Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/IcOpTKYuktLE8Loub5rtogRT8qY.roa
File: IcOpTKYuktLE8Loub5rtogRT8qY.roa (raw, json)
Hash identifier: d842IjhfNyjWPbMMhNfkHWLROuzg1DpWfa7AnWJYkog=
Subject key identifier: 21:C3:A9:4C:A6:2E:92:D2:C4:F0:BA:2E:6F:9A:ED:A2:04:53:F2:A6
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018C68B11B1B3F9050D90A3BB4792AF681A2
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/IcOpTKYuktLE8Loub5rtogRT8qY.roa
Signing time: Thu 14 Dec 2023 14:18:06 +0000
ROA not before: Thu 14 Dec 2023 14:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 213.109.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:b1:1b:1b:3f:90:50:d9:0a:3b:b4:79:2a:f6:81:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Dec 14 14:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21c3a94ca62e92d2c4f0ba2e6f9aeda20453f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:ff:ff:1a:01:65:e5:e3:c4:d6:c1:09:79:
71:1c:6e:22:f0:10:80:42:4f:5e:2e:f4:69:70:b0:
98:21:cf:79:8a:72:29:d5:ba:c6:e0:b4:55:64:c7:
cf:8c:aa:bf:81:fd:f9:57:ac:1c:2e:a0:0b:67:62:
1c:f7:64:85:86:cc:e7:a1:25:71:a4:8b:1f:d5:ea:
95:55:e0:4e:4a:f1:7b:9a:c9:7f:b4:3a:41:50:db:
aa:9b:e2:07:c9:14:e4:85:6e:9e:d1:ea:8d:43:58:
c1:d6:5a:10:d4:0e:64:97:4b:2d:5b:94:f7:df:b5:
44:9f:d9:9d:af:40:5d:ad:91:ea:81:03:dc:c0:b0:
a7:b6:f7:c3:24:0d:60:64:79:1e:31:a5:2e:ee:90:
ba:54:d6:80:98:8a:ba:10:20:d7:1e:5d:47:cc:cc:
4d:28:e1:d0:bb:f9:a8:63:ee:f8:38:ef:27:6e:c0:
80:90:46:81:79:d3:0c:39:6d:17:42:39:de:b3:1e:
e9:84:b9:82:af:e4:b6:d4:51:d1:96:91:bd:42:98:
b1:12:ea:4c:fc:e0:bc:a6:e5:75:45:d1:79:df:14:
63:81:02:4f:e3:e2:2f:0f:c4:fe:41:66:8c:5c:37:
5d:e4:55:f9:4b:bd:73:49:4d:4d:bc:c0:cb:d5:4e:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:A9:4C:A6:2E:92:D2:C4:F0:BA:2E:6F:9A:ED:A2:04:53:F2:A6
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/IcOpTKYuktLE8Loub5rtogRT8qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d3:05:93:ce:8f:b8:55:91:22:c2:c3:fc:4b:22:b8:7f:bc:
1e:ee:39:b6:b8:c1:4b:4b:9b:4b:10:12:66:ef:02:5f:ae:3f:
4e:0b:f4:69:f6:70:9c:41:ed:01:8a:6d:85:37:a3:14:8f:fb:
d6:8b:8e:0e:5d:ae:a3:c2:8a:b6:e4:8f:f8:0d:2a:b2:f9:60:
0d:a5:3b:17:fc:87:ba:68:ca:52:7e:5e:24:fb:a6:8c:90:a2:
97:60:28:29:84:d9:ee:28:a4:53:70:d1:95:10:dd:77:a1:66:
d9:17:86:9b:a9:ff:6d:21:8b:02:f8:b1:df:43:72:17:80:4a:
cc:2d:a5:50:21:b7:04:e6:06:c4:64:c2:a5:58:8e:3d:b5:d4:
ff:81:80:9a:a2:b9:f8:91:0e:66:c8:79:8f:f8:8e:59:4e:46:
cb:30:62:7f:4a:ab:1b:51:b3:0f:19:08:e6:3a:f6:cd:af:07:
3d:b8:43:41:f9:0a:04:0a:fd:ad:c9:53:43:61:a5:96:a2:40:
fd:ed:16:a9:ca:ac:21:df:92:c1:4c:08:a1:bf:4e:74:18:26:
5b:89:13:65:a3:09:ca:23:08:76:e4:cd:b8:8d:61:4f:b6:4d:
79:f2:60:34:2a:26:b2:0e:2e:1c:9c:3e:1e:72:06:13:f6:a8:
aa:f2:9d:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxosRsbP5BQ2Qo7tHkq9oGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjMxMjE0MTQxODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWMzYTk0Y2E2MmU5MmQyYzRmMGJhMmU2ZjlhZWRhMjA0NTNmMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy///xoBZeXjxNbBCXlxHG4i8BCA
Qk9eLvRpcLCYIc95inIp1brG4LRVZMfPjKq/gf35V6wcLqALZ2Ic92SFhsznoSVx
pIsf1eqVVeBOSvF7msl/tDpBUNuqm+IHyRTkhW6e0eqNQ1jB1loQ1A5kl0stW5T3
37VEn9mdr0BdrZHqgQPcwLCntvfDJA1gZHkeMaUu7pC6VNaAmIq6ECDXHl1HzMxN
KOHQu/moY+74OO8nbsCAkEaBedMMOW0XQjnesx7phLmCr+S21FHRlpG9QpixEupM
/OC8puV1RdF53xRjgQJP4+IvD8T+QWaMXDdd5FX5S71zSU1NvMDL1U4E+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHDqUymLpLSxPC6Lm+a7aIEU/KmMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvSWNPcFRLWXVrdExFOExvdWI1cnRvZ1JUOHFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2aMA0G
CSqGSIb3DQEBCwUAA4IBAQCV0wWTzo+4VZEiwsP8SyK4f7we7jm2uMFLS5tLEBJm
7wJfrj9OC/Rp9nCcQe0Bim2FN6MUj/vWi44OXa6jwoq25I/4DSqy+WANpTsX/Ie6
aMpSfl4k+6aMkKKXYCgphNnuKKRTcNGVEN13oWbZF4abqf9tIYsC+LHfQ3IXgErM
LaVQIbcE5gbEZMKlWI49tdT/gYCaorn4kQ5myHmP+I5ZTkbLMGJ/SqsbUbMPGQjm
OvbNrwc9uENB+QoECv2tyVNDYaWWokD97Rapyqwh35LBTAihv050GCZbiRNlownK
Iwh25M24jWFPtk158mA0KiayDi4cnD4ecgYT9qiq8p0Q
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:44 2024 by rpki-client on console-fra.rpki-client.org