Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1-tMQ9fSI9kQ32oUfLFTf8GJF5pA.roa
File: 1-tMQ9fSI9kQ32oUfLFTf8GJF5pA.roa (raw, json)
Hash identifier: 8FC/r03G7e/+/Bw0W658ppJ72dQj2P/WLWIDSx/G66I=
Subject key identifier: FA:D3:10:F5:F4:88:F6:44:37:DA:85:1F:2C:54:DF:F0:62:45:E6:90
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018571F11001E0289431098DC9240AB89F13
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1-tMQ9fSI9kQ32oUfLFTf8GJF5pA.roa
Signing time: Mon 02 Jan 2023 10:05:01 +0000
ROA not before: Mon 02 Jan 2023 10:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 212.116.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:10:01:e0:28:94:31:09:8d:c9:24:0a:b8:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 2 10:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad310f5f488f64437da851f2c54dff06245e690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:65:cb:9d:4c:3f:82:6b:c8:31:56:9a:c5:
db:94:d6:37:c2:d3:c1:ce:da:d7:ca:a8:12:d5:b2:
61:cd:ad:ef:e5:97:5f:78:98:e2:be:7b:73:e3:ec:
2e:91:a7:0e:b2:55:62:69:aa:c6:80:8b:e6:41:0f:
46:42:2f:d0:f0:aa:8d:39:9f:76:59:5c:8a:ee:ef:
69:e4:28:4f:c4:9f:50:30:e9:2b:8b:6c:59:6a:16:
33:5e:38:a4:3e:b6:f0:18:dc:6a:47:08:a1:cf:90:
03:e1:b8:3b:88:5d:5c:31:4d:7d:3f:c2:9b:1f:53:
29:bc:25:fe:b2:fa:c5:ab:af:10:e7:06:64:65:0c:
c0:5f:c6:a1:76:b8:cd:d9:25:71:49:2c:86:05:b7:
8a:fe:a5:91:d3:8c:c7:09:7f:f8:7d:0b:f8:4b:68:
d8:3d:d1:ac:4e:f0:04:a2:0e:e4:71:fd:a1:de:1a:
cd:04:47:59:f2:e2:4d:b5:38:d6:c7:5b:ae:c2:e5:
cd:e0:ce:13:26:11:15:66:90:7c:89:c1:8a:2d:bd:
cb:f3:69:c9:0c:41:b5:11:ef:ca:79:5c:81:f7:e4:
dd:83:e5:b0:71:45:16:bc:42:77:26:c2:31:2d:77:
d6:b6:9a:0f:df:53:ce:9b:20:2a:13:8c:76:99:39:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D3:10:F5:F4:88:F6:44:37:DA:85:1F:2C:54:DF:F0:62:45:E6:90
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1-tMQ9fSI9kQ32oUfLFTf8GJF5pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dc:e9:6e:7c:a3:c8:b6:93:d2:a4:fa:c9:23:50:b2:37:be:
42:81:8e:fd:f0:c1:2e:ce:1e:35:43:8c:66:ee:d4:76:ce:ba:
66:b7:03:c0:14:85:69:5a:f4:4f:26:40:36:21:fd:db:6d:95:
52:7f:55:5d:d9:9c:48:1d:e7:cc:82:57:70:de:21:f5:87:57:
a8:dd:65:b5:43:0f:3f:9c:a6:b2:c0:c9:cc:7b:a2:5e:f7:3d:
a6:a8:a2:6d:e1:0b:c0:f2:19:a2:5e:7c:3e:d4:41:0c:ef:32:
61:ef:79:c1:2d:df:9a:eb:9e:d7:a6:d4:1e:c9:96:2a:98:0a:
bd:90:19:04:c5:d7:ac:10:38:ee:7b:86:a2:de:33:a9:30:1d:
f5:5e:c2:39:9b:07:74:cd:bd:47:86:06:45:2e:55:60:dd:61:
3c:88:46:a9:23:41:91:01:bb:77:7e:83:2b:f5:47:01:46:f1:
65:3c:3b:31:91:39:71:52:e0:88:99:86:19:a7:65:ac:ab:de:
cf:67:07:c5:7f:02:eb:74:13:34:69:86:c9:6f:5b:da:60:4a:
99:81:87:8d:8f:2f:47:04:3c:03:72:f3:a7:0f:d2:59:da:6a:
80:f1:ae:90:7a:bb:be:ee:24:af:9a:6a:2d:3c:f3:a7:2e:a7:
e8:62:0e:ab
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVx8RAB4CiUMQmNySQKuJ8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjMwMTAyMTAwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWQzMTBmNWY0ODhmNjQ0MzdkYTg1MWYyYzU0ZGZmMDYyNDVlNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfdly51MP4JryDFWmsXblNY3wtPB
ztrXyqgS1bJhza3v5ZdfeJjivntz4+wukacOslViaarGgIvmQQ9GQi/Q8KqNOZ92
WVyK7u9p5ChPxJ9QMOkri2xZahYzXjikPrbwGNxqRwihz5AD4bg7iF1cMU19P8Kb
H1MpvCX+svrFq68Q5wZkZQzAX8ahdrjN2SVxSSyGBbeK/qWR04zHCX/4fQv4S2jY
PdGsTvAEog7kcf2h3hrNBEdZ8uJNtTjWx1uuwuXN4M4TJhEVZpB8icGKLb3L82nJ
DEG1Ee/KeVyB9+Tdg+WwcUUWvEJ3JsIxLXfWtpoP31POmyAqE4x2mTkfRQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrTEPX0iPZEN9qFHyxU3/BiReaQMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvMS10TVE5ZlNJOWtRMzJvVWZMRlRmOEdKRjVwQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDIvOTU0ZDMxLWY3NGMtNDY3Yi05MDEzLWUxMmIxNjQyMTVi
OS8xL093bU9SZTlMdGRHTnZJYkZvVFgxZnJ5LUFGMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANR08jAN
BgkqhkiG9w0BAQsFAAOCAQEAftzpbnyjyLaT0qT6ySNQsje+QoGO/fDBLs4eNUOM
Zu7Uds66ZrcDwBSFaVr0TyZANiH9222VUn9VXdmcSB3nzIJXcN4h9YdXqN1ltUMP
P5ymssDJzHuiXvc9pqiibeELwPIZol58PtRBDO8yYe95wS3fmuue16bUHsmWKpgK
vZAZBMXXrBA47nuGot4zqTAd9V7COZsHdM29R4YGRS5VYN1hPIhGqSNBkQG7d36D
K/VHAUbxZTw7MZE5cVLgiJmGGadlrKvez2cHxX8C63QTNGmGyW9b2mBKmYGHjY8v
RwQ8A3Lzpw/SWdpqgPGukHq7vu4kr5pqLTzzpy6n6GIOqw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-fra.rpki-client.org