Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/iv0qdz-i0CbNw5deIZWkPZ5PoBA.roa
File: iv0qdz-i0CbNw5deIZWkPZ5PoBA.roa (raw, json)
Hash identifier: 0F5Ka86ZnjLtodABEr+Nl+QsW4sf3m1sItheZ6MxZYA=
Subject key identifier: 8A:FD:2A:77:3F:A2:D0:26:CD:C3:97:5E:21:95:A4:3D:9E:4F:A0:10
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 018692DFCBF6F88276FEEEB7495E9EB19281
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/iv0qdz-i0CbNw5deIZWkPZ5PoBA.roa
Signing time: Mon 27 Feb 2023 12:36:25 +0000
ROA not before: Mon 27 Feb 2023 12:36:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209848
IP address blocks: 213.190.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:df:cb:f6:f8:82:76:fe:ee:b7:49:5e:9e:b1:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Feb 27 12:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8afd2a773fa2d026cdc3975e2195a43d9e4fa010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:d9:e8:dc:76:db:28:4c:cc:76:b9:85:fb:
4f:a9:c3:e0:7c:2a:c5:91:9b:94:03:8d:b1:cf:e7:
c5:53:4a:6c:bc:f5:f8:37:44:ba:32:ab:a3:dc:f9:
2e:a8:a0:84:af:2e:3a:85:35:7d:26:0d:bc:a9:2b:
89:b1:75:b2:60:5e:70:07:11:39:57:40:86:98:c8:
08:7c:00:30:56:cc:40:da:70:04:97:5b:ca:1c:70:
9c:0c:7b:c9:6c:83:1b:e0:e5:a8:d0:02:47:af:db:
7b:5a:4c:18:45:c2:53:fa:96:d7:5d:8b:3c:bf:d1:
d9:1e:a3:2c:9e:c6:c4:7b:f9:cc:31:61:54:d8:33:
33:f0:48:27:af:45:d2:90:a6:23:a3:a0:06:0c:5c:
66:a4:ff:59:e7:d3:b1:1c:ab:f9:7a:85:43:93:fa:
ac:8d:5e:02:b5:71:52:07:ab:d9:63:ba:20:15:91:
e2:07:9c:6e:ab:fd:ac:47:94:de:b3:89:d4:25:a6:
a5:01:0b:17:75:17:29:ea:be:8c:d1:c0:c9:ec:5b:
a2:ca:9f:18:7d:1b:a8:37:96:d6:f4:2c:12:5d:7e:
32:65:4f:cc:4f:44:a9:e0:dc:dd:6a:a6:74:ae:78:
55:af:d4:45:25:7e:a9:39:85:45:3a:63:f2:14:63:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:2A:77:3F:A2:D0:26:CD:C3:97:5E:21:95:A4:3D:9E:4F:A0:10
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/iv0qdz-i0CbNw5deIZWkPZ5PoBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:0b:9e:e4:7b:24:fd:25:16:77:f6:19:9b:0d:0a:4c:c7:76:
73:e8:73:56:c4:7f:83:3d:99:f8:7b:7a:a5:14:66:90:21:49:
38:96:32:f0:24:b9:99:68:c0:4e:1c:3d:6d:4a:96:c3:d3:8f:
d7:25:27:82:50:4f:c3:da:9f:54:c3:2e:3d:2f:d2:3b:6f:70:
0f:ec:b9:43:28:40:00:47:8b:9f:bb:ab:e2:bb:36:f8:ed:79:
5e:75:9f:17:44:80:fe:12:4d:a1:bc:20:c6:ba:19:75:e3:4b:
cb:1c:f3:39:36:a0:38:e6:d2:6a:14:c0:b6:e4:57:53:d3:ec:
ec:70:dc:3d:db:a3:6d:d4:73:29:9a:c9:94:64:a7:ae:3f:7f:
57:ab:7b:f8:0e:37:44:d8:fc:49:d3:4a:f4:fb:bf:7b:1f:53:
76:ab:a3:d1:5e:27:2b:2c:18:22:d9:8e:c7:fe:c6:95:7e:5e:
d7:d1:4f:05:0b:d0:51:78:45:04:e9:07:29:0a:5e:52:98:84:
46:44:90:c1:f5:1d:94:ae:8e:f9:6d:10:94:0b:64:f0:37:6b:
7c:30:02:da:30:da:1c:35:78:6e:28:71:d0:96:7b:7f:5c:13:
ca:47:39:46:4d:1f:62:64:f1:9c:60:be:27:d4:77:d2:63:59:
7e:f0:00:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaS38v2+IJ2/u63SV6esZKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx
NTQyOTMwHhcNMjMwMjI3MTIzNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWZkMmE3NzNmYTJkMDI2Y2RjMzk3NWUyMTk1YTQzZDllNGZhMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi93Z6Nx22yhMzHa5hftPqcPgfCrF
kZuUA42xz+fFU0psvPX4N0S6Mquj3PkuqKCEry46hTV9Jg28qSuJsXWyYF5wBxE5
V0CGmMgIfAAwVsxA2nAEl1vKHHCcDHvJbIMb4OWo0AJHr9t7WkwYRcJT+pbXXYs8
v9HZHqMsnsbEe/nMMWFU2DMz8Egnr0XSkKYjo6AGDFxmpP9Z59OxHKv5eoVDk/qs
jV4CtXFSB6vZY7ogFZHiB5xuq/2sR5Tes4nUJaalAQsXdRcp6r6M0cDJ7Fuiyp8Y
fRuoN5bW9CwSXX4yZU/MT0Sp4NzdaqZ0rnhVr9RFJX6pOYVFOmPyFGNZzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIr9Knc/otAmzcOXXiGVpD2eT6AQMB8GA1UdIwQY
MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt
NTlkNjQ5YzBkYjVkLzEvaXYwcWR6LWkwQ2JOdzVkZUlaV2tQWjVQb0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk
LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1b4AMA0G
CSqGSIb3DQEBCwUAA4IBAQDAC57keyT9JRZ39hmbDQpMx3Zz6HNWxH+DPZn4e3ql
FGaQIUk4ljLwJLmZaMBOHD1tSpbD04/XJSeCUE/D2p9Uwy49L9I7b3AP7LlDKEAA
R4ufu6viuzb47XledZ8XRID+Ek2hvCDGuhl140vLHPM5NqA45tJqFMC25FdT0+zs
cNw926Nt1HMpmsmUZKeuP39Xq3v4DjdE2PxJ00r0+797H1N2q6PRXicrLBgi2Y7H
/saVfl7X0U8FC9BReEUE6QcpCl5SmIRGRJDB9R2Uro75bRCUC2TwN2t8MALaMNoc
NXhuKHHQlnt/XBPKRzlGTR9iZPGcYL4n1HfSY1l+8AD7
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:14 2024 by rpki-client on console-ams.rpki-client.org