Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mWdxzxU3hmFZfXH0_eiG79QKJl4.roa
File: mWdxzxU3hmFZfXH0_eiG79QKJl4.roa (raw, json)
Hash identifier: vwDTfywHF1IWCVn/ZvIoBJ7sukdkzBAilbE97gF7uhs=
Subject key identifier: 99:67:71:CF:15:37:86:61:59:7D:71:F4:FD:E8:86:EF:D4:0A:26:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C813E33DC3C5B8FB13B8C90DCBB3652D1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mWdxzxU3hmFZfXH0_eiG79QKJl4.roa
Signing time: Tue 19 Dec 2023 08:43:06 +0000
ROA not before: Tue 19 Dec 2023 08:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204769
IP address blocks: 212.192.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:3e:33:dc:3c:5b:8f:b1:3b:8c:90:dc:bb:36:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 19 08:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=996771cf15378661597d71f4fde886efd40a265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:ae:0f:6f:a3:54:14:48:c2:15:87:42:7f:
bc:bf:47:6a:06:32:8a:4f:21:97:66:32:98:4f:98:
07:c9:c4:46:47:80:6a:2d:16:26:32:36:67:e6:36:
7e:84:32:c6:61:af:16:cb:76:0f:63:bc:f3:54:07:
e7:a5:88:85:e7:11:63:d7:9e:b5:2d:80:3a:39:40:
41:75:b9:3e:31:d4:62:98:45:50:cd:a9:75:8c:da:
eb:f9:f5:22:76:42:fc:b4:a5:ea:79:d4:46:07:f1:
1b:14:75:2b:e5:ae:5b:a5:35:ac:dc:58:f0:a5:d8:
bf:5f:fa:09:9d:40:28:79:03:77:77:14:75:2d:49:
b7:08:24:d5:31:1a:30:35:52:87:9c:63:9c:3e:70:
4e:56:aa:f6:56:f2:8e:a6:5f:75:63:ed:e0:cb:68:
80:de:45:45:48:7b:12:b7:2d:48:1b:21:e5:83:0e:
1d:f0:7c:41:46:15:3f:67:b8:f5:4c:72:57:3a:d0:
ea:af:cb:f2:9b:f7:cf:a3:a6:bc:58:c4:84:f6:92:
2d:18:c3:ee:8f:63:05:16:91:aa:b5:02:a8:60:4e:
94:13:f6:a8:ee:d8:ed:eb:9e:53:07:10:9c:78:0d:
94:54:cf:63:0b:5d:e6:06:87:f4:1c:6c:f0:be:1e:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:71:CF:15:37:86:61:59:7D:71:F4:FD:E8:86:EF:D4:0A:26:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mWdxzxU3hmFZfXH0_eiG79QKJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.213.0/24
Signature Algorithm: sha256WithRSAEncryption
26:34:d5:4a:8c:71:d1:43:19:a7:73:9b:84:77:7c:d0:90:1c:
40:f8:f9:f1:1d:6f:4b:64:7b:6f:fb:5b:ed:f1:74:85:23:e9:
18:cc:3e:5d:30:ee:2b:a0:71:e5:95:90:5e:df:6e:bb:9a:2c:
2c:d5:6f:24:73:38:8e:d9:4a:40:21:f9:b2:1b:35:56:0c:2a:
f6:8b:b4:c5:5e:57:61:e6:27:2a:c5:28:d5:d2:ad:3e:31:f5:
37:bb:bf:21:b1:2a:c1:8a:51:48:b9:be:8b:fc:59:90:3c:28:
26:b8:14:18:ce:c1:64:bb:ef:21:5a:a2:b8:50:5c:b2:60:e7:
4f:c0:da:51:99:2c:88:69:93:27:f6:43:66:bf:05:35:f7:3e:
a6:04:29:1d:fd:fd:53:27:e7:7d:86:e8:ea:e4:c9:d4:b9:79:
be:b8:26:f7:7f:b4:04:f5:00:ef:01:04:e3:ae:01:9d:fb:14:
6a:30:4d:e5:2f:8f:ab:45:75:d7:cc:fa:02:df:b1:5b:6d:aa:
d1:d2:4f:fe:65:23:54:ab:a4:d7:70:eb:cb:a0:2e:38:d6:7d:
2a:47:d0:60:be:5e:5a:4b:e6:b3:32:67:e5:9a:d3:55:50:56:
26:6b:22:86:a8:6f:61:05:2a:e0:9b:5c:11:0d:f7:8b:a6:93:
64:d2:24:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyBPjPcPFuPsTuMkNy7NlLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMjE5MDg0MzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTY3NzFjZjE1Mzc4NjYxNTk3ZDcxZjRmZGU4ODZlZmQ0MGEyNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoluuD2+jVBRIwhWHQn+8v0dqBjKK
TyGXZjKYT5gHycRGR4BqLRYmMjZn5jZ+hDLGYa8Wy3YPY7zzVAfnpYiF5xFj1561
LYA6OUBBdbk+MdRimEVQzal1jNrr+fUidkL8tKXqedRGB/EbFHUr5a5bpTWs3Fjw
pdi/X/oJnUAoeQN3dxR1LUm3CCTVMRowNVKHnGOcPnBOVqr2VvKOpl91Y+3gy2iA
3kVFSHsSty1IGyHlgw4d8HxBRhU/Z7j1THJXOtDqr8vym/fPo6a8WMSE9pItGMPu
j2MFFpGqtQKoYE6UE/ao7tjt655TBxCceA2UVM9jC13mBof0HGzwvh5TCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlncc8VN4ZhWX1x9P3ohu/UCiZeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbVdkeHp4VTNobUZaZlhIMF9laUc3OVFLSmw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDVMA0G
CSqGSIb3DQEBCwUAA4IBAQAmNNVKjHHRQxmnc5uEd3zQkBxA+PnxHW9LZHtv+1vt
8XSFI+kYzD5dMO4roHHllZBe3267miws1W8kcziO2UpAIfmyGzVWDCr2i7TFXldh
5icqxSjV0q0+MfU3u78hsSrBilFIub6L/FmQPCgmuBQYzsFku+8hWqK4UFyyYOdP
wNpRmSyIaZMn9kNmvwU19z6mBCkd/f1TJ+d9hujq5MnUuXm+uCb3f7QE9QDvAQTj
rgGd+xRqME3lL4+rRXXXzPoC37FbbarR0k/+ZSNUq6TXcOvLoC441n0qR9Bgvl5a
S+azMmflmtNVUFYmayKGqG9hBSrgm1wRDfeLppNk0iQT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:25 2024 by rpki-client on console-fra.rpki-client.org