Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/SAqK1jjq6NyZj6rP2ms7uDWofpk.roa
File: SAqK1jjq6NyZj6rP2ms7uDWofpk.roa (raw, json)
Hash identifier: 9TwISK7RnewGdn7UhDzMJREGz9vhs+t//FNoDsb2XmU=
Subject key identifier: 48:0A:8A:D6:38:EA:E8:DC:99:8F:AA:CF:DA:6B:3B:B8:35:A8:7E:99
Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial: 0186D0C5626A5E9AE5D8A50DED47207D9CEB
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/SAqK1jjq6NyZj6rP2ms7uDWofpk.roa
Signing time: Sat 11 Mar 2023 13:04:01 +0000
ROA not before: Sat 11 Mar 2023 13:04:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212688
IP address blocks: 212.24.125.0/24 maxlen: 24
2a11:28c0:1::/48 maxlen: 48
2a11:28c0:2::/48 maxlen: 48
2a11:28c0::/32 maxlen: 48
2a11:28c0::/48 maxlen: 48
2001:67c:840::/48 maxlen: 48
2a11:28c0:acab::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:c5:62:6a:5e:9a:e5:d8:a5:0d:ed:47:20:7d:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
Validity
Not Before: Mar 11 13:04:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=480a8ad638eae8dc998faacfda6b3bb835a87e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:38:f3:dc:be:91:d8:6e:2d:c3:99:b8:b5:
16:a3:96:af:81:06:8c:e7:e8:af:9a:4e:1d:74:bf:
8b:dd:2a:3e:5f:e5:b2:62:88:e1:80:9a:35:5c:dd:
f3:56:9b:4f:8b:a9:fa:ff:63:71:80:69:67:98:d6:
f5:78:c0:04:8e:ce:39:f0:ec:f1:99:c0:19:6b:3a:
3d:7e:d2:4c:98:b7:49:c6:a4:e2:62:be:1a:6c:99:
cb:df:26:e6:8d:9d:07:fd:0b:e4:08:9e:dd:91:26:
03:d4:82:5b:95:ff:39:1d:7d:23:7a:46:27:0e:5e:
e2:26:55:05:7e:bd:45:f9:00:3d:ae:3a:e3:d9:7a:
4e:ac:96:32:1e:b7:b5:f4:24:84:1d:e3:70:71:a4:
df:43:ed:a0:1c:ea:e6:0f:54:5c:e3:e8:9f:f4:a8:
aa:11:86:41:8a:dc:b4:5b:87:d8:d8:6c:a3:f3:60:
ea:cc:e3:06:9a:7f:dd:d4:ed:ca:5b:3a:35:34:3c:
65:17:6b:98:9e:b8:5c:37:e4:0b:34:37:bb:02:b9:
a9:55:54:21:0d:cd:73:50:50:10:be:97:1c:f4:1c:
cc:98:c0:f0:31:52:b7:99:33:3a:78:20:a1:d9:51:
50:3c:18:c8:11:c5:82:d0:f7:a6:b9:cc:3b:57:5a:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0A:8A:D6:38:EA:E8:DC:99:8F:AA:CF:DA:6B:3B:B8:35:A8:7E:99
X509v3 Authority Key Identifier:
keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/SAqK1jjq6NyZj6rP2ms7uDWofpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.125.0/24
IPv6:
2001:67c:840::/48
2a11:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
52:0b:7a:c2:df:05:bb:c7:2c:14:40:ee:01:78:d8:ae:fe:42:
c1:47:60:26:8a:4b:b6:f2:ee:a7:2f:6a:c6:66:94:34:fe:63:
d5:2c:48:c8:fe:0c:29:a6:d0:a1:7e:91:0e:65:87:1b:a2:5e:
51:5a:a4:2d:d3:41:7d:a5:93:5a:40:a4:90:d0:95:c7:02:cc:
79:12:04:4d:dd:fe:69:d1:86:b5:0f:f8:bf:ef:ef:85:5c:06:
7d:c1:54:94:b5:c4:2d:66:53:be:79:39:90:80:68:76:46:0a:
df:89:07:27:50:4b:37:ea:0b:85:bf:c9:13:57:1c:d7:9a:12:
ee:4d:30:94:e3:26:ab:ab:21:73:c0:a8:cf:6b:ce:b5:10:34:
bf:c3:94:43:1b:0d:d1:f6:89:3e:49:d3:e0:c4:90:8f:76:c0:
28:04:f4:c8:8b:69:0d:85:66:a7:f7:30:34:1c:ba:a7:0f:e5:
34:a5:52:53:6d:24:44:6c:e6:dc:0f:40:83:54:e2:7b:56:65:
f2:7d:4e:7b:d6:70:97:d6:eb:52:ef:2b:19:82:0e:b7:5e:30:
13:1f:69:bc:c6:a6:23:67:20:ed:cd:e9:22:b9:ec:0a:51:f0:
fb:f4:9a:bf:c4:3a:27:38:34:7f:cf:2e:d9:f2:28:72:51:da:
48:69:ef:0b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYbQxWJqXprl2KUN7UcgfZzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy
YWI0M2YwHhcNMjMwMzExMTMwNDAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODBhOGFkNjM4ZWFlOGRjOTk4ZmFhY2ZkYTZiM2JiODM1YTg3ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil0489y+kdhuLcOZuLUWo5avgQaM
5+ivmk4ddL+L3So+X+WyYojhgJo1XN3zVptPi6n6/2NxgGlnmNb1eMAEjs458Ozx
mcAZazo9ftJMmLdJxqTiYr4abJnL3ybmjZ0H/QvkCJ7dkSYD1IJblf85HX0jekYn
Dl7iJlUFfr1F+QA9rjrj2XpOrJYyHre19CSEHeNwcaTfQ+2gHOrmD1Rc4+if9Kiq
EYZBity0W4fY2Gyj82DqzOMGmn/d1O3KWzo1NDxlF2uYnrhcN+QLNDe7ArmpVVQh
Dc1zUFAQvpcc9BzMmMDwMVK3mTM6eCCh2VFQPBjIEcWC0Pemucw7V1qyRwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEgKitY46ujcmY+qz9prO7g1qH6ZMB8GA1UdIwQY
MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt
OTVkNjBiM2U0NmNjLzEvU0FxSzFqanE2TnlaajZyUDJtczd1RFdvZnBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj
LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQA1Bh9MBYE
AgACMBADBwAgAQZ8CEADBQAqESjAMA0GCSqGSIb3DQEBCwUAA4IBAQBSC3rC3wW7
xywUQO4BeNiu/kLBR2Amiku28u6nL2rGZpQ0/mPVLEjI/gwpptChfpEOZYcbol5R
WqQt00F9pZNaQKSQ0JXHAsx5EgRN3f5p0Ya1D/i/7++FXAZ9wVSUtcQtZlO+eTmQ
gGh2RgrfiQcnUEs36guFv8kTVxzXmhLuTTCU4yarqyFzwKjPa861EDS/w5RDGw3R
9ok+SdPgxJCPdsAoBPTIi2kNhWan9zA0HLqnD+U0pVJTbSREbObcD0CDVOJ7VmXy
fU571nCX1utS7ysZgg63XjATH2m8xqYjZyDtzekiuewKUfD79Jq/xDonODR/zy7Z
8ihyUdpIae8L
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:25 2024 by rpki-client on console-ams.rpki-client.org