EpAEj9UzX
Cz+h8tKP8f4xYHeROkBqz6PGJEGS7Qg+MMCMyhJIi9sojMHZbFLOm/wGUnLM0hdN
q36IfAuMpo77pFzQbgbXO/0uOg/MbG9utvHwkpxT8s+QtZ11o03E4EZM/wlXBjDl
JoU4yx38Tr/OoEgZqwkujtXnqfwXbLsHDCSdXLRVit50pyVOr0TnbpnZtiDJAv47
wXPoeZTdcrB7f0e32/nDlO3sT19ND/kWRVTYZGcJJym/
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org