Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GAeugfZnZfdkzi7cB9gZqVQ7PEc.roa
File: GAeugfZnZfdkzi7cB9gZqVQ7PEc.roa (raw, json)
Hash identifier: MZC6DxO2qcpzE+AInnAOaMIpMKVWZA/bilRJbSbvDUk=
Subject key identifier: 18:07:AE:81:F6:67:65:F7:64:CE:2E:DC:07:D8:19:A9:54:3B:3C:47
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E0DE28C7A48D2732FCD01C073934E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GAeugfZnZfdkzi7cB9gZqVQ7PEc.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0d:e2:8c:7a:48:d2:73:2f:cd:01:c0:73:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1807ae81f66765f764ce2edc07d819a9543b3c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:a3:24:57:f9:dc:d6:e2:91:f8:b8:f2:b7:
11:94:e4:ea:74:f8:3e:56:18:aa:90:cd:88:8a:38:
a2:2f:24:ed:1d:11:db:b4:f0:d4:36:f7:b5:b6:b3:
32:e9:41:5e:f7:05:88:ff:b2:1b:57:c2:04:24:1c:
fa:11:bd:99:b2:bf:1c:72:07:da:12:26:47:7e:0f:
76:07:e8:87:13:e6:9f:ff:f6:21:bd:a5:e9:46:ad:
44:69:99:dc:be:40:c4:17:b1:2f:97:18:30:eb:f7:
f0:68:e8:99:93:03:f6:f8:3d:28:d1:9f:f3:ed:f8:
00:78:88:5f:97:1a:1c:e4:39:82:fb:b4:4d:22:43:
44:15:cf:6b:63:94:55:a4:00:8c:bc:7e:54:ef:e7:
f7:80:b0:a9:5e:89:cd:79:06:21:f8:b8:b4:c6:60:
f7:9e:79:2f:34:e9:69:df:7a:d5:cf:dc:b0:6a:77:
ac:64:bc:e7:41:4c:44:9e:cf:4f:ce:63:10:73:1b:
db:ce:5a:b1:05:32:5f:53:3c:3c:7e:db:1b:1d:b7:
75:fd:fa:e7:43:8d:3b:f2:3b:7f:84:a2:21:4d:54:
1c:81:35:95:0e:da:55:c2:d7:1f:e6:79:90:64:f3:
cc:1d:8e:b2:2b:cf:99:b7:2d:30:31:aa:a9:2c:5f:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:AE:81:F6:67:65:F7:64:CE:2E:DC:07:D8:19:A9:54:3B:3C:47
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GAeugfZnZfdkzi7cB9gZqVQ7PEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9e:8b:52:dc:34:de:9c:52:ab:a9:c1:f7:ca:27:15:d9:2c:
cf:b6:42:4c:a0:d8:ba:72:3e:bc:43:e8:d8:7c:8c:cd:f7:06:
39:dc:52:af:1b:88:77:c9:ab:10:82:59:8f:40:56:2f:f4:eb:
b7:72:d6:7b:06:1a:22:f6:a3:6d:73:4a:6a:43:c6:5b:b1:b6:
da:35:48:c8:b3:9e:f3:8f:15:c3:30:b6:24:7e:25:62:47:a6:
49:d7:43:99:1a:d4:ec:62:77:65:eb:e2:00:cf:e8:c8:8a:ba:
36:d7:6b:68:de:f1:fa:f4:02:0f:af:a1:92:81:ae:a4:3f:a5:
4a:fd:bf:20:e4:ac:52:94:65:e2:98:54:c1:60:d1:2c:c2:a2:
79:17:fc:62:4a:85:5e:b2:a1:22:45:8b:1b:bb:c9:1e:03:43:
1a:9d:b8:b5:04:48:05:16:84:45:d3:82:d6:13:76:ba:a0:30:
fb:45:34:29:44:00:42:af:fe:2c:46:90:31:c2:34:37:ad:5e:
e2:f6:41:f7:fe:75:78:a8:cb:ce:42:3b:d4:b1:97:d3:fa:31:
c3:3d:e8:a4:4b:86:9a:b7:a5:38:d8:6e:55:f4:87:84:be:48:
c1:b3:bc:de:e3:62:e8:56:ba:b6:3e:74:9a:d2:ae:58:31:db:
0e:3c:0f:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbg3ijHpI0nMvzQHAc5NOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwMTAxMTQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODA3YWU4MWY2Njc2NWY3NjRjZTJlZGMwN2Q4MTlhOTU0M2IzYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HKjJFf53Nbikfi48rcRlOTqdPg+
VhiqkM2IijiiLyTtHRHbtPDUNve1trMy6UFe9wWI/7IbV8IEJBz6Eb2Zsr8ccgfa
EiZHfg92B+iHE+af//YhvaXpRq1EaZncvkDEF7Evlxgw6/fwaOiZkwP2+D0o0Z/z
7fgAeIhflxoc5DmC+7RNIkNEFc9rY5RVpACMvH5U7+f3gLCpXonNeQYh+Li0xmD3
nnkvNOlp33rVz9ywanesZLznQUxEns9PzmMQcxvbzlqxBTJfUzw8ftsbHbd1/frn
Q4078jt/hKIhTVQcgTWVDtpVwtcf5nmQZPPMHY6yK8+Zty0wMaqpLF/+ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgHroH2Z2X3ZM4u3AfYGalUOzxHMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvR0FldWdmWm5aZmRremk3Y0I5Z1pxVlE3UEVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUOMA0G
CSqGSIb3DQEBCwUAA4IBAQAenotS3DTenFKrqcH3yicV2SzPtkJMoNi6cj68Q+jY
fIzN9wY53FKvG4h3yasQglmPQFYv9Ou3ctZ7Bhoi9qNtc0pqQ8ZbsbbaNUjIs57z
jxXDMLYkfiViR6ZJ10OZGtTsYndl6+IAz+jIiro212to3vH69AIPr6GSga6kP6VK
/b8g5KxSlGXimFTBYNEswqJ5F/xiSoVesqEiRYsbu8keA0Manbi1BEgFFoRF04LW
E3a6oDD7RTQpRABCr/4sRpAxwjQ3rV7i9kH3/nV4qMvOQjvUsZfT+jHDPeikS4aa
t6U42G5V9IeEvkjBs7ze42LoVrq2PnSa0q5YMdsOPA+E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org