Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jpUtv9YJYiFxgSIYiYkKlT0M5oU.roa
File: jpUtv9YJYiFxgSIYiYkKlT0M5oU.roa (raw, json)
Hash identifier: s/KFAJMe/Ss9Jv7Ac75AcwXs2XcySsl3FU3F8kkp7vE=
Subject key identifier: 8E:95:2D:BF:D6:09:62:21:71:81:22:18:89:89:0A:95:3D:0C:E6:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018803FC0A4BA433065405D958F6632FBB7C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jpUtv9YJYiFxgSIYiYkKlT0M5oU.roa
Signing time: Wed 10 May 2023 04:47:09 +0000
ROA not before: Wed 10 May 2023 04:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 212.193.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:fc:0a:4b:a4:33:06:54:05:d9:58:f6:63:2f:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 10 04:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e952dbfd60962217181221889890a953d0ce685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:40:f0:13:fb:64:ee:f7:e9:78:fb:71:5a:
27:63:0b:23:28:43:4b:0b:30:0c:29:5d:16:67:26:
f5:e3:ee:47:97:76:50:69:64:05:65:cc:ac:15:bf:
54:06:02:78:17:71:af:61:e7:64:13:b4:95:d2:29:
1d:c7:5c:f1:5b:b4:b7:cf:6a:6a:99:aa:5a:66:43:
14:aa:15:d6:6b:97:55:a0:53:dd:6e:0f:00:5f:25:
9f:80:e9:a1:9c:a8:01:eb:0e:7a:21:2c:5d:6b:49:
97:d5:c2:c0:fe:6c:fc:14:5c:7a:b2:34:32:c2:06:
dc:5f:ed:a5:53:10:da:85:43:5f:72:35:91:bb:1b:
68:a0:de:b5:19:51:7d:5a:58:57:38:b7:19:2a:da:
c5:dc:ad:6d:77:57:14:9b:d3:d7:23:1b:2c:7f:38:
ae:f8:45:fa:58:25:34:14:b5:43:41:66:25:d6:88:
54:c6:22:a9:36:01:7c:f7:f0:55:71:dd:28:87:2c:
a6:58:e7:df:91:e3:4c:23:fc:42:07:f8:0d:b9:e3:
1d:82:8b:79:7b:66:a5:5d:29:04:19:47:e4:8e:00:
aa:a4:3d:09:50:c2:88:cf:7a:28:3e:84:1c:b7:29:
3e:97:8c:78:e4:99:39:4d:be:62:4c:b0:f6:ef:b3:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:2D:BF:D6:09:62:21:71:81:22:18:89:89:0A:95:3D:0C:E6:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jpUtv9YJYiFxgSIYiYkKlT0M5oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
15:33:48:4f:9f:0b:ab:c6:12:7f:b9:52:6d:69:48:cb:f4:f0:
ce:64:ac:12:59:3d:b2:02:8b:71:60:40:da:dd:dd:b7:9b:fa:
ec:9a:54:19:61:6c:5a:e9:08:83:3e:6a:25:cb:11:72:4b:11:
20:61:cc:f4:12:3d:3e:6a:b7:93:88:7b:64:3a:14:70:ba:84:
9a:31:53:bc:29:ee:59:db:59:70:f8:9e:57:d8:d6:db:44:50:
f5:10:19:e5:41:bc:d0:f6:81:df:37:a5:aa:ea:5e:1a:39:17:
70:60:38:e7:60:f5:58:05:9d:55:61:26:36:1c:7f:fc:40:e3:
00:f9:1c:39:cf:f9:f5:28:cf:74:2f:de:f7:63:fe:57:c6:f9:
9f:ae:b7:12:13:94:fc:2f:9e:2d:33:43:18:f7:bb:44:20:17:
85:4a:71:0c:bd:af:f3:3d:e6:d0:c2:fe:6f:5b:b8:80:40:37:
05:23:e4:50:c7:19:8e:02:67:c1:0f:89:7f:1f:fd:a3:56:58:
2b:60:7c:f0:68:f7:c6:6a:fc:cb:20:38:01:0d:0b:bb:c6:04:
16:ed:5a:aa:41:83:95:4e:a8:2a:b5:ef:27:94:a2:1c:6e:ff:
01:15:14:19:0f:f1:19:9d:19:0e:2c:4e:82:df:16:c2:22:19:
03:d6:34:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgD/ApLpDMGVAXZWPZjL7t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNTEwMDQ0NzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTk1MmRiZmQ2MDk2MjIxNzE4MTIyMTg4OTg5MGE5NTNkMGNlNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKxA8BP7ZO736Xj7cVonYwsjKENL
CzAMKV0WZyb14+5Hl3ZQaWQFZcysFb9UBgJ4F3GvYedkE7SV0ikdx1zxW7S3z2pq
mapaZkMUqhXWa5dVoFPdbg8AXyWfgOmhnKgB6w56ISxda0mX1cLA/mz8FFx6sjQy
wgbcX+2lUxDahUNfcjWRuxtooN61GVF9WlhXOLcZKtrF3K1td1cUm9PXIxssfziu
+EX6WCU0FLVDQWYl1ohUxiKpNgF89/BVcd0ohyymWOffkeNMI/xCB/gNueMdgot5
e2alXSkEGUfkjgCqpD0JUMKIz3ooPoQctyk+l4x45Jk5Tb5iTLD277PSiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6VLb/WCWIhcYEiGImJCpU9DOaFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvanBVdHY5WUpZaUZ4Z1NJWWlZa0tsVDBNNW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEMMA0G
CSqGSIb3DQEBCwUAA4IBAQAVM0hPnwurxhJ/uVJtaUjL9PDOZKwSWT2yAotxYEDa
3d23m/rsmlQZYWxa6QiDPmolyxFySxEgYcz0Ej0+areTiHtkOhRwuoSaMVO8Ke5Z
21lw+J5X2NbbRFD1EBnlQbzQ9oHfN6Wq6l4aORdwYDjnYPVYBZ1VYSY2HH/8QOMA
+Rw5z/n1KM90L973Y/5XxvmfrrcSE5T8L54tM0MY97tEIBeFSnEMva/zPebQwv5v
W7iAQDcFI+RQxxmOAmfBD4l/H/2jVlgrYHzwaPfGavzLIDgBDQu7xgQW7VqqQYOV
Tqgqte8nlKIcbv8BFRQZD/EZnRkOLE6C3xbCIhkD1jSZ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org