Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rxVeJoMophPVcfVUltUoXJsVMqM.roa
File: rxVeJoMophPVcfVUltUoXJsVMqM.roa (raw, json)
Hash identifier: 2mSuHAY0L0gosyshjbtuFIMJDKmnF88kJV+wcpPDAr0=
Subject key identifier: AF:15:5E:26:83:28:A6:13:D5:71:F5:54:96:D5:28:5C:9B:15:32:A3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCB265DEF27A809C70FF3F1A677A46E7E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rxVeJoMophPVcfVUltUoXJsVMqM.roa
Signing time: Tue 02 Jan 2024 17:08:58 +0000
ROA not before: Tue 02 Jan 2024 17:08:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 212.193.14.0/24 maxlen: 24
212.192.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:26:5d:ef:27:a8:09:c7:0f:f3:f1:a6:77:a4:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:08:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af155e268328a613d571f55496d5285c9b1532a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:00:58:b6:f4:49:94:70:35:97:76:9b:6e:
c7:69:06:52:12:f1:ac:48:4b:4c:0b:67:87:f7:14:
7c:a6:f9:8a:8a:4d:2c:d5:f4:1b:1b:55:7e:dd:22:
4c:f4:9f:f6:aa:d8:29:6f:6d:7c:59:a4:55:2a:e5:
47:ee:c2:ef:6c:81:91:64:fb:3a:35:4c:6e:b3:a4:
d3:8d:7e:d2:a0:50:e1:25:04:aa:48:5b:77:87:a5:
cf:14:b5:2b:07:d3:cb:76:13:97:2f:41:d1:e3:e6:
90:5b:ee:04:6d:47:0d:05:2c:f2:5a:4d:bb:04:14:
17:e8:83:f5:a6:1f:ea:57:10:9b:dc:3d:2b:ba:5c:
72:88:3e:51:be:bb:2b:18:c5:cf:7d:c7:6f:a0:b9:
69:2a:a6:b5:3b:76:ae:a1:56:e3:fd:1d:9c:8d:64:
d7:e6:13:bc:2e:11:40:c7:be:37:e1:ba:89:a4:c0:
68:1b:48:51:37:c5:e0:79:c9:14:d8:f9:89:dd:76:
48:13:cc:98:08:29:ba:bf:d5:4a:bd:6b:97:ff:72:
3d:f1:9e:da:5b:2f:fa:38:8c:77:7a:c2:b6:73:da:
ca:2d:07:08:59:69:18:ca:df:c8:17:82:d1:8a:19:
0f:68:83:1a:2f:46:bf:95:8f:32:5a:0f:4f:3a:4a:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:15:5E:26:83:28:A6:13:D5:71:F5:54:96:D5:28:5C:9B:15:32:A3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rxVeJoMophPVcfVUltUoXJsVMqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.213.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
59:de:26:cb:10:9f:81:0c:be:f9:de:ac:ef:d6:57:c1:a2:e2:
c4:1b:5c:dc:93:c4:36:f9:22:a0:79:af:05:2e:2b:c0:6f:0a:
c6:f1:06:f0:d0:40:a6:6c:eb:6c:cf:4a:22:f9:de:56:0a:d5:
09:12:d1:06:03:74:c6:d3:dd:09:13:02:c1:74:95:7a:88:e8:
6c:e9:62:b7:10:5d:9f:2b:4c:13:8b:be:be:52:d8:b6:53:93:
3e:d9:b8:52:f4:fa:08:06:eb:9e:c5:b4:a9:41:ef:fe:37:55:
5b:5a:39:4d:7c:99:45:93:65:ad:a3:34:b0:a7:aa:2f:63:fd:
87:7c:2f:b1:4b:d0:e9:0b:12:4b:fe:e6:a8:e7:58:52:23:61:
c5:17:7f:32:37:13:ab:91:d5:bf:bc:cb:e0:78:6f:7f:2d:91:
a4:a6:de:a1:d9:b5:62:88:6d:10:13:85:73:f4:1e:fd:03:df:
9f:a6:13:4a:ee:4e:24:7e:00:fb:dc:b7:40:ac:76:34:bc:5f:
27:9b:aa:15:5c:5e:28:57:8a:43:72:f2:0d:cc:d0:ca:7e:c2:
e6:5f:ab:01:ec:ef:2b:e5:ba:95:62:ce:36:aa:31:e8:7c:63:
96:5b:11:60:7b:c1:44:9f:45:95:cf:ff:44:99:88:15:31:d2:
30:eb:20:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzLJl3vJ6gJxw/z8aZ3pG5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTcwODU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjE1NWUyNjgzMjhhNjEzZDU3MWY1NTQ5NmQ1Mjg1YzliMTUzMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEgAWLb0SZRwNZd2m27HaQZSEvGs
SEtMC2eH9xR8pvmKik0s1fQbG1V+3SJM9J/2qtgpb218WaRVKuVH7sLvbIGRZPs6
NUxus6TTjX7SoFDhJQSqSFt3h6XPFLUrB9PLdhOXL0HR4+aQW+4EbUcNBSzyWk27
BBQX6IP1ph/qVxCb3D0rulxyiD5RvrsrGMXPfcdvoLlpKqa1O3auoVbj/R2cjWTX
5hO8LhFAx7434bqJpMBoG0hRN8XgeckU2PmJ3XZIE8yYCCm6v9VKvWuX/3I98Z7a
Wy/6OIx3esK2c9rKLQcIWWkYyt/IF4LRihkPaIMaL0a/lY8yWg9POkpbywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8VXiaDKKYT1XH1VJbVKFybFTKjMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvcnhWZUpvTW9waFBWY2ZWVWx0VW9YSnNWTXFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1MDVAwQA
1MEOMA0GCSqGSIb3DQEBCwUAA4IBAQBZ3ibLEJ+BDL753qzv1lfBouLEG1zck8Q2
+SKgea8FLivAbwrG8Qbw0ECmbOtsz0oi+d5WCtUJEtEGA3TG090JEwLBdJV6iOhs
6WK3EF2fK0wTi76+Uti2U5M+2bhS9PoIBuuexbSpQe/+N1VbWjlNfJlFk2WtozSw
p6ovY/2HfC+xS9DpCxJL/uao51hSI2HFF38yNxOrkdW/vMvgeG9/LZGkpt6h2bVi
iG0QE4Vz9B79A9+fphNK7k4kfgD73LdArHY0vF8nm6oVXF4oV4pDcvINzNDKfsLm
X6sB7O8r5bqVYs42qjHofGOWWxFge8FEn0WVz/9EmYgVMdIw6yBp
-----END CERTIFICATE-----
Generated at Wed Jan 10 13:54:54 2024 by rpki-client on console-ams.rpki-client.org