Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_tDGqy_-_GN3l51N_DSxAFVXusI.roa
File: _tDGqy_-_GN3l51N_DSxAFVXusI.roa (raw, json)
Hash identifier: MSqoNN+nwAosPI+vEpkeqvdrLKSNARQDdpnMNeyoyow=
Subject key identifier: FE:D0:C6:AB:2F:FE:FC:63:77:97:9D:4D:FC:34:B1:00:55:57:BA:C2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98B914D8B4C9642BC3CDB3FAB29F6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_tDGqy_-_GN3l51N_DSxAFVXusI.roa
Signing time: Mon 02 Jan 2023 00:55:03 +0000
ROA not before: Mon 02 Jan 2023 00:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203578
IP address blocks: 212.36.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8b:91:4d:8b:4c:96:42:bc:3c:db:3f:ab:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed0c6ab2ffefc6377979d4dfc34b1005557bac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:2f:b0:b5:f7:c4:a7:b2:04:dd:b6:d0:d6:
4d:11:6a:61:9c:d7:d2:ea:42:42:b7:c3:54:d2:6c:
06:c7:6c:4b:f6:26:5e:cd:56:34:ee:f9:4b:f6:94:
03:6d:fd:99:00:3c:01:5a:dc:80:b7:78:92:c3:95:
35:43:df:71:7f:33:b5:8a:18:a5:47:92:1c:3e:57:
9e:15:d4:26:d6:75:9f:c7:7e:27:82:e2:a1:16:a5:
b4:81:4e:2f:68:ca:c9:16:e5:34:78:8c:14:1d:52:
32:d3:17:90:eb:e0:8d:e6:7f:41:7d:a7:a9:4d:79:
97:43:d0:75:4d:4c:77:c5:a9:28:fc:fb:cc:25:96:
2d:d6:32:b2:f5:45:0c:5e:88:a8:4d:cd:81:ec:ed:
7a:c3:85:63:4c:e1:ba:f9:68:ef:6e:4a:73:2f:93:
14:34:67:a0:c1:59:cc:ea:69:6f:79:cf:09:16:2e:
2a:ac:fd:cb:3e:f8:06:97:f7:7e:a5:7f:00:d9:cd:
3f:92:82:7e:d7:97:cf:c6:25:cd:a6:63:d6:5d:2f:
18:6b:8a:42:15:5f:cf:ba:bf:e7:38:2f:0b:94:64:
2d:86:03:08:36:2d:72:92:3f:ef:da:0e:df:53:aa:
73:11:b0:1d:29:00:a5:7c:cb:49:89:9f:dc:78:53:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:C6:AB:2F:FE:FC:63:77:97:9D:4D:FC:34:B1:00:55:57:BA:C2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_tDGqy_-_GN3l51N_DSxAFVXusI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8e:7e:ee:8b:8d:bc:58:a9:17:df:58:30:9b:65:f6:85:4d:
6d:59:30:6a:b8:9a:1e:70:7c:52:25:8c:0d:ef:70:ba:5b:2f:
72:c6:1f:6f:c3:a2:c1:d1:a3:60:e5:b2:60:c3:9b:5f:a2:49:
e1:8a:9c:37:81:6f:b3:84:4a:24:34:0d:e1:c3:6e:6d:b9:1e:
8f:69:43:a0:53:37:73:98:9e:62:c3:5d:56:10:65:86:be:e9:
2e:cf:dd:7f:0a:19:16:de:79:a4:fb:e9:1d:25:2d:7e:3a:00:
a3:ae:3d:b8:43:b0:05:04:aa:41:93:4f:6e:b7:3f:8a:14:bf:
f8:07:0f:2d:28:a8:dd:7c:b5:99:ec:81:2e:95:e1:6f:a2:8e:
e2:d3:a2:a9:87:c6:d6:f8:41:3e:57:ca:9c:dc:7a:03:39:22:
71:ce:ee:57:13:eb:b2:4c:06:d9:25:d3:86:af:d5:dc:b1:6e:
ff:df:07:36:36:b2:fa:8e:06:7f:3b:fb:c9:76:4b:7b:44:7d:
cb:cf:13:08:7e:4e:da:58:4c:f4:7a:8a:4f:e6:70:86:47:7e:
9e:56:eb:a2:ac:b9:7d:be:0e:a8:59:b5:03:80:56:4e:97:aa:
73:a3:14:45:53:ec:40:8c:ca:28:e2:c2:ca:7c:d2:51:5f:f8:
13:6a:20:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+YuRTYtMlkK8PNs/qyn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWQwYzZhYjJmZmVmYzYzNzc5NzlkNGRmYzM0YjEwMDU1NTdiYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcwvsLX3xKeyBN220NZNEWphnNfS
6kJCt8NU0mwGx2xL9iZezVY07vlL9pQDbf2ZADwBWtyAt3iSw5U1Q99xfzO1ihil
R5IcPleeFdQm1nWfx34nguKhFqW0gU4vaMrJFuU0eIwUHVIy0xeQ6+CN5n9Bfaep
TXmXQ9B1TUx3xako/PvMJZYt1jKy9UUMXoioTc2B7O16w4VjTOG6+WjvbkpzL5MU
NGegwVnM6mlvec8JFi4qrP3LPvgGl/d+pX8A2c0/koJ+15fPxiXNpmPWXS8Ya4pC
FV/Pur/nOC8LlGQthgMINi1ykj/v2g7fU6pzEbAdKQClfMtJiZ/ceFNj2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7Qxqsv/vxjd5edTfw0sQBVV7rCMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvX3RER3F5Xy1fR04zbDUxTl9EU3hBRlZYdXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CQaMA0G
CSqGSIb3DQEBCwUAA4IBAQAEjn7ui428WKkX31gwm2X2hU1tWTBquJoecHxSJYwN
73C6Wy9yxh9vw6LB0aNg5bJgw5tfoknhipw3gW+zhEokNA3hw25tuR6PaUOgUzdz
mJ5iw11WEGWGvukuz91/ChkW3nmk++kdJS1+OgCjrj24Q7AFBKpBk09utz+KFL/4
Bw8tKKjdfLWZ7IEuleFvoo7i06Kph8bW+EE+V8qc3HoDOSJxzu5XE+uyTAbZJdOG
r9XcsW7/3wc2NrL6jgZ/O/vJdkt7RH3LzxMIfk7aWEz0eopP5nCGR36eVuuirLl9
vg6oWbUDgFZOl6pzoxRFU+xAjMoo4sLKfNJRX/gTaiAT
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org