Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/5Pa6hGQqfeFotTjFYuHpiEk00A0.roa
File: 5Pa6hGQqfeFotTjFYuHpiEk00A0.roa (raw, json)
Hash identifier: oSNKg00MHVpE0DySiVPEkyTV59FtvsKUeAxbjQ73Bv8=
Subject key identifier: E4:F6:BA:84:64:2A:7D:E1:68:B5:38:C5:62:E1:E9:88:49:34:D0:0D
Certificate issuer: /CN=e32bfdccd3bb06102d47a657e60b8d7a3b044579
Certificate serial: 01856D41A6A386191F612AB6BFA75EF24F40
Authority key identifier: E3:2B:FD:CC:D3:BB:06:10:2D:47:A6:57:E6:0B:8D:7A:3B:04:45:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yv9zNO7BhAtR6ZX5guNejsERXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/5Pa6hGQqfeFotTjFYuHpiEk00A0.roa
Signing time: Sun 01 Jan 2023 12:14:57 +0000
ROA not before: Sun 01 Jan 2023 12:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 212.18.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a6:a3:86:19:1f:61:2a:b6:bf:a7:5e:f2:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bfdccd3bb06102d47a657e60b8d7a3b044579
Validity
Not Before: Jan 1 12:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4f6ba84642a7de168b538c562e1e9884934d00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:d7:55:33:3e:df:5e:c3:b3:09:20:fc:95:
c4:b0:4b:e3:8a:27:38:9c:2d:3a:0e:8d:24:1c:28:
9c:47:9a:f8:4b:24:30:54:38:d8:34:64:25:db:b4:
fe:0f:3b:55:33:89:a5:d1:53:94:01:7e:0e:e0:93:
7e:46:2d:2a:09:1d:3f:67:11:4e:b3:6a:85:6d:db:
10:01:a5:03:a9:a1:14:15:42:c1:1b:ed:bd:cc:f4:
86:dc:d8:84:21:02:67:0c:b4:bf:9e:7e:eb:d1:97:
41:ed:40:73:ed:f6:4b:10:05:d3:c1:f4:a3:82:f3:
d5:3e:3d:c6:0c:b1:b4:83:7b:71:18:f4:35:7e:3b:
97:0f:23:55:e1:f3:92:a8:a7:a0:68:89:f8:90:f5:
1c:33:2b:e1:3d:aa:ef:75:6c:98:d5:36:d5:b7:14:
b7:89:03:4f:54:99:c2:fc:23:ae:ec:4b:0e:08:c5:
d5:1b:40:99:2e:6e:e7:33:1c:9c:48:c0:68:82:f0:
0d:ff:c7:ac:7a:c1:6f:5e:0a:83:60:bb:f9:f8:a9:
2e:e7:e1:5f:a1:58:1a:8c:73:28:66:d5:38:67:b0:
ea:e6:27:97:85:c9:5d:78:ed:f6:cc:99:4e:b2:e6:
9d:1c:93:f9:cb:c7:be:87:cb:46:40:6a:d4:d4:fa:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F6:BA:84:64:2A:7D:E1:68:B5:38:C5:62:E1:E9:88:49:34:D0:0D
X509v3 Authority Key Identifier:
keyid:E3:2B:FD:CC:D3:BB:06:10:2D:47:A6:57:E6:0B:8D:7A:3B:04:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yv9zNO7BhAtR6ZX5guNejsERXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/5Pa6hGQqfeFotTjFYuHpiEk00A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/4yv9zNO7BhAtR6ZX5guNejsERXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.127.0/24
Signature Algorithm: sha256WithRSAEncryption
04:eb:0e:2e:89:22:29:7f:7d:d2:a5:5a:bd:cf:ab:eb:63:03:
05:ef:9d:bd:95:87:65:8a:34:d1:68:62:e7:f1:4e:36:fa:b0:
13:1a:25:1e:d3:54:95:a9:80:24:15:2e:d6:41:72:96:34:25:
6a:95:08:0d:91:2b:fc:94:64:98:7f:7b:f2:d1:63:1d:7b:ac:
98:47:3a:8f:2e:b4:97:0e:e2:dd:50:08:94:50:13:91:5f:c7:
d1:53:e1:4b:14:a1:f8:20:24:0f:a2:4c:22:00:3c:a6:6d:08:
d0:a2:dd:66:1e:3e:75:f4:be:d0:23:05:60:2b:a8:36:fb:18:
fa:76:84:8a:d5:9e:43:fc:b2:e7:b9:42:60:bb:c1:91:72:b5:
d7:9c:df:80:c3:0a:75:9b:35:e7:e2:98:80:48:45:a3:46:8f:
8a:62:4d:c6:3f:8b:46:46:50:6e:f9:b5:6d:e0:fa:bb:ef:cd:
e8:02:1c:37:cc:4f:c4:f5:ff:06:f4:8b:d7:a8:ec:a5:f6:2e:
73:2e:7e:28:b9:ee:2c:5b:fc:26:37:f6:0b:d4:05:04:c6:b1:
96:4f:81:26:9f:0a:9b:aa:96:29:78:7c:b8:e8:da:69:1e:f1:
d7:b4:50:21:82:6d:b0:1e:8d:fa:3e:22:4b:87:5f:7f:d1:8f:
e1:c9:58:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtQaajhhkfYSq2v6de8k9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMmJmZGNjZDNiYjA2MTAyZDQ3YTY1N2U2MGI4ZDdhM2Iw
NDQ1NzkwHhcNMjMwMTAxMTIxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGY2YmE4NDY0MmE3ZGUxNjhiNTM4YzU2MmUxZTk4ODQ5MzRkMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG/XVTM+317Dswkg/JXEsEvjiic4
nC06Do0kHCicR5r4SyQwVDjYNGQl27T+DztVM4ml0VOUAX4O4JN+Ri0qCR0/ZxFO
s2qFbdsQAaUDqaEUFULBG+29zPSG3NiEIQJnDLS/nn7r0ZdB7UBz7fZLEAXTwfSj
gvPVPj3GDLG0g3txGPQ1fjuXDyNV4fOSqKegaIn4kPUcMyvhParvdWyY1TbVtxS3
iQNPVJnC/COu7EsOCMXVG0CZLm7nMxycSMBogvAN/8esesFvXgqDYLv5+Kku5+Ff
oVgajHMoZtU4Z7Dq5ieXhcldeO32zJlOsuadHJP5y8e+h8tGQGrU1PoweQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOT2uoRkKn3haLU4xWLh6YhJNNANMB8GA1UdIwQY
MBaAFOMr/czTuwYQLUemV+YLjXo7BEV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHl2OXpOTzdCaEF0UjZaWDVndU5lanNFUlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hODViMmUtYjQzOC00Y2U2LWExMjYt
ZmQ5OTE2ZmQ5NTdiLzEvNVBhNmhHUXFmZUZvdFRqRll1SHBpRWswMEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hODViMmUtYjQzOC00Y2U2LWExMjYtZmQ5OTE2ZmQ5NTdi
LzEvNHl2OXpOTzdCaEF0UjZaWDVndU5lanNFUlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BJ/MA0G
CSqGSIb3DQEBCwUAA4IBAQAE6w4uiSIpf33SpVq9z6vrYwMF7529lYdlijTRaGLn
8U42+rATGiUe01SVqYAkFS7WQXKWNCVqlQgNkSv8lGSYf3vy0WMde6yYRzqPLrSX
DuLdUAiUUBORX8fRU+FLFKH4ICQPokwiADymbQjQot1mHj519L7QIwVgK6g2+xj6
doSK1Z5D/LLnuUJgu8GRcrXXnN+Awwp1mzXn4piASEWjRo+KYk3GP4tGRlBu+bVt
4Pq7783oAhw3zE/E9f8G9IvXqOyl9i5zLn4oue4sW/wmN/YL1AUExrGWT4Emnwqb
qpYpeHy46NppHvHXtFAhgm2wHo36PiJLh19/0Y/hyVg9
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:53 2023 by rpki-client on console-ams.rpki-client.org