Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/70_7uvZ_N0kgBlOxcM788gShx1k.roa
File: 70_7uvZ_N0kgBlOxcM788gShx1k.roa (raw, json)
Hash identifier: 3rchXmoICJnK+sEou+yhb7Q8wnIzrPgi4qxaTR1KPCo=
Subject key identifier: EF:4F:FB:BA:F6:7F:37:49:20:06:53:B1:70:CE:FC:F2:04:A1:C7:59
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 018571277791D26313B402B78E9DF9401D06
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/70_7uvZ_N0kgBlOxcM788gShx1k.roa
Signing time: Mon 02 Jan 2023 06:24:50 +0000
ROA not before: Mon 02 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210973
IP address blocks: 212.236.10.0/24 maxlen: 24
212.236.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:77:91:d2:63:13:b4:02:b7:8e:9d:f9:40:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 2 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef4ffbbaf67f3749200653b170cefcf204a1c759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:5b:27:37:9e:d3:ad:74:ca:ff:90:75:2b:
06:43:04:07:0d:a8:23:e1:cb:a2:a9:c7:7a:05:2f:
67:b1:17:48:72:5d:b3:7a:85:f9:f2:ff:98:35:b5:
b8:cb:f1:fd:13:9d:d1:01:52:1b:0e:40:12:52:de:
e5:98:a0:e9:79:2b:9d:1d:1f:16:fa:2c:14:15:38:
47:5a:d5:32:2b:29:ca:9f:46:5e:fc:33:73:15:0b:
c0:e2:15:0c:26:27:6d:a4:6f:8c:0e:08:82:c4:dd:
a4:72:07:7b:ee:9b:64:f9:d0:e6:b7:d7:b2:8b:c0:
18:86:3c:67:d3:a7:ab:0d:79:41:47:2b:35:8b:66:
b5:dd:b6:59:24:dd:03:07:09:56:46:83:e1:60:9e:
4a:71:11:3c:c4:37:bc:eb:fe:b8:0a:ca:91:b9:31:
1d:47:88:0b:a6:8f:56:e3:3e:53:1f:15:c1:1d:ff:
fb:05:94:0b:62:d4:1c:e5:98:95:05:d9:25:b8:68:
08:f0:d0:f9:8c:39:fb:22:6d:a1:1e:04:19:dc:84:
45:95:7e:7a:bc:4d:57:a0:03:d8:2a:f7:f7:de:c8:
66:b5:8a:d1:4a:3e:0d:e1:46:44:0c:bc:f9:74:03:
bb:31:8a:89:08:27:6f:c4:b2:8c:85:7a:54:ee:6f:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:FB:BA:F6:7F:37:49:20:06:53:B1:70:CE:FC:F2:04:A1:C7:59
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/70_7uvZ_N0kgBlOxcM788gShx1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.236.9.0-212.236.10.255
Signature Algorithm: sha256WithRSAEncryption
bc:f9:9e:13:8d:c6:26:62:3d:66:15:1d:d9:55:3c:4f:76:11:
32:ab:ab:fb:9e:6e:28:f8:3b:d6:da:81:55:c1:fa:0c:69:2a:
89:4f:93:03:a7:2b:41:1d:a6:22:e7:b6:6c:7d:27:c9:fc:09:
58:5c:60:57:20:95:d0:b4:0a:e1:30:7e:f1:58:0a:3b:a1:c5:
9c:52:e2:4a:1b:8b:6c:ab:85:29:02:63:3a:c8:b5:03:00:2d:
39:13:4b:0d:76:be:4b:23:e1:99:98:04:37:d7:ee:d3:84:84:
8b:a4:ad:be:a9:18:44:81:fb:00:bb:af:d6:cd:41:b5:04:04:
cc:2e:30:4d:d6:c7:33:7a:62:bf:99:b4:f8:a2:8a:08:d8:35:
3d:f3:2f:4a:22:4f:f7:80:2e:59:1e:f9:d8:1f:e0:79:e3:35:
02:4c:89:59:81:11:d6:1c:b7:ee:fc:75:08:a8:7a:46:fd:41:
19:de:4f:36:41:21:4f:91:07:34:c1:13:7c:67:aa:bc:26:e3:
ea:18:ba:c0:8d:da:d1:18:fd:77:19:cb:b0:72:a8:0b:db:1b:
9c:8d:51:67:94:f9:ff:b4:da:47:e6:db:c8:7f:2d:16:f8:2b:
83:fb:af:dc:0f:34:12:8b:ed:86:cd:97:09:e1:51:d4:df:ba:
cc:65:79:ed
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVxJ3eR0mMTtAK3jp35QB0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh
NzlhNWIwHhcNMjMwMTAyMDYyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjRmZmJiYWY2N2YzNzQ5MjAwNjUzYjE3MGNlZmNmMjA0YTFjNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYNbJzee0610yv+QdSsGQwQHDagj
4cuiqcd6BS9nsRdIcl2zeoX58v+YNbW4y/H9E53RAVIbDkASUt7lmKDpeSudHR8W
+iwUFThHWtUyKynKn0Ze/DNzFQvA4hUMJidtpG+MDgiCxN2kcgd77ptk+dDmt9ey
i8AYhjxn06erDXlBRys1i2a13bZZJN0DBwlWRoPhYJ5KcRE8xDe86/64CsqRuTEd
R4gLpo9W4z5THxXBHf/7BZQLYtQc5ZiVBdkluGgI8ND5jDn7Im2hHgQZ3IRFlX56
vE1XoAPYKvf33shmtYrRSj4N4UZEDLz5dAO7MYqJCCdvxLKMhXpU7m+SAQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFO9P+7r2fzdJIAZTsXDO/PIEocdZMB8GA1UdIwQY
MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt
MjI0ZjEwYTk4MWZlLzEvNzBfN3V2Wl9OMGtnQmxPeGNNNzg4Z1NoeDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl
LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADU7AkD
BADU7AowDQYJKoZIhvcNAQELBQADggEBALz5nhONxiZiPWYVHdlVPE92ETKrq/ue
bij4O9bagVXB+gxpKolPkwOnK0EdpiLntmx9J8n8CVhcYFcgldC0CuEwfvFYCjuh
xZxS4kobi2yrhSkCYzrItQMALTkTSw12vksj4ZmYBDfX7tOEhIukrb6pGESB+wC7
r9bNQbUEBMwuME3WxzN6Yr+ZtPiiigjYNT3zL0oiT/eALlke+dgf4HnjNQJMiVmB
EdYct+78dQioekb9QRneTzZBIU+RBzTBE3xnqrwm4+oYusCN2tEY/XcZy7ByqAvb
G5yNUWeU+f+02kfm28h/LRb4K4P7r9wPNBKL7YbNlwnhUdTfusxlee0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org