Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mK-BVc8lrZezmJcuPkt5vEI6pQY.roa
File: mK-BVc8lrZezmJcuPkt5vEI6pQY.roa (raw, json)
Hash identifier: jcLxVaR60SAt/qQtt0Wvb3L4cJrFBUuf4HX0d8awmDM=
Subject key identifier: 98:AF:81:55:CF:25:AD:97:B3:98:97:2E:3E:4B:79:BC:42:3A:A5:06
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01867F4869D07B1099C6137207B338BD35AB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mK-BVc8lrZezmJcuPkt5vEI6pQY.roa
Signing time: Thu 23 Feb 2023 17:18:17 +0000
ROA not before: Thu 23 Feb 2023 17:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Feb 2023 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:48:69:d0:7b:10:99:c6:13:72:07:b3:38:bd:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 23 17:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98af8155cf25ad97b398972e3e4b79bc423aa506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:ec:1b:96:79:9f:7f:ca:90:1b:b3:61:b3:
ed:4d:71:fd:58:b0:03:75:f8:fd:5e:e6:70:1a:e9:
84:19:bf:96:c0:f0:45:76:c2:98:12:cc:06:46:7c:
7e:f9:54:b5:20:04:ae:a5:71:f2:44:b9:0b:a8:40:
62:8d:c0:f3:8b:35:14:fb:87:18:f3:c1:17:51:63:
ab:28:0d:2b:66:07:d9:28:8c:22:a5:b0:22:77:bc:
9b:68:89:d6:4a:54:a8:26:51:a5:0f:c2:7f:de:b0:
82:da:ae:2b:85:b0:74:ba:16:d0:f8:bc:ff:fa:f0:
83:4b:fc:5d:38:41:d5:2d:5b:97:18:a2:a8:09:69:
4d:ba:e5:9a:51:3a:1e:b4:85:8b:b6:30:62:48:49:
d8:cc:ad:9b:03:f0:93:71:57:1f:5e:41:bb:2a:ee:
ad:90:5f:3a:34:56:78:3c:fc:99:98:c7:d7:b6:6f:
f7:a9:b8:56:ab:16:ed:e7:98:ff:3d:b5:2c:9d:ad:
98:b4:98:e4:94:a8:4e:88:9a:91:de:62:ba:d0:db:
bc:e2:2c:c8:70:f8:bc:92:fc:9d:ce:f9:11:9e:fe:
9b:c9:bf:f3:f7:ff:4b:b4:e6:a9:a9:32:b3:7d:7a:
12:34:22:85:e3:23:b1:da:e7:72:c4:f3:33:0b:6f:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:81:55:CF:25:AD:97:B3:98:97:2E:3E:4B:79:BC:42:3A:A5:06
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mK-BVc8lrZezmJcuPkt5vEI6pQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
12:18:aa:49:5e:73:d4:28:33:2f:b0:75:b1:98:19:3f:05:5b:
4f:1a:cd:98:8b:04:dc:73:4a:04:bb:2e:86:e8:d3:79:a8:2b:
cb:a5:de:6f:8f:e7:c3:da:72:30:09:dc:60:d3:f1:4f:e5:45:
8a:96:d7:f6:81:e5:fd:ab:4e:75:0e:75:38:43:54:a6:cf:a6:
52:76:e0:5b:99:8b:ed:7b:05:c4:41:71:0a:49:1a:e1:04:4e:
bb:9d:ad:60:de:c2:7d:74:4c:cb:80:d2:83:ff:90:f2:ce:fe:
b5:78:3c:a7:15:07:df:f8:a3:aa:e2:fc:10:2c:93:6e:6d:d2:
42:00:36:36:4f:0a:27:6e:4f:25:87:31:8d:a5:8f:ad:06:d5:
c2:46:59:40:2f:b4:6a:78:24:af:97:c2:3b:38:79:48:10:a6:
9c:1a:cc:51:80:f4:4b:fa:eb:9e:e9:23:a3:21:42:97:9a:51:
6f:19:cd:2b:6b:13:21:f1:f0:39:19:8c:5b:10:c8:ad:54:ad:
54:3d:59:c5:c9:f5:29:9f:ae:a6:a4:7e:4c:4e:e7:d8:8c:b8:
b9:c2:92:7d:07:f9:54:f4:3b:8d:b7:1c:69:80:8f:2b:83:98:
a1:3c:32:54:76:82:61:5e:c6:63:c8:05:1e:64:39:63:56:af:
e9:36:54:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ/SGnQexCZxhNyB7M4vTWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMjIzMTcxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGFmODE1NWNmMjVhZDk3YjM5ODk3MmUzZTRiNzliYzQyM2FhNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkLsG5Z5n3/KkBuzYbPtTXH9WLAD
dfj9XuZwGumEGb+WwPBFdsKYEswGRnx++VS1IASupXHyRLkLqEBijcDzizUU+4cY
88EXUWOrKA0rZgfZKIwipbAid7ybaInWSlSoJlGlD8J/3rCC2q4rhbB0uhbQ+Lz/
+vCDS/xdOEHVLVuXGKKoCWlNuuWaUToetIWLtjBiSEnYzK2bA/CTcVcfXkG7Ku6t
kF86NFZ4PPyZmMfXtm/3qbhWqxbt55j/PbUsna2YtJjklKhOiJqR3mK60Nu84izI
cPi8kvydzvkRnv6byb/z9/9LtOapqTKzfXoSNCKF4yOx2udyxPMzC2+EQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJivgVXPJa2Xs5iXLj5LebxCOqUGMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvbUstQlZjOGxyWmV6bUpjdVBrdDV2RUk2cFFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUOMA0G
CSqGSIb3DQEBCwUAA4IBAQASGKpJXnPUKDMvsHWxmBk/BVtPGs2YiwTcc0oEuy6G
6NN5qCvLpd5vj+fD2nIwCdxg0/FP5UWKltf2geX9q051DnU4Q1Smz6ZSduBbmYvt
ewXEQXEKSRrhBE67na1g3sJ9dEzLgNKD/5Dyzv61eDynFQff+KOq4vwQLJNubdJC
ADY2Twonbk8lhzGNpY+tBtXCRllAL7RqeCSvl8I7OHlIEKacGsxRgPRL+uue6SOj
IUKXmlFvGc0raxMh8fA5GYxbEMitVK1UPVnFyfUpn66mpH5MTufYjLi5wpJ9B/lU
9DuNtxxpgI8rg5ihPDJUdoJhXsZjyAUeZDljVq/pNlQx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org