Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/mdq1kW_dUqzOivUDZnQBH7z-hsM.roa
File: mdq1kW_dUqzOivUDZnQBH7z-hsM.roa (raw, json)
Hash identifier: n0L8AwI/DDP9/ex5cItK+2SrQw4IWnm2LOS6prRT07k=
Subject key identifier: 99:DA:B5:91:6F:DD:52:AC:CE:8A:F5:03:66:74:01:1F:BC:FE:86:C3
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0190E879CC65405F2EB419C67C890703230B
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/mdq1kW_dUqzOivUDZnQBH7z-hsM.roa
Signing time: Thu 25 Jul 2024 06:00:14 +0000
ROA not before: Thu 25 Jul 2024 06:00:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Aug 2024 03:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:79:cc:65:40:5f:2e:b4:19:c6:7c:89:07:03:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 25 06:00:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99dab5916fdd52acce8af5036674011fbcfe86c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ab:89:5a:d6:5b:73:eb:a9:f8:9b:f8:01:04:
4d:53:ed:83:8e:cd:1a:c1:27:b3:9a:03:70:57:49:
a5:2f:2e:e0:4b:8e:53:72:40:7e:6a:ea:10:12:f5:
59:c8:20:da:4b:68:3b:85:72:06:f8:e4:1d:71:11:
54:9b:47:60:00:8c:95:52:4c:6e:81:86:11:f6:a8:
b6:93:b7:8f:3c:76:8b:ba:ab:fb:01:c1:3d:db:83:
02:23:e6:4c:4a:b8:11:84:ed:3e:37:e6:55:bb:de:
70:cc:38:7e:02:96:73:a3:48:3a:1f:a6:f5:8a:46:
d7:c6:83:f3:93:3c:6f:a0:ff:44:51:c6:b6:9c:c4:
76:6d:b0:b8:0e:ea:95:0c:e5:7c:b3:9b:26:ed:5a:
65:16:8a:a2:81:3e:29:64:f3:f0:8e:0a:4f:dd:60:
9c:07:15:63:58:b3:48:e2:4f:0b:f2:b7:f1:b6:8a:
4d:77:9d:ea:3b:31:aa:94:ba:f3:f8:37:78:c0:a8:
06:e8:7f:b6:64:60:59:12:71:e5:9c:f4:3c:d5:4e:
9c:72:d4:91:52:a3:ec:28:d4:9e:da:ac:cc:58:fb:
1c:9b:6e:f8:35:72:85:5d:09:fa:7a:33:fb:da:b0:
8e:ca:f2:4b:4e:38:01:48:21:f9:7a:d2:20:78:64:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:B5:91:6F:DD:52:AC:CE:8A:F5:03:66:74:01:1F:BC:FE:86:C3
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/mdq1kW_dUqzOivUDZnQBH7z-hsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:53:d3:14:49:65:94:b7:07:20:21:0e:7e:71:87:70:63:b4:
5c:6f:ec:0c:51:84:e6:38:bd:94:ab:a1:63:ca:03:1d:22:fd:
9b:6e:a7:41:55:ea:28:ec:e5:33:b8:ff:d5:87:50:9b:6f:92:
e9:36:81:e6:1d:f3:0e:d3:eb:6d:66:25:f5:dc:81:29:0d:5d:
6a:35:df:c7:b2:50:3a:6d:85:dd:05:f2:4d:9f:0a:5b:71:7c:
a8:6d:2a:f3:97:94:91:b7:0b:d5:28:f5:86:5a:fa:43:3d:25:
05:70:bd:85:b0:23:9e:89:b3:b9:63:5a:db:02:22:e4:9d:7b:
1f:d5:e4:91:3e:35:54:f7:35:0f:d1:89:ba:1c:fb:56:e7:bd:
97:5a:6f:b0:81:90:bb:fe:b6:48:8f:58:ba:0c:93:f4:a3:0f:
2d:7f:b5:c0:b5:6f:22:36:c4:b4:43:c5:72:97:b6:94:8f:ed:
c5:1e:65:59:c7:d5:57:30:f4:31:b7:47:48:27:48:55:b7:84:
79:a2:75:5f:c9:c5:39:2c:ba:21:ce:02:0e:7d:a9:0b:f2:a4:
e4:7b:5f:67:60:94:ac:ce:3e:a9:4d:59:20:c9:46:2d:19:00:
d2:71:c8:62:43:64:59:e5:50:46:fb:49:25:72:fb:c5:7c:e3:
7e:a5:24:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDoecxlQF8utBnGfIkHAyMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjQwNzI1MDYwMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWRhYjU5MTZmZGQ1MmFjY2U4YWY1MDM2Njc0MDExZmJjZmU4NmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KuJWtZbc+up+Jv4AQRNU+2Djs0a
wSezmgNwV0mlLy7gS45TckB+auoQEvVZyCDaS2g7hXIG+OQdcRFUm0dgAIyVUkxu
gYYR9qi2k7ePPHaLuqv7AcE924MCI+ZMSrgRhO0+N+ZVu95wzDh+ApZzo0g6H6b1
ikbXxoPzkzxvoP9EUca2nMR2bbC4DuqVDOV8s5sm7VplFoqigT4pZPPwjgpP3WCc
BxVjWLNI4k8L8rfxtopNd53qOzGqlLrz+Dd4wKgG6H+2ZGBZEnHlnPQ81U6cctSR
UqPsKNSe2qzMWPscm274NXKFXQn6ejP72rCOyvJLTjgBSCH5etIgeGSfEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJnatZFv3VKszor1A2Z0AR+8/obDMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvbWRxMWtXX2RVcXpPaXZVRFpuUUJIN3otaHNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1HTkAwQC
1HTsMA0GCSqGSIb3DQEBCwUAA4IBAQAuU9MUSWWUtwcgIQ5+cYdwY7Rcb+wMUYTm
OL2Uq6FjygMdIv2bbqdBVeoo7OUzuP/Vh1Cbb5LpNoHmHfMO0+ttZiX13IEpDV1q
Nd/HslA6bYXdBfJNnwpbcXyobSrzl5SRtwvVKPWGWvpDPSUFcL2FsCOeibO5Y1rb
AiLknXsf1eSRPjVU9zUP0Ym6HPtW572XWm+wgZC7/rZIj1i6DJP0ow8tf7XAtW8i
NsS0Q8Vyl7aUj+3FHmVZx9VXMPQxt0dIJ0hVt4R5onVfycU5LLohzgIOfakL8qTk
e19nYJSszj6pTVkgyUYtGQDScchiQ2RZ5VBG+0klcvvFfON+pSRt
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:44 2025 by rpki-client