Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/me81LtUZKQGuJn3A3fsRKbErfpg.roa
File: me81LtUZKQGuJn3A3fsRKbErfpg.roa (raw, json)
Hash identifier: vQBet4XMPh8+dBzniYc/bSxLmEmq6g8Tl5GaCp8I3Q0=
Subject key identifier: 99:EF:35:2E:D5:19:29:01:AE:26:7D:C0:DD:FB:11:29:B1:2B:7E:98
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0189AD406CCA9E543A96951710CBDDCB8D44
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/me81LtUZKQGuJn3A3fsRKbErfpg.roa
Signing time: Mon 31 Jul 2023 18:40:27 +0000
ROA not before: Mon 31 Jul 2023 18:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:40:6c:ca:9e:54:3a:96:95:17:10:cb:dd:cb:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 31 18:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99ef352ed5192901ae267dc0ddfb1129b12b7e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:a9:94:17:fd:da:4a:c2:16:66:28:bc:c7:
4f:8f:31:14:6e:fb:4e:5e:6b:df:99:67:b7:ad:08:
46:a6:8a:16:32:03:ec:d1:86:f9:84:d4:ee:7e:b5:
a7:f3:ed:a6:b9:76:b1:d6:ac:61:0b:8a:f9:2c:69:
35:f6:f5:0b:d7:83:29:98:c8:4e:b3:8e:cb:c3:da:
0e:0b:fd:d6:04:88:5d:23:98:4a:a8:90:64:f2:a6:
5c:b3:14:20:c1:ec:e2:95:78:b5:68:8d:62:bb:04:
dc:1e:e8:d2:05:49:70:3b:50:85:69:7e:b8:5f:56:
df:77:ca:d9:9a:ce:23:78:d5:14:e6:44:d2:e4:6d:
39:e7:de:b1:d8:da:7d:0c:7b:ef:fe:4d:1f:44:97:
ae:6c:22:07:a1:2d:0c:75:7a:b2:34:72:7f:0c:ce:
f4:e4:8b:e5:33:66:0f:37:2a:c0:3b:9f:21:53:1e:
6b:06:fa:19:c0:c3:94:f4:71:9a:88:8d:86:3a:8e:
a4:d3:a5:68:7f:b2:c5:b9:f2:f3:45:ba:00:45:2b:
db:a1:99:9b:26:d4:7e:53:43:4a:49:11:23:ea:3b:
52:14:44:b0:55:0a:d7:87:da:a9:6b:cc:49:25:7f:
14:fb:9a:16:d9:46:83:80:33:f1:da:d4:a2:3d:1b:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:35:2E:D5:19:29:01:AE:26:7D:C0:DD:FB:11:29:B1:2B:7E:98
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/me81LtUZKQGuJn3A3fsRKbErfpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:a1:f8:8e:fc:79:81:0b:10:6c:d0:3f:75:8f:97:7b:0a:c2:
e9:7c:58:0b:c3:66:0b:9f:25:22:fa:2c:d8:9f:8a:0a:1c:dc:
50:73:2c:cd:f6:9a:3f:12:3b:fe:2b:7d:70:75:97:a3:c3:f3:
d3:bd:e1:e0:fd:6a:b8:c3:0d:a3:4c:3c:fa:89:63:53:4e:7f:
a1:80:d0:4c:bc:74:1d:22:ac:9b:80:8e:9c:bb:de:57:61:e9:
30:29:61:be:0c:78:52:20:1f:77:a9:5d:cb:31:2a:45:23:36:
56:82:62:8a:50:b6:5c:18:dc:6a:48:69:bf:7a:18:f6:d9:2a:
c9:96:bd:b3:ca:57:7d:b5:4a:f8:5c:4f:be:df:f0:5f:91:70:
f3:7c:3b:93:d2:a9:87:9f:fc:e8:52:4f:46:16:01:29:d5:84:
a0:79:46:5a:12:de:9a:08:cd:e6:71:59:2a:fe:95:b7:c2:11:
bb:a7:d9:f5:50:7b:c9:72:b6:ae:59:88:de:bc:bf:a1:c9:27:
f6:4f:54:55:33:f2:e3:47:99:7a:96:37:d2:5e:7d:13:48:3a:
b8:6f:df:00:6e:ea:c0:68:4d:3f:44:7a:be:39:f5:85:c8:da:
21:b3:74:29:0c:bf:d7:0e:02:b4:07:70:c1:cc:e3:21:b3:f8:
2c:7d:ca:52
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 8 19:02:05 2023 by rpki-client on console-fra.rpki-client.org