Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bRPyeL6Dk7B2BnClQ_q-sU9rFVk.roa
File: bRPyeL6Dk7B2BnClQ_q-sU9rFVk.roa (raw, json)
Hash identifier: LjKM8VUhx4vE72kVr1LRZ/nYzQtz2PYWp9GN0BKaFXQ=
Subject key identifier: 6D:13:F2:78:BE:83:93:B0:76:06:70:A5:43:FA:BE:B1:4F:6B:15:59
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7CB8BCB120AC6EBE603C410DE7119
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bRPyeL6Dk7B2BnClQ_q-sU9rFVk.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 212.69.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cb:8b:cb:12:0a:c6:eb:e6:03:c4:10:de:71:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d13f278be8393b0760670a543fabeb14f6b1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:1f:11:61:9e:f4:7a:7f:df:6a:f4:41:fe:
86:9f:af:5a:5f:21:8a:73:83:18:f2:86:ec:84:2f:
6c:04:95:4c:a5:9b:8e:b0:d6:01:ce:f0:cf:16:bf:
dd:d9:93:c8:67:91:b3:26:ba:a3:4f:53:5c:54:3b:
4f:ec:10:7e:d1:7b:24:47:33:1c:f4:3d:17:7c:d8:
c8:af:ad:03:76:cb:06:e0:7d:94:b2:59:83:46:47:
9f:ff:e1:6f:9b:da:32:95:c4:d7:01:73:49:fe:1b:
8d:7b:3d:99:5d:2f:b8:3d:0b:d4:71:94:04:33:2c:
38:d8:2e:ce:f3:1c:8c:76:8e:fb:6a:93:09:43:89:
c1:5c:09:6d:b1:93:cc:90:10:f7:e5:8d:41:05:ef:
53:5c:9f:17:a0:cc:2a:5b:1c:91:01:ad:28:fd:14:
cf:b6:ae:d8:db:62:60:3b:1a:84:f7:db:9e:41:4e:
ba:67:76:ac:a9:5d:46:b9:c9:0f:84:f7:4c:8a:7a:
2c:c7:86:ae:d9:b4:0a:e3:7a:28:ae:68:b8:74:4d:
97:2c:cb:32:95:41:9b:7b:13:0c:3e:53:f4:76:e7:
8e:57:36:5e:a1:59:ac:15:9f:c1:f8:68:ce:77:a3:
a0:0a:2d:11:d1:f6:20:cf:dd:a2:88:ea:d9:20:7f:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:13:F2:78:BE:83:93:B0:76:06:70:A5:43:FA:BE:B1:4F:6B:15:59
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bRPyeL6Dk7B2BnClQ_q-sU9rFVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a4:74:ed:2b:41:11:64:1a:0d:79:4c:15:4d:47:ba:f0:13:
04:d6:05:31:00:a0:42:1a:92:ac:08:fd:46:e0:74:2d:c4:fd:
50:94:1d:38:92:cd:5b:16:54:04:6d:21:5e:b6:f2:95:28:22:
13:25:40:42:20:1c:99:14:a3:8a:bd:6c:e1:90:50:c0:91:d5:
ee:e5:b8:b6:9c:cf:89:a9:b2:20:8b:2b:36:dd:26:78:10:24:
a3:30:a2:48:eb:24:a4:5d:88:d5:52:8d:d0:d6:55:db:c3:6c:
86:fc:c4:c4:2c:c1:a2:ee:12:f1:64:10:55:d6:64:bc:7f:2b:
1e:07:04:7b:1c:c4:83:1c:ff:76:b4:aa:4f:6d:85:16:e3:db:
67:32:71:44:ed:45:13:08:3b:66:43:33:51:32:08:72:89:3b:
0e:2f:29:ae:e6:a9:68:09:b4:ee:5c:97:3c:8c:63:36:42:a5:
09:15:85:1c:9e:08:58:20:47:c6:88:21:ef:bd:13:ce:a8:0d:
e7:c4:aa:96:b8:0c:54:41:79:c2:3e:5d:7b:82:41:ef:f5:ab:
3c:d5:54:22:9d:07:6c:63:cc:49:02:8d:f3:b1:89:9b:bc:2c:
43:c4:db:95:f1:de:c7:d0:68:ae:00:ba:0b:14:2c:94:7f:9e:
66:ba:4e:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx18uLyxIKxuvmA8QQ3nEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDEzZjI3OGJlODM5M2IwNzYwNjcwYTU0M2ZhYmViMTRmNmIxNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IkfEWGe9Hp/32r0Qf6Gn69aXyGK
c4MY8obshC9sBJVMpZuOsNYBzvDPFr/d2ZPIZ5GzJrqjT1NcVDtP7BB+0XskRzMc
9D0XfNjIr60DdssG4H2UslmDRkef/+Fvm9oylcTXAXNJ/huNez2ZXS+4PQvUcZQE
Myw42C7O8xyMdo77apMJQ4nBXAltsZPMkBD35Y1BBe9TXJ8XoMwqWxyRAa0o/RTP
tq7Y22JgOxqE99ueQU66Z3asqV1GuckPhPdMinosx4au2bQK43oormi4dE2XLMsy
lUGbexMMPlP0dueOVzZeoVmsFZ/B+GjOd6OgCi0R0fYgz92iiOrZIH/cfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0T8ni+g5OwdgZwpUP6vrFPaxVZMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvYlJQeWVMNkRrN0IyQm5DbFFfcS1zVTlyRlZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUAMA0G
CSqGSIb3DQEBCwUAA4IBAQB4pHTtK0ERZBoNeUwVTUe68BME1gUxAKBCGpKsCP1G
4HQtxP1QlB04ks1bFlQEbSFetvKVKCITJUBCIByZFKOKvWzhkFDAkdXu5bi2nM+J
qbIgiys23SZ4ECSjMKJI6ySkXYjVUo3Q1lXbw2yG/MTELMGi7hLxZBBV1mS8fyse
BwR7HMSDHP92tKpPbYUW49tnMnFE7UUTCDtmQzNRMghyiTsOLymu5qloCbTuXJc8
jGM2QqUJFYUcnghYIEfGiCHvvRPOqA3nxKqWuAxUQXnCPl17gkHv9as81VQinQds
Y8xJAo3zsYmbvCxDxNuV8d7H0GiuALoLFCyUf55muk4a
-----END CERTIFICATE-----
Generated at Mon Jul 31 20:26:36 2023 by rpki-client on console-ams.rpki-client.org