Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WBdvvfW3KKc-WsQW_J7UIx3zZeM.roa
File: WBdvvfW3KKc-WsQW_J7UIx3zZeM.roa (raw, json)
Hash identifier: Zx4XDdEs+HhkksaSICfWaEB8m6TmP+EGJznE8R4Hxnk=
Subject key identifier: 58:17:6F:BD:F5:B7:28:A7:3E:5A:C4:16:FC:9E:D4:23:1D:F3:65:E3
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01857002848511503F6BB6193CDCF97665B6
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WBdvvfW3KKc-WsQW_J7UIx3zZeM.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 212.98.224.0/24 maxlen: 24
212.115.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:84:85:11:50:3f:6b:b6:19:3c:dc:f9:76:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58176fbdf5b728a73e5ac416fc9ed4231df365e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:42:f7:43:87:95:c5:ea:61:1a:53:1d:29:
dc:9a:fe:25:d3:db:7f:70:1e:3b:17:b0:89:cc:fb:
34:bb:14:a9:30:db:8b:4c:20:11:79:96:a3:ed:d0:
92:ca:39:19:b9:cf:6c:c0:25:e6:d4:87:df:80:d0:
92:57:c0:31:9c:a2:b6:c4:54:b2:1a:7a:4b:5f:33:
7d:7b:a7:03:3b:e4:29:e2:2f:45:d3:d2:0b:15:1a:
b8:75:5e:d8:30:74:55:14:86:7d:3e:ba:4a:af:78:
e0:7d:bf:51:d9:ad:65:5f:a2:0a:40:29:9c:dc:65:
41:4d:54:3b:2f:50:5a:99:1c:50:0f:46:95:97:e6:
02:39:6f:f9:cc:d1:62:8f:40:2e:57:a1:a4:a5:b4:
27:9f:ea:ba:6a:c2:0f:50:1f:86:dc:98:83:54:aa:
5e:70:72:00:29:ac:1b:5e:4b:8f:da:6f:92:05:ce:
7b:f5:f3:56:e7:3e:1f:35:ad:65:16:8d:b3:ae:5d:
db:d7:40:29:62:ef:30:06:07:0d:59:6d:fd:3f:ae:
21:d3:f5:a1:84:8b:fd:4d:2c:d8:14:88:2d:46:47:
6e:7a:01:39:6f:9f:6c:1b:d9:01:e2:bc:03:96:bb:
fc:07:69:75:10:58:63:48:e9:af:97:21:6e:a2:ba:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:6F:BD:F5:B7:28:A7:3E:5A:C4:16:FC:9E:D4:23:1D:F3:65:E3
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WBdvvfW3KKc-WsQW_J7UIx3zZeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.98.224.0/24
212.115.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6c:6a:24:dc:0f:dd:c5:55:3e:b6:04:82:e8:f7:ef:b3:40:
76:15:07:1a:84:bb:68:6b:50:cf:5e:77:f5:28:72:ee:d7:85:
e7:9a:03:1b:28:12:5f:9a:53:8a:6d:30:0d:55:c2:9d:d5:85:
23:09:81:3d:30:df:a6:b0:d9:58:63:76:34:dc:99:48:88:97:
8d:2e:bd:c8:65:1b:c4:3b:c0:4f:fb:b2:b8:9e:19:05:c3:39:
2b:28:93:18:71:b7:ff:9b:26:d3:ef:eb:f4:07:f3:10:22:5a:
1d:58:be:64:10:83:66:12:a8:54:63:2b:73:3f:d1:5b:ec:b3:
39:bd:77:89:22:86:ab:5e:b2:95:13:d1:47:6f:42:d5:f4:b1:
35:ac:18:59:cf:94:06:f6:6d:27:aa:f9:33:fd:76:0d:29:ef:
d4:00:6c:7a:f9:06:ad:0a:ef:9a:d4:78:9b:46:c9:00:e6:0b:
e7:f4:28:b5:0a:bd:11:8d:0f:6c:31:80:2c:09:0c:c8:29:da:
f6:ba:ca:70:54:72:26:62:c6:bb:c6:14:ec:af:83:ff:02:ab:
15:0f:2a:0f:49:ca:24:3e:ae:c8:fe:d1:92:b5:98:0b:75:16:
38:17:a6:42:cc:a3:b8:b9:23:f1:36:a0:54:54:42:53:af:cb:
a3:48:15:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwAoSFEVA/a7YZPNz5dmW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjMwMTAyMDEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE3NmZiZGY1YjcyOGE3M2U1YWM0MTZmYzllZDQyMzFkZjM2NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVC90OHlcXqYRpTHSncmv4l09t/
cB47F7CJzPs0uxSpMNuLTCAReZaj7dCSyjkZuc9swCXm1IffgNCSV8AxnKK2xFSy
GnpLXzN9e6cDO+Qp4i9F09ILFRq4dV7YMHRVFIZ9PrpKr3jgfb9R2a1lX6IKQCmc
3GVBTVQ7L1BamRxQD0aVl+YCOW/5zNFij0AuV6GkpbQnn+q6asIPUB+G3JiDVKpe
cHIAKawbXkuP2m+SBc579fNW5z4fNa1lFo2zrl3b10ApYu8wBgcNWW39P64h0/Wh
hIv9TSzYFIgtRkduegE5b59sG9kB4rwDlrv8B2l1EFhjSOmvlyFuoroFTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFgXb731tyinPlrEFvye1CMd82XjMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvV0JkdnZmVzNLS2MtV3NRV19KN1VJeDN6WmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1GLgAwQA
1HMeMA0GCSqGSIb3DQEBCwUAA4IBAQBrbGok3A/dxVU+tgSC6Pfvs0B2FQcahLto
a1DPXnf1KHLu14XnmgMbKBJfmlOKbTANVcKd1YUjCYE9MN+msNlYY3Y03JlIiJeN
Lr3IZRvEO8BP+7K4nhkFwzkrKJMYcbf/mybT7+v0B/MQIlodWL5kEINmEqhUYytz
P9Fb7LM5vXeJIoarXrKVE9FHb0LV9LE1rBhZz5QG9m0nqvkz/XYNKe/UAGx6+Qat
Cu+a1HibRskA5gvn9Ci1Cr0RjQ9sMYAsCQzIKdr2uspwVHImYsa7xhTsr4P/AqsV
DyoPScokPq7I/tGStZgLdRY4F6ZCzKO4uSPxNqBUVEJTr8ujSBXe
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:59 2024 by rpki-client on console-fra.rpki-client.org