Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/RMdb6lsnYeYvYQ630jd-81XnEdI.roa
File: RMdb6lsnYeYvYQ630jd-81XnEdI.roa (raw, json)
Hash identifier: BXqwzUHDrwGf5tTUBI0egxMpWpAF6D2q7BbD25l8vyI=
Subject key identifier: 44:C7:5B:EA:5B:27:61:E6:2F:61:0E:B7:D2:37:7E:F3:55:E7:11:D2
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCC653D5FD9B4DDA389FC248A052A5
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/RMdb6lsnYeYvYQ630jd-81XnEdI.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211708
IP address blocks: 212.22.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c6:53:d5:fd:9b:4d:da:38:9f:c2:48:a0:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44c75bea5b2761e62f610eb7d2377ef355e711d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:4b:34:f2:ce:cc:3f:d7:88:15:2b:c2:d7:
07:ec:50:ab:b8:e1:64:b2:c1:54:da:49:f0:b0:b2:
2e:1f:ad:f0:f4:1c:34:66:11:09:16:32:99:a8:13:
28:cb:93:0a:73:c1:23:06:3c:ea:df:d0:81:4c:2a:
8b:46:cd:cd:c5:27:75:c3:f4:47:02:90:40:5c:79:
21:69:93:91:ca:40:fa:0d:f9:57:94:7b:f2:d6:3d:
c3:cf:93:71:d4:99:c7:45:39:75:d9:41:f4:86:53:
96:df:f6:39:90:72:7f:1f:54:d0:0c:77:3c:1b:8d:
41:bd:e4:a8:77:a5:55:39:e3:a8:24:7f:68:32:e5:
fa:70:c9:b8:e9:f7:c2:68:27:b4:fa:ee:e9:01:7b:
e8:ae:e2:9c:88:65:ef:5d:ad:be:0c:6d:84:64:10:
78:2a:65:1a:c3:d5:bb:f8:8c:06:46:b3:e6:31:e7:
7b:50:39:bb:0c:64:9a:9d:38:1f:30:9d:01:6a:d8:
16:9b:64:75:f0:6a:88:19:ef:8b:2f:4e:1b:c2:b0:
9c:81:f9:e2:6c:54:51:7f:88:de:00:e0:25:ef:f5:
9b:f9:80:be:a4:db:7f:52:81:e2:34:dd:9f:84:1a:
da:fe:ef:7c:76:5c:a1:63:a0:9e:c4:11:8f:34:38:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:5B:EA:5B:27:61:E6:2F:61:0E:B7:D2:37:7E:F3:55:E7:11:D2
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/RMdb6lsnYeYvYQ630jd-81XnEdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:7e:69:a2:c5:d9:c7:3c:63:b2:f5:6d:63:aa:d3:35:81:
2c:78:1b:c2:fc:e2:b4:4f:70:f2:28:1d:72:7c:ac:ad:bf:96:
04:f1:14:a3:e1:e0:c2:b3:34:f4:00:b8:17:61:50:ba:bc:15:
7a:f6:4c:3e:84:77:54:c9:2f:93:ea:78:b5:87:cf:6d:70:f9:
d0:db:a5:d3:bf:16:52:a5:85:73:be:18:75:9f:bd:15:70:74:
9c:16:ed:19:af:6e:ed:2c:21:c6:f8:e8:fe:3d:58:da:9b:5d:
f5:2f:8b:f4:e1:11:4f:d6:de:1e:b4:e8:de:04:7b:00:95:de:
c0:63:96:e8:7f:66:28:a5:88:3c:e4:b4:51:bc:77:cb:d4:81:
e1:59:6f:38:36:b4:fa:5e:d2:a5:09:bb:6a:36:8e:da:4b:8d:
01:e2:1b:12:a1:97:39:2d:11:8c:59:cd:39:a0:7a:dc:9e:fb:
0b:2c:22:b1:69:14:76:46:67:79:14:14:03:9a:6a:59:5d:52:
e1:c5:23:2f:7c:72:0e:92:da:7f:80:da:6e:e1:d5:05:25:f4:
a5:ca:b1:6b:b1:f0:47:2e:67:4d:f4:ee:b6:a3:2f:f3:90:59:
f7:93:ac:d7:90:3d:ea:14:e8:70:51:4a:1d:e7:a9:d3:6b:07:
9b:46:fb:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3MZT1f2bTdo4n8JIoFKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQwMTAxMTYzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGM3NWJlYTViMjc2MWU2MmY2MTBlYjdkMjM3N2VmMzU1ZTcxMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlblLNPLOzD/XiBUrwtcH7FCruOFk
ssFU2knwsLIuH63w9Bw0ZhEJFjKZqBMoy5MKc8EjBjzq39CBTCqLRs3NxSd1w/RH
ApBAXHkhaZORykD6DflXlHvy1j3Dz5Nx1JnHRTl12UH0hlOW3/Y5kHJ/H1TQDHc8
G41BveSod6VVOeOoJH9oMuX6cMm46ffCaCe0+u7pAXvoruKciGXvXa2+DG2EZBB4
KmUaw9W7+IwGRrPmMed7UDm7DGSanTgfMJ0BatgWm2R18GqIGe+LL04bwrCcgfni
bFRRf4jeAOAl7/Wb+YC+pNt/UoHiNN2fhBra/u98dlyhY6CexBGPNDg1hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETHW+pbJ2HmL2EOt9I3fvNV5xHSMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvUk1kYjZsc25ZZVl2WVE2MzBqZC04MVhuRWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZYMA0G
CSqGSIb3DQEBCwUAA4IBAQA6OX5posXZxzxjsvVtY6rTNYEseBvC/OK0T3DyKB1y
fKytv5YE8RSj4eDCszT0ALgXYVC6vBV69kw+hHdUyS+T6ni1h89tcPnQ26XTvxZS
pYVzvhh1n70VcHScFu0Zr27tLCHG+Oj+PVjam131L4v04RFP1t4etOjeBHsAld7A
Y5bof2YopYg85LRRvHfL1IHhWW84NrT6XtKlCbtqNo7aS40B4hsSoZc5LRGMWc05
oHrcnvsLLCKxaRR2Rmd5FBQDmmpZXVLhxSMvfHIOktp/gNpu4dUFJfSlyrFrsfBH
LmdN9O62oy/zkFn3k6zXkD3qFOhwUUod56nTawebRvsW
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:21 2025 by rpki-client