Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/lfzZ6o1lTdBmPwp_aCTEev30HeM.roa
File: lfzZ6o1lTdBmPwp_aCTEev30HeM.roa (raw, json)
Hash identifier: DamQk08A+oo/EDx0bLosYe8sre8zWt5oFpw2nLLF0AQ=
Subject key identifier: 95:FC:D9:EA:8D:65:4D:D0:66:3F:0A:7F:68:24:C4:7A:FD:F4:1D:E3
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01939B8B10FD9826A474D3EB3616BB0C76DA
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/lfzZ6o1lTdBmPwp_aCTEev30HeM.roa
Signing time: Fri 06 Dec 2024 10:36:42 +0000
ROA not before: Fri 06 Dec 2024 10:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202888
IP address blocks: 212.42.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 13:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:8b:10:fd:98:26:a4:74:d3:eb:36:16:bb:0c:76:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 6 10:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95fcd9ea8d654dd0663f0a7f6824c47afdf41de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:4e:36:82:b1:78:52:d9:df:25:17:6d:4a:
75:37:1b:70:25:05:9d:56:45:b1:b3:81:c7:b1:13:
28:c5:a5:1a:f0:89:7d:a3:5a:c5:ca:31:ac:7a:c2:
e0:9f:26:9f:fe:e1:e7:6c:00:88:f9:fd:f4:6c:87:
9c:36:2a:d9:9c:e7:86:57:e0:e1:7e:73:dd:31:f9:
db:cd:fe:6e:b8:69:ee:46:41:84:b7:3c:3a:3c:cf:
3c:cd:92:8f:54:77:21:62:cf:b5:59:fc:d0:ce:95:
c0:2e:2d:7b:45:e8:3c:e9:22:6f:d9:91:71:df:67:
fb:f7:2c:06:11:ab:8a:22:62:77:03:a3:21:f5:3a:
53:8c:c7:e6:5a:3e:de:25:7b:9b:e6:e0:c5:6c:43:
2a:5c:04:12:94:18:cf:8e:4c:12:21:f3:6d:b8:cf:
33:e8:a3:01:d0:80:b3:86:1c:ba:9f:98:17:04:df:
a3:dc:a8:91:15:77:78:6a:ff:3d:7b:fd:38:6d:e1:
39:f0:00:74:2d:f2:c2:03:71:59:a9:d4:68:9f:d6:
d0:40:f6:b7:95:9d:46:14:00:80:a4:2c:f0:8a:16:
c9:e0:05:a3:4a:48:7b:2c:4c:0c:b9:9e:16:bf:ff:
19:59:a6:01:68:ca:3e:0a:e0:ed:dd:2d:d4:71:6f:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:D9:EA:8D:65:4D:D0:66:3F:0A:7F:68:24:C4:7A:FD:F4:1D:E3
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/lfzZ6o1lTdBmPwp_aCTEev30HeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:bf:3a:c1:a6:78:4b:6d:56:8d:26:f3:dc:96:02:3e:fe:e2:
88:47:a6:e6:1d:08:ee:2d:6d:07:1b:a0:b6:5c:5d:10:32:b4:
80:d0:1f:c3:c4:54:9d:31:a8:5c:a5:d4:40:68:12:b1:68:14:
8c:f0:79:b4:e6:a0:85:dc:76:c1:02:c3:a6:f6:8b:cc:cd:ca:
2d:d5:2c:be:7f:ea:a2:58:aa:fb:b9:31:8d:53:7d:c4:e7:15:
2d:aa:1e:1b:9e:b4:2b:6e:49:6b:fb:0a:a3:92:ee:22:ca:18:
66:9a:ff:e5:bc:c4:36:2b:1e:e3:2d:15:63:02:19:7a:93:e7:
10:68:01:dd:1b:98:ac:58:34:33:6f:e1:d3:3b:51:e7:8c:d0:
ff:b9:d3:db:10:4f:56:18:68:a6:ce:53:55:f0:ab:1f:86:f3:
c2:32:23:5e:21:8e:c9:92:d3:11:a1:64:81:ed:f9:77:0a:b3:
5e:03:6e:7d:23:e1:4c:3c:b1:eb:60:af:14:a7:69:26:2a:49:
71:f1:cf:91:2c:bf:47:e5:73:59:00:ac:d5:8a:01:fc:14:05:
47:4c:58:c9:7e:e8:30:99:30:fb:36:7a:86:5f:92:ef:3f:16:
7e:c8:44:51:a9:38:ca:fc:37:2e:78:a2:22:66:0f:85:ec:60:
d6:bd:ca:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZObixD9mCakdNPrNha7DHbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQxMjA2MTAzNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWZjZDllYThkNjU0ZGQwNjYzZjBhN2Y2ODI0YzQ3YWZkZjQxZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc1ONoKxeFLZ3yUXbUp1NxtwJQWd
VkWxs4HHsRMoxaUa8Il9o1rFyjGsesLgnyaf/uHnbACI+f30bIecNirZnOeGV+Dh
fnPdMfnbzf5uuGnuRkGEtzw6PM88zZKPVHchYs+1WfzQzpXALi17Reg86SJv2ZFx
32f79ywGEauKImJ3A6Mh9TpTjMfmWj7eJXub5uDFbEMqXAQSlBjPjkwSIfNtuM8z
6KMB0ICzhhy6n5gXBN+j3KiRFXd4av89e/04beE58AB0LfLCA3FZqdRon9bQQPa3
lZ1GFACApCzwihbJ4AWjSkh7LEwMuZ4Wv/8ZWaYBaMo+CuDt3S3UcW/4SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJX82eqNZU3QZj8Kf2gkxHr99B3jMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvbGZ6WjZvMWxUZEJtUHdwX2FDVEVldjMwSGVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1CrQMA0G
CSqGSIb3DQEBCwUAA4IBAQB8vzrBpnhLbVaNJvPclgI+/uKIR6bmHQjuLW0HG6C2
XF0QMrSA0B/DxFSdMahcpdRAaBKxaBSM8Hm05qCF3HbBAsOm9ovMzcot1Sy+f+qi
WKr7uTGNU33E5xUtqh4bnrQrbklr+wqjku4iyhhmmv/lvMQ2Kx7jLRVjAhl6k+cQ
aAHdG5isWDQzb+HTO1HnjND/udPbEE9WGGimzlNV8KsfhvPCMiNeIY7JktMRoWSB
7fl3CrNeA259I+FMPLHrYK8Up2kmKklx8c+RLL9H5XNZAKzVigH8FAVHTFjJfugw
mTD7NnqGX5LvPxZ+yERRqTjK/DcueKIiZg+F7GDWvcog
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:48 2025 by rpki-client