Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/zUaMfnQisa55tR3jcKjKRmpM4Nc.roa
File: zUaMfnQisa55tR3jcKjKRmpM4Nc.roa (raw, json)
Hash identifier: WMdMM9uh4kj9aEGQmCmmOQAcfRl862Otaww+WHNDHLs=
Subject key identifier: CD:46:8C:7E:74:22:B1:AE:79:B5:1D:E3:70:A8:CA:46:6A:4C:E0:D7
Certificate issuer: /CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Certificate serial: 01891AA9B8723BC864633CDBCF408E7028F0
Authority key identifier: BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/zUaMfnQisa55tR3jcKjKRmpM4Nc.roa
Signing time: Mon 03 Jul 2023 07:31:17 +0000
ROA not before: Mon 03 Jul 2023 07:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:a9:b8:72:3b:c8:64:63:3c:db:cf:40:8e:70:28:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Validity
Not Before: Jul 3 07:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd468c7e7422b1ae79b51de370a8ca466a4ce0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:44:8b:21:e5:8b:67:a3:bf:78:39:31:31:
7b:d5:e0:b4:60:48:23:e2:09:9a:0e:bf:51:84:8e:
14:bf:3f:d7:07:c4:7c:28:10:4c:cd:2a:b9:ad:26:
d6:40:f9:4e:e2:b0:27:a0:d9:36:88:ab:97:d5:40:
7e:81:1a:75:72:52:ec:ba:1a:e4:4c:dd:23:e8:10:
14:e0:69:e2:df:0b:b4:94:3e:42:f1:28:3e:3f:52:
5c:c3:a6:0f:0f:e1:fb:76:62:2c:27:ef:65:b3:2d:
c1:5b:cb:0d:b3:52:3e:cc:19:20:a0:10:95:e3:b2:
31:8c:64:62:bb:71:eb:b0:d2:57:97:cf:36:93:00:
c3:a9:b0:63:88:7b:4d:6e:df:6e:59:9b:d6:20:e3:
98:92:29:e9:78:76:ed:e8:e8:f6:c7:9c:67:a6:27:
38:48:a9:da:bb:ba:f6:e5:cf:37:8c:d5:45:2f:49:
a1:db:1a:e0:23:1c:31:fa:b0:c8:0f:d0:03:f0:b9:
59:3e:34:59:c5:69:ce:28:e6:42:63:8d:49:ec:0b:
cb:fe:d5:dc:ac:35:3b:6b:86:44:f9:b0:6e:0a:66:
ab:88:cf:60:5c:6f:64:4b:5b:e8:bc:17:55:72:e1:
5e:1d:24:e3:cb:34:ba:24:b9:e5:ce:4b:10:e9:67:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:8C:7E:74:22:B1:AE:79:B5:1D:E3:70:A8:CA:46:6A:4C:E0:D7
X509v3 Authority Key Identifier:
keyid:BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/zUaMfnQisa55tR3jcKjKRmpM4Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:47:a0:7f:46:17:31:f7:42:68:4f:f2:f1:53:c3:08:ae:64:
23:d3:2e:8e:61:cf:10:1c:cc:6b:6f:5c:b2:07:8a:2e:b3:fd:
d6:3c:f1:c8:d9:cb:c5:c6:70:8d:4e:5f:ed:3d:25:aa:74:96:
64:fb:8d:dc:53:54:ed:10:29:6b:62:33:8e:48:cd:1d:93:62:
01:a3:c8:6f:59:b7:65:50:6e:35:38:45:a6:6b:da:a3:86:01:
93:8b:67:11:5a:8f:66:64:a7:fa:81:0f:d5:5a:f1:0b:dc:f3:
ea:7b:22:f9:ed:69:9a:89:86:a0:8a:fe:d6:70:0a:8f:d9:98:
28:33:e4:2f:a1:10:a3:bf:c1:60:ea:0c:d3:c2:cf:e4:7f:58:
a6:12:3e:ff:e6:a3:56:b0:67:a5:4e:77:6b:b0:39:12:84:76:
fa:d5:b9:3c:b4:c6:fd:cf:09:ff:bc:0c:2f:2a:ae:3b:06:de:
0c:80:3a:c0:e2:6c:d7:28:1f:c8:0a:a3:c6:ef:cd:8a:69:46:
22:2c:91:47:08:3d:fc:e9:20:e7:0b:89:7d:02:18:19:de:93:
7d:31:01:0b:84:6c:21:e2:34:58:cc:e6:b6:0a:23:f2:72:9e:
51:60:e4:54:1a:59:76:30:95:2a:50:81:4a:28:d4:0f:66:a6:
1a:b9:81:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkaqbhyO8hkYzzbz0COcCjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOGM2NDM1MGEwZGZkNjhhMDQzYjIyMWYxODYwYjQ4MGFl
MzUyZGUwHhcNMjMwNzAzMDczMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQ2OGM3ZTc0MjJiMWFlNzliNTFkZTM3MGE4Y2E0NjZhNGNlMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnREiyHli2ejv3g5MTF71eC0YEgj
4gmaDr9RhI4Uvz/XB8R8KBBMzSq5rSbWQPlO4rAnoNk2iKuX1UB+gRp1clLsuhrk
TN0j6BAU4Gni3wu0lD5C8Sg+P1Jcw6YPD+H7dmIsJ+9lsy3BW8sNs1I+zBkgoBCV
47IxjGRiu3HrsNJXl882kwDDqbBjiHtNbt9uWZvWIOOYkinpeHbt6Oj2x5xnpic4
SKnau7r25c83jNVFL0mh2xrgIxwx+rDID9AD8LlZPjRZxWnOKOZCY41J7AvL/tXc
rDU7a4ZE+bBuCmariM9gXG9kS1vovBdVcuFeHSTjyzS6JLnlzksQ6WeBNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1GjH50IrGuebUd43CoykZqTODXMB8GA1UdIwQY
MBaAFL+MZDUKDf1ooEOyIfGGC0gK41LeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjR4a05Rb05fV2lnUTdJaDhZWUxTQXJqVXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80N2Y3NjgtZjdhMC00NTAwLWJjYTct
ZGQ5MTk1ODlhMjdmLzEvelVhTWZuUWlzYTU1dFIzamNLaktSbXBNNE5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80N2Y3NjgtZjdhMC00NTAwLWJjYTctZGQ5MTk1ODlhMjdm
LzEvdjR4a05Rb05fV2lnUTdJaDhZWUxTQXJqVXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfNMA0G
CSqGSIb3DQEBCwUAA4IBAQBtR6B/Rhcx90JoT/LxU8MIrmQj0y6OYc8QHMxrb1yy
B4ous/3WPPHI2cvFxnCNTl/tPSWqdJZk+43cU1TtEClrYjOOSM0dk2IBo8hvWbdl
UG41OEWma9qjhgGTi2cRWo9mZKf6gQ/VWvEL3PPqeyL57WmaiYagiv7WcAqP2Zgo
M+QvoRCjv8Fg6gzTws/kf1imEj7/5qNWsGelTndrsDkShHb61bk8tMb9zwn/vAwv
Kq47Bt4MgDrA4mzXKB/ICqPG782KaUYiLJFHCD386SDnC4l9AhgZ3pN9MQELhGwh
4jRYzOa2CiPycp5RYORUGll2MJUqUIFKKNQPZqYauYFN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:13 2024 by rpki-client on console-ams.rpki-client.org