Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gdUGugu0Ixy0aFS-ynFNionukR0.roa
File: gdUGugu0Ixy0aFS-ynFNionukR0.roa (raw, json)
Hash identifier: MZ2MHVj5Zl5nNv1K62nanBhswAC/UlJgsLXO/87YnjA=
Subject key identifier: 81:D5:06:BA:0B:B4:23:1C:B4:68:54:BE:CA:71:4D:8A:89:EE:91:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B47E932119A14F258855C16279C7430A4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gdUGugu0Ixy0aFS-ynFNionukR0.roa
Signing time: Thu 19 Oct 2023 12:29:06 +0000
ROA not before: Thu 19 Oct 2023 12:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 212.193.12.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:e9:32:11:9a:14:f2:58:85:5c:16:27:9c:74:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 19 12:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81d506ba0bb4231cb46854beca714d8a89ee911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:10:a8:27:e0:64:11:6d:02:36:7f:b8:a0:
f5:39:5f:4b:30:a8:3d:35:b8:2a:aa:bb:d2:0c:0e:
fd:12:dd:7a:d2:5b:b3:7d:2a:d1:67:e5:69:26:fb:
5f:97:a4:63:50:28:b4:f4:99:8a:83:16:4e:9b:dd:
b3:eb:09:ed:35:8c:c6:80:f0:c3:ea:63:4a:8d:0d:
3e:ed:fa:98:09:22:a3:ae:ca:72:c5:49:e2:de:18:
b0:95:46:2b:ae:8e:75:3b:38:50:c4:22:44:e6:69:
11:7c:98:c0:93:bd:4b:40:d9:6a:67:1b:7a:26:84:
24:33:3d:94:63:46:9d:08:fd:40:70:d0:18:34:be:
59:98:c2:fa:1d:9e:a7:e7:aa:0d:57:af:78:bf:04:
dd:54:f5:f9:a8:03:f5:84:cb:48:8a:5b:84:9f:29:
4a:f2:d2:8c:a9:c1:13:53:db:22:23:95:0b:9c:16:
b1:b2:21:32:cd:6a:f8:b0:1a:98:a7:c9:81:b7:1f:
0c:db:cb:55:e1:7f:c7:90:4f:d7:d8:a4:a5:a1:fb:
07:0d:d2:19:97:c1:c9:78:1e:40:08:b1:c2:54:88:
f0:66:34:96:ca:a6:e4:20:d2:36:bf:1a:01:c1:38:
be:21:2a:b0:dd:9c:41:99:6c:c3:a8:e5:98:55:8e:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:06:BA:0B:B4:23:1C:B4:68:54:BE:CA:71:4D:8A:89:EE:91:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gdUGugu0Ixy0aFS-ynFNionukR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ff:18:3d:23:ca:48:77:b8:b3:b7:1e:d5:fc:b9:8a:45:2d:
ed:bf:6b:9a:70:95:f8:6f:99:1c:8d:54:06:dd:6a:92:69:8b:
ad:a4:dc:b6:1d:99:9f:61:49:e4:15:53:0d:5c:90:48:4d:fe:
20:40:c1:42:2b:48:d1:ad:b7:56:9f:1c:d8:c0:40:ea:71:dd:
2e:97:c0:4e:b9:9b:58:3c:96:85:ee:d9:86:31:6c:6f:50:81:
0b:6c:63:5f:8f:1e:17:dd:f5:88:4e:1a:96:2a:83:52:05:96:
30:93:f4:c9:6b:03:ba:53:a9:12:e6:dc:3f:97:0f:e9:6b:be:
e1:f2:0f:5e:49:a3:cd:70:54:b2:83:0d:4d:49:4d:cf:29:ad:
3d:74:31:f4:dc:68:a7:13:70:e4:5c:c0:00:c7:71:1d:ba:97:
3e:23:7f:19:d5:2f:f5:7d:01:31:76:1f:fa:a3:e3:c1:d8:11:
5e:17:d2:79:72:2b:bc:d4:82:b8:fc:d0:1a:5e:e3:d1:79:d0:
18:2d:f1:cb:27:51:4b:00:f1:53:32:70:60:a3:5c:fd:27:8a:
c7:66:65:ea:11:cb:ec:27:50:35:03:8e:b5:a8:58:74:e8:9e:
52:6a:ab:25:56:57:5e:a5:a7:8c:33:ed:49:fb:f6:fb:b4:52:
38:38:97:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtH6TIRmhTyWIVcFiecdDCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDE5MTIyOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQ1MDZiYTBiYjQyMzFjYjQ2ODU0YmVjYTcxNGQ4YTg5ZWU5MTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNEQqCfgZBFtAjZ/uKD1OV9LMKg9
NbgqqrvSDA79Et160luzfSrRZ+VpJvtfl6RjUCi09JmKgxZOm92z6wntNYzGgPDD
6mNKjQ0+7fqYCSKjrspyxUni3hiwlUYrro51OzhQxCJE5mkRfJjAk71LQNlqZxt6
JoQkMz2UY0adCP1AcNAYNL5ZmML6HZ6n56oNV694vwTdVPX5qAP1hMtIiluEnylK
8tKMqcETU9siI5ULnBaxsiEyzWr4sBqYp8mBtx8M28tV4X/HkE/X2KSlofsHDdIZ
l8HJeB5ACLHCVIjwZjSWyqbkINI2vxoBwTi+ISqw3ZxBmWzDqOWYVY6g4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIHVBroLtCMctGhUvspxTYqJ7pEdMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZ2RVR3VndTBJeHkwYUZTLXluRk5pb251a1IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1MDeAwQA
1MEMMA0GCSqGSIb3DQEBCwUAA4IBAQAe/xg9I8pId7iztx7V/LmKRS3tv2uacJX4
b5kcjVQG3WqSaYutpNy2HZmfYUnkFVMNXJBITf4gQMFCK0jRrbdWnxzYwEDqcd0u
l8BOuZtYPJaF7tmGMWxvUIELbGNfjx4X3fWIThqWKoNSBZYwk/TJawO6U6kS5tw/
lw/pa77h8g9eSaPNcFSygw1NSU3PKa09dDH03GinE3DkXMAAx3Edupc+I38Z1S/1
fQExdh/6o+PB2BFeF9J5ciu81IK4/NAaXuPRedAYLfHLJ1FLAPFTMnBgo1z9J4rH
ZmXqEcvsJ1A1A461qFh06J5SaqslVldepaeMM+1J+/b7tFI4OJeN
-----END CERTIFICATE-----
Generated at Sun Dec 24 13:01:53 2023 by rpki-client on console-ams.rpki-client.org