Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2AD_9kG2WOxqyWpusMSKDy9pr1M.roa
File: 2AD_9kG2WOxqyWpusMSKDy9pr1M.roa (raw, json)
Hash identifier: yzb2Ok7YzxRBheAq1s0syaBlr6ajiqezi+RHNe5SpHI=
Subject key identifier: D8:00:FF:F6:41:B6:58:EC:6A:C9:6A:6E:B0:C4:8A:0F:2F:69:AF:53
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DD9C16C9E49575D5808A6E0F94FD04028
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2AD_9kG2WOxqyWpusMSKDy9pr1M.roa
Signing time: Sat 24 Feb 2024 06:15:48 +0000
ROA not before: Sat 24 Feb 2024 06:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 213.176.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 08:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d9:c1:6c:9e:49:57:5d:58:08:a6:e0:f9:4f:d0:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 24 06:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d800fff641b658ec6ac96a6eb0c48a0f2f69af53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2b:99:25:dd:81:b1:92:74:0b:56:54:57:e1:
6a:c3:90:3c:12:c4:49:0f:ae:2b:c3:7e:6f:5a:b1:
04:c6:2f:29:2d:82:61:7c:85:ce:3e:98:3c:82:ab:
22:ac:43:59:65:56:df:6f:b0:09:6a:b3:a0:e8:41:
18:6a:d0:af:c9:0a:42:1a:cf:0f:58:37:30:f8:54:
7a:f4:fb:e1:89:f1:75:8b:7a:38:8d:91:8c:5b:2b:
b0:ed:64:03:2e:4d:94:db:1a:c0:25:61:71:a4:c8:
5a:2e:a3:04:c6:90:93:71:62:62:98:e9:65:0d:5d:
3b:7d:0c:fd:7c:71:9f:e8:a0:09:53:dc:62:00:52:
6c:db:0b:41:ca:9c:dd:15:0b:73:ae:09:84:19:8a:
fe:db:a4:e3:31:ab:31:2d:74:25:34:e7:b1:81:a7:
ee:cf:fd:9b:ae:c1:f1:d9:88:0d:b8:dd:7c:d6:e6:
35:e1:0b:49:1c:23:e2:d3:85:be:7c:f7:59:2e:56:
3f:26:cb:ea:e8:d3:71:6b:9f:45:71:4c:df:6b:99:
5a:6a:3f:bb:51:10:26:1b:15:2f:6d:57:5c:f1:04:
46:f8:dd:9c:a1:49:01:74:f7:26:2b:d4:d2:7a:6d:
a1:a8:7d:36:a8:79:d9:b2:f0:54:3c:8e:06:ac:ab:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:FF:F6:41:B6:58:EC:6A:C9:6A:6E:B0:C4:8A:0F:2F:69:AF:53
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2AD_9kG2WOxqyWpusMSKDy9pr1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2b:d6:d5:87:69:51:d1:3f:d9:c3:1d:26:7c:79:9c:16:cc:
11:43:0f:ff:43:56:a3:fb:f9:a1:81:b6:84:0e:62:a9:dc:1d:
3f:63:fc:60:74:31:c3:e6:57:24:e0:91:00:41:a3:25:f5:23:
2b:d1:23:6d:a5:d6:3c:61:d3:a4:3b:e6:5b:20:1e:d9:cb:e9:
13:a1:2f:8f:be:f2:d2:f3:3e:2d:94:07:9b:26:eb:6b:9c:61:
57:dc:c6:b5:8a:ee:d1:eb:82:61:85:c6:53:a1:32:5d:02:42:
92:2d:0b:18:e0:9d:47:65:ac:25:d5:f6:4b:3c:91:01:4c:69:
2c:c4:c0:fa:d9:43:13:6c:ee:6e:cb:d2:91:d4:9b:c5:07:0d:
77:9b:b6:9e:de:2c:c5:11:2d:da:e0:cf:ae:56:1c:04:4d:3d:
19:03:39:21:65:6e:7a:0d:df:0a:ec:6a:42:4a:08:61:aa:ba:
b3:dd:f7:98:1b:41:9a:ed:71:0b:6b:71:ef:f9:08:ef:76:dd:
f0:65:f7:08:c2:6c:fe:f6:fc:99:0d:02:f5:79:0e:76:24:1f:
43:77:96:a7:d2:9c:d8:75:a2:89:ef:c2:ae:9e:85:ed:41:b0:
14:b9:a4:73:38:10:88:ba:ea:77:71:d6:3a:a2:bc:82:1a:6d:
d5:e6:32:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3ZwWyeSVddWAim4PlP0EAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMjI0MDYxNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODAwZmZmNjQxYjY1OGVjNmFjOTZhNmViMGM0OGEwZjJmNjlhZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCuZJd2BsZJ0C1ZUV+Fqw5A8EsRJ
D64rw35vWrEExi8pLYJhfIXOPpg8gqsirENZZVbfb7AJarOg6EEYatCvyQpCGs8P
WDcw+FR69PvhifF1i3o4jZGMWyuw7WQDLk2U2xrAJWFxpMhaLqMExpCTcWJimOll
DV07fQz9fHGf6KAJU9xiAFJs2wtBypzdFQtzrgmEGYr+26TjMasxLXQlNOexgafu
z/2brsHx2YgNuN181uY14QtJHCPi04W+fPdZLlY/Jsvq6NNxa59FcUzfa5laaj+7
URAmGxUvbVdc8QRG+N2coUkBdPcmK9TSem2hqH02qHnZsvBUPI4GrKtNBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNgA//ZBtljsaslqbrDEig8vaa9TMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMkFEXzlrRzJXT3hxeVdwdXNNU0tEeTlwcjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bAcMA0G
CSqGSIb3DQEBCwUAA4IBAQAqK9bVh2lR0T/Zwx0mfHmcFswRQw//Q1aj+/mhgbaE
DmKp3B0/Y/xgdDHD5lck4JEAQaMl9SMr0SNtpdY8YdOkO+ZbIB7Zy+kToS+PvvLS
8z4tlAebJutrnGFX3Ma1iu7R64JhhcZToTJdAkKSLQsY4J1HZawl1fZLPJEBTGks
xMD62UMTbO5uy9KR1JvFBw13m7ae3izFES3a4M+uVhwETT0ZAzkhZW56Dd8K7GpC
Sghhqrqz3feYG0Ga7XELa3Hv+Qjvdt3wZfcIwmz+9vyZDQL1eQ52JB9Dd5an0pzY
daKJ78KunoXtQbAUuaRzOBCIuup3cdY6oryCGm3V5jIo
-----END CERTIFICATE-----
Generated at Sat Feb 24 11:51:11 2024 by rpki-client on console-fra.rpki-client.org