Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ca10a_nGwNwvX4tS9auOTrK0Nbw.roa
File: Ca10a_nGwNwvX4tS9auOTrK0Nbw.roa (raw, json)
Hash identifier: nBLDmttvgpXvFiZnBOASl2EiuA0KxdO6fwUE99S7hzg=
Subject key identifier: 09:AD:74:6B:F9:C6:C0:DC:2F:5F:8B:52:F5:AB:8E:4E:B2:B4:35:BC
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01870545B5FAFC40EB910EF625B12A218708
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ca10a_nGwNwvX4tS9auOTrK0Nbw.roa
Signing time: Tue 21 Mar 2023 17:44:27 +0000
ROA not before: Tue 21 Mar 2023 17:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60707
IP address blocks: 212.116.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:45:b5:fa:fc:40:eb:91:0e:f6:25:b1:2a:21:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 21 17:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ad746bf9c6c0dc2f5f8b52f5ab8e4eb2b435bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:cd:23:23:9e:40:1f:34:92:ed:ca:ee:a3:
4e:73:b5:e5:a2:2d:d9:76:e3:a7:84:38:20:30:3a:
a3:96:38:c8:f5:13:fd:bd:15:cf:75:14:a5:31:70:
c0:37:86:fb:5e:95:7c:3a:f8:d8:fd:a8:55:07:5c:
88:e9:a8:7b:bd:92:68:1c:21:4e:98:25:fa:4f:6c:
d6:e3:c1:2f:e6:0f:22:46:0e:05:73:57:08:5d:f5:
4d:74:92:6e:f1:02:d4:28:12:3e:ab:ea:25:a0:5f:
b5:24:b8:88:ec:de:42:42:a5:85:31:b7:9e:6d:cc:
04:4f:2f:69:6f:0b:92:24:71:30:8e:52:a1:0a:6e:
ae:39:01:40:b1:29:dd:50:f2:02:fa:a0:f1:01:d5:
fe:f2:d7:d3:8e:6e:bc:8c:9d:ca:0d:4c:a3:47:72:
eb:c0:b5:9b:dd:0c:d8:c1:47:9f:9d:03:8d:a1:d7:
9d:85:96:73:a9:6f:4d:52:21:4e:23:d0:e2:ca:09:
af:14:ff:ba:c3:61:f4:0e:01:5c:70:e3:17:1b:3c:
e0:10:1a:c9:e2:90:80:81:21:85:d7:f7:95:39:d4:
ed:b2:ef:cf:34:84:68:b8:0d:b3:22:0e:f9:76:4e:
e8:1f:0f:da:b1:e1:11:a7:bc:a8:03:67:54:82:ad:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:74:6B:F9:C6:C0:DC:2F:5F:8B:52:F5:AB:8E:4E:B2:B4:35:BC
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ca10a_nGwNwvX4tS9auOTrK0Nbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:aa:b6:35:22:af:86:a3:d8:31:d6:b8:3a:ea:b6:44:4a:4f:
60:a0:f6:1e:93:ea:d2:62:24:3d:b6:01:29:ce:f0:5a:00:87:
63:64:1c:ee:07:93:f7:38:10:b7:61:d3:2f:6e:ff:8b:92:0c:
b7:8a:71:57:fd:ab:09:b1:9c:99:87:c2:f1:0e:4e:0c:cd:5a:
e5:a3:bb:2c:8b:e0:1f:5c:07:86:55:97:22:f6:48:f9:ee:e1:
95:5f:32:ca:5c:94:f7:b3:67:f5:0a:d9:92:e4:1b:7f:69:99:
20:1a:a3:6f:a8:dd:f2:fa:7c:3b:5a:6b:02:e9:67:f9:f8:4a:
75:c2:21:74:75:40:23:1b:b6:30:3f:e7:03:b8:3f:3d:61:3f:
09:28:83:ce:ff:1c:da:c7:ee:49:93:97:54:18:64:9f:08:e6:
ad:f9:a7:9b:8b:5c:34:f7:0a:03:5e:a1:22:00:e6:0c:03:a1:
0f:8d:13:d0:22:96:d4:10:0d:ee:9e:3c:5f:1a:93:99:30:59:
2a:f7:2a:f9:65:e9:37:44:08:70:31:da:c3:cc:10:3d:86:bd:
cd:f1:63:4e:a2:b9:fb:95:5e:1a:c3:c5:b9:f0:f7:9e:79:06:
e4:09:a6:5f:51:8e:09:54:0d:e0:34:98:48:28:6b:ce:72:85:
fd:d6:b7:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcFRbX6/EDrkQ72JbEqIYcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjMwMzIxMTc0NDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWFkNzQ2YmY5YzZjMGRjMmY1ZjhiNTJmNWFiOGU0ZWIyYjQzNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrjNIyOeQB80ku3K7qNOc7Xloi3Z
duOnhDggMDqjljjI9RP9vRXPdRSlMXDAN4b7XpV8OvjY/ahVB1yI6ah7vZJoHCFO
mCX6T2zW48Ev5g8iRg4Fc1cIXfVNdJJu8QLUKBI+q+oloF+1JLiI7N5CQqWFMbee
bcwETy9pbwuSJHEwjlKhCm6uOQFAsSndUPIC+qDxAdX+8tfTjm68jJ3KDUyjR3Lr
wLWb3QzYwUefnQONodedhZZzqW9NUiFOI9DiygmvFP+6w2H0DgFccOMXGzzgEBrJ
4pCAgSGF1/eVOdTtsu/PNIRouA2zIg75dk7oHw/aseERp7yoA2dUgq1w+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmtdGv5xsDcL1+LUvWrjk6ytDW8MB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvQ2ExMGFfbkd3Tnd2WDR0UzlhdU9UckswTmJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTyMA0G
CSqGSIb3DQEBCwUAA4IBAQCOqrY1Iq+Go9gx1rg66rZESk9goPYek+rSYiQ9tgEp
zvBaAIdjZBzuB5P3OBC3YdMvbv+Lkgy3inFX/asJsZyZh8LxDk4MzVrlo7ssi+Af
XAeGVZci9kj57uGVXzLKXJT3s2f1CtmS5Bt/aZkgGqNvqN3y+nw7WmsC6Wf5+Ep1
wiF0dUAjG7YwP+cDuD89YT8JKIPO/xzax+5Jk5dUGGSfCOat+aebi1w09woDXqEi
AOYMA6EPjRPQIpbUEA3unjxfGpOZMFkq9yr5Zek3RAhwMdrDzBA9hr3N8WNOorn7
lV4aw8W58PeeeQbkCaZfUY4JVA3gNJhIKGvOcoX91rdt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-fra.rpki-client.org