Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9yAoJ7_RpBN1jynGGop3NvODG8g.roa
File: 9yAoJ7_RpBN1jynGGop3NvODG8g.roa (raw, json)
Hash identifier: 45XumKv4E4v/nYAFpr0zBTcJW1AQZnypc1M4wpyVEoA=
Subject key identifier: F7:20:28:27:BF:D1:A4:13:75:8F:29:C6:1A:8A:77:36:F3:83:1B:C8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01901ADBDC5A311AC7BA4D9F347078D3C53B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9yAoJ7_RpBN1jynGGop3NvODG8g.roa
Signing time: Sat 15 Jun 2024 07:45:34 +0000
ROA not before: Sat 15 Jun 2024 07:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215436
IP address blocks: 213.176.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 06:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1a:db:dc:5a:31:1a:c7:ba:4d:9f:34:70:78:d3:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 15 07:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7202827bfd1a413758f29c61a8a7736f3831bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:db:bc:c0:cf:06:a1:66:38:93:31:56:f7:
cf:43:2c:fe:b3:3b:b4:52:38:6e:80:c0:65:f6:c7:
12:c3:c6:a3:3a:6f:ab:7b:78:64:bb:52:53:1f:50:
3f:87:09:b9:cc:46:62:17:2b:56:cd:f8:19:4d:dd:
52:cd:99:64:43:08:62:54:33:3d:ff:53:bc:01:85:
21:25:f5:35:97:7e:cb:d0:c6:d0:e4:9c:84:ad:7c:
be:72:fb:ed:5d:3a:ac:5f:e8:bc:36:9e:3b:5a:c5:
32:50:2d:62:f5:f4:a9:91:fd:e4:6b:99:a0:99:cc:
98:cb:be:36:8d:64:a7:b0:52:a4:20:39:64:94:9a:
23:6c:b9:21:50:ae:d8:e3:64:2d:ff:a0:36:56:b6:
06:ef:dd:5b:ae:7d:0b:63:38:7a:58:f3:a8:5d:62:
64:55:98:07:b5:32:c7:54:a1:14:1e:a3:ba:08:e8:
b0:32:3b:83:ca:16:09:cd:c2:f3:0e:53:cf:e0:4e:
d1:56:fe:b2:8e:b5:5a:f8:47:f3:7a:56:eb:99:12:
c1:7a:a0:5d:e5:3d:16:96:d0:4e:49:fe:3c:e8:a3:
b6:06:21:bd:68:1f:56:e5:87:ba:11:0e:b4:78:3a:
24:b8:8d:cc:31:3e:84:f2:83:26:06:1c:53:0b:7a:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:28:27:BF:D1:A4:13:75:8F:29:C6:1A:8A:77:36:F3:83:1B:C8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9yAoJ7_RpBN1jynGGop3NvODG8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:1f:71:66:d0:b9:dd:f1:43:09:4c:aa:a9:0f:89:7a:27:89:
ed:ea:1a:15:23:86:2d:45:50:8e:a3:60:23:0f:db:3e:b5:93:
62:b0:ee:a6:b2:7d:2c:75:f1:74:a9:e1:db:5e:a7:ca:39:c9:
5f:1e:90:17:19:8f:be:b7:f8:3c:78:4f:73:3c:5f:f3:3f:9d:
50:b2:4a:f4:9f:00:c2:c9:75:dc:d1:5e:b4:d3:d3:56:8e:d8:
36:ca:2e:7a:9f:a2:84:dc:53:06:68:68:0c:ea:d0:4e:9a:22:
d8:a8:60:85:90:7f:fe:04:36:af:47:21:f6:23:9a:b0:27:c8:
fb:56:7e:a5:a4:65:b2:a9:1f:7b:52:70:41:97:4d:8b:a9:8d:
52:53:cc:aa:c3:c5:2e:8d:d4:6a:d8:d0:4f:f1:6a:c2:4f:3d:
04:ad:39:53:e8:f1:b2:00:6c:e5:ae:53:e6:d2:52:6c:3c:0e:
97:3d:d1:b5:b2:47:58:91:c8:ed:3b:63:4a:36:40:ff:d0:8a:
de:a2:43:7b:be:82:4d:73:95:2a:9d:17:27:e5:87:13:96:71:
06:43:60:2e:fe:49:7e:59:1f:22:7c:4e:d0:c6:a6:ef:a6:7b:
10:5c:6a:76:58:eb:ba:1b:cd:57:d6:a6:56:25:f5:1b:40:4e:
7a:a6:3a:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAa29xaMRrHuk2fNHB408U7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNjE1MDc0NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzIwMjgyN2JmZDFhNDEzNzU4ZjI5YzYxYThhNzczNmYzODMxYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtObbvMDPBqFmOJMxVvfPQyz+szu0
UjhugMBl9scSw8ajOm+re3hku1JTH1A/hwm5zEZiFytWzfgZTd1SzZlkQwhiVDM9
/1O8AYUhJfU1l37L0MbQ5JyErXy+cvvtXTqsX+i8Np47WsUyUC1i9fSpkf3ka5mg
mcyYy742jWSnsFKkIDlklJojbLkhUK7Y42Qt/6A2VrYG791brn0LYzh6WPOoXWJk
VZgHtTLHVKEUHqO6COiwMjuDyhYJzcLzDlPP4E7RVv6yjrVa+EfzelbrmRLBeqBd
5T0WltBOSf486KO2BiG9aB9W5Ye6EQ60eDokuI3MMT6E8oMmBhxTC3pBYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcgKCe/0aQTdY8pxhqKdzbzgxvIMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvOXlBb0o3X1JwQk4xanluR0dvcDNOdk9ERzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bBIMA0G
CSqGSIb3DQEBCwUAA4IBAQDJH3Fm0Lnd8UMJTKqpD4l6J4nt6hoVI4YtRVCOo2Aj
D9s+tZNisO6msn0sdfF0qeHbXqfKOclfHpAXGY++t/g8eE9zPF/zP51Qskr0nwDC
yXXc0V6009NWjtg2yi56n6KE3FMGaGgM6tBOmiLYqGCFkH/+BDavRyH2I5qwJ8j7
Vn6lpGWyqR97UnBBl02LqY1SU8yqw8UujdRq2NBP8WrCTz0ErTlT6PGyAGzlrlPm
0lJsPA6XPdG1skdYkcjtO2NKNkD/0IreokN7voJNc5UqnRcn5YcTlnEGQ2Au/kl+
WR8ifE7QxqbvpnsQXGp2WOu6G81X1qZWJfUbQE56pjoU
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:43 2024 by rpki-client on console-fra.rpki-client.org