Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/PSdqCfDAElBZ3IVyFg6mUcANibs.roa
File: PSdqCfDAElBZ3IVyFg6mUcANibs.roa (raw, json)
Hash identifier: 3N/fkslzu8AcdRTFTFdJW65IaPqcIcGyhqkNbThLNXE=
Subject key identifier: 3D:27:6A:09:F0:C0:12:50:59:DC:85:72:16:0E:A6:51:C0:0D:89:BB
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01856F5DCED77B00101F5475A9553876CBA3
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/PSdqCfDAElBZ3IVyFg6mUcANibs.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 212.124.85.0/24 maxlen: 24
212.124.80.0/22 maxlen: 24
212.124.84.0/24 maxlen: 24
212.124.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ce:d7:7b:00:10:1f:54:75:a9:55:38:76:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d276a09f0c0125059dc8572160ea651c00d89bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:65:76:dd:ca:4f:26:1a:c7:bf:d6:62:73:
44:62:eb:16:fa:d4:5a:08:11:be:c5:45:ef:0c:b7:
0c:c8:74:f9:02:31:fa:25:5a:d1:68:11:9c:80:1a:
32:48:17:a8:cd:d8:cd:3d:4c:7f:f9:39:0b:2a:84:
8f:da:ca:32:de:3d:96:c1:8f:e3:9f:9f:ae:b3:12:
2b:cf:ea:32:84:7a:4f:d6:89:65:3f:8e:5f:88:00:
26:2e:a4:16:5c:0f:b5:57:7f:8e:68:d4:8e:2f:97:
44:07:c8:d9:7c:9f:5b:a6:3a:dd:48:06:bd:42:fd:
11:ef:43:41:ba:a1:c8:ac:2a:a8:34:6b:82:49:35:
57:84:d3:2e:11:3e:a3:89:b9:89:74:41:19:dd:34:
58:34:3a:e2:1f:21:f4:8a:6e:8d:dc:a9:5e:f3:08:
27:bf:11:67:4f:69:64:bd:ae:c4:59:f6:28:cb:3a:
7f:58:70:20:a7:fe:ef:a6:b7:2c:07:3e:e7:ea:9b:
55:f6:0c:92:ca:c1:01:49:9c:93:97:3d:23:3e:67:
75:5e:70:aa:ac:14:09:8a:3f:a2:6c:fe:12:08:9c:
fa:2a:e6:9f:83:14:45:25:46:36:fa:fd:b3:5a:3b:
dd:a0:26:4c:e6:56:5d:74:41:aa:37:0a:b6:19:0c:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:6A:09:F0:C0:12:50:59:DC:85:72:16:0E:A6:51:C0:0D:89:BB
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/PSdqCfDAElBZ3IVyFg6mUcANibs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.80.0-212.124.85.255
212.124.87.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9d:65:3f:09:de:34:48:13:e6:75:60:84:2d:d2:98:ee:7d:
2b:c3:99:46:61:b7:4c:f1:be:1e:f3:b9:bc:9f:53:4c:04:39:
50:c5:17:8d:ab:ce:94:78:6c:46:8c:ae:c4:50:7a:d4:5c:29:
c5:71:fb:fb:04:f4:6c:e1:62:bb:aa:04:2a:1c:73:0a:5d:9f:
64:b4:cf:65:53:59:81:55:28:b6:29:04:1e:66:f9:05:e2:56:
f3:af:d0:2b:d6:fd:f5:78:15:bd:ee:77:11:32:c2:a1:6b:87:
8d:7b:4b:7e:4f:6c:0a:9b:de:35:9e:0b:d9:3f:b8:36:81:c2:
c0:d2:79:bc:b7:2f:22:0b:0c:5a:99:84:20:5f:1c:24:7f:ce:
d0:df:cb:5f:9d:9c:0e:42:99:8a:5f:a6:7b:7a:36:5a:70:32:
1a:8b:05:a5:67:1c:cb:f4:4d:4b:08:ae:ca:1b:c9:77:ad:07:
e6:fc:ab:9a:7f:f7:42:fe:97:a2:7b:e5:18:29:30:9a:62:0a:
6f:41:79:7f:4e:05:d4:67:a4:2d:9a:b2:9d:4b:e1:25:e8:a4:
76:2d:aa:9a:61:b5:5b:47:55:93:af:ec:d8:ea:b3:a6:33:80:
55:c7:74:6c:a7:5a:b1:5a:0e:16:34:8f:d9:56:bb:dd:2d:68:
89:e7:c3:df
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVvXc7XewAQH1R1qVU4dsujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm
MGEyMTcwHhcNMjMwMTAxMjIwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDI3NmEwOWYwYzAxMjUwNTlkYzg1NzIxNjBlYTY1MWMwMGQ4OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfNldt3KTyYax7/WYnNEYusW+tRa
CBG+xUXvDLcMyHT5AjH6JVrRaBGcgBoySBeozdjNPUx/+TkLKoSP2soy3j2WwY/j
n5+usxIrz+oyhHpP1ollP45fiAAmLqQWXA+1V3+OaNSOL5dEB8jZfJ9bpjrdSAa9
Qv0R70NBuqHIrCqoNGuCSTVXhNMuET6jibmJdEEZ3TRYNDriHyH0im6N3Kle8wgn
vxFnT2lkva7EWfYoyzp/WHAgp/7vprcsBz7n6ptV9gySysEBSZyTlz0jPmd1XnCq
rBQJij+ibP4SCJz6KuafgxRFJUY2+v2zWjvdoCZM5lZddEGqNwq2GQxvHQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFD0nagnwwBJQWdyFchYOplHADYm7MB8GA1UdIwQY
MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt
MjhkNzhlYjlmMmRjLzEvUFNkcUNmREFFbEJaM0lWeUZnNm1VY0FOaWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj
LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBATUfFAD
BAHUfFQDBADUfFcwDQYJKoZIhvcNAQELBQADggEBAIWdZT8J3jRIE+Z1YIQt0pju
fSvDmUZht0zxvh7zubyfU0wEOVDFF42rzpR4bEaMrsRQetRcKcVx+/sE9GzhYruq
BCoccwpdn2S0z2VTWYFVKLYpBB5m+QXiVvOv0CvW/fV4Fb3udxEywqFrh417S35P
bAqb3jWeC9k/uDaBwsDSeby3LyILDFqZhCBfHCR/ztDfy1+dnA5CmYpfpnt6Nlpw
MhqLBaVnHMv0TUsIrsobyXetB+b8q5p/90L+l6J75RgpMJpiCm9BeX9OBdRnpC2a
sp1L4SXopHYtqpphtVtHVZOv7Njqs6YzgFXHdGynWrFaDhY0j9lWu90taInnw98=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org