Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/tMBK9zjmAbC2KBqFzu150vj5vAY.roa
File: tMBK9zjmAbC2KBqFzu150vj5vAY.roa (raw, json)
Hash identifier: id6ERlOh+JCZ1L9vx2vGTAEmlNXveArZUxjzOhGC3HI=
Subject key identifier: B4:C0:4A:F7:38:E6:01:B0:B6:28:1A:85:CE:ED:79:D2:F8:F9:BC:06
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 01856D941E5CC307B62AD99DC5DABD8F17B8
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/tMBK9zjmAbC2KBqFzu150vj5vAY.roa
Signing time: Sun 01 Jan 2023 13:45:01 +0000
ROA not before: Sun 01 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51379
IP address blocks: 178.212.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:1e:5c:c3:07:b6:2a:d9:9d:c5:da:bd:8f:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Jan 1 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c04af738e601b0b6281a85ceed79d2f8f9bc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:3a:4c:e5:b9:e9:08:b9:4b:4b:81:0a:14:
dd:67:fb:f9:f1:97:69:65:00:4d:7b:b7:1b:3b:05:
23:f9:5e:ce:00:53:de:c3:05:98:7a:b9:69:ab:7c:
74:a9:91:4c:61:3d:8a:6e:27:cf:ee:b5:2c:d1:a4:
16:fd:80:66:17:75:69:65:44:6c:dd:74:30:4f:2b:
20:78:89:43:00:c9:4b:5f:bc:de:77:62:32:76:93:
fe:28:ea:02:db:51:b4:39:85:db:32:84:2c:d8:5e:
bc:76:0b:70:81:67:c9:23:07:b8:e4:4f:81:13:f6:
81:45:72:10:38:fc:96:60:ee:44:a2:db:fe:be:9e:
ae:eb:4d:52:be:09:fa:61:c5:53:8e:74:51:0c:fc:
9b:ac:cb:10:e5:16:7d:6b:d8:16:7a:73:1e:5e:1b:
25:25:e4:c7:0b:b6:ac:6b:6d:ce:f1:e0:f7:00:2d:
21:a3:71:9c:62:3a:d3:95:bd:24:00:76:ac:b3:9b:
b0:41:93:b7:8d:06:4e:e6:05:7e:83:e7:97:0a:71:
4e:86:97:e6:d9:52:e6:1c:76:38:2f:fe:15:53:17:
3c:2c:e9:73:24:f1:db:f7:de:5c:c2:c1:f7:6b:32:
d1:1f:4e:4d:27:bc:7d:d6:d4:57:e5:ad:46:85:3f:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:4A:F7:38:E6:01:B0:B6:28:1A:85:CE:ED:79:D2:F8:F9:BC:06
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/tMBK9zjmAbC2KBqFzu150vj5vAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.112.0/21
Signature Algorithm: sha256WithRSAEncryption
29:b0:6b:15:54:9e:10:8b:95:dd:99:d2:af:0d:2f:0f:d3:85:
bb:99:80:eb:ee:ae:cb:e0:e1:f1:4b:05:fb:25:2d:2f:d9:51:
76:b4:88:fb:d8:99:b8:41:23:fd:62:fe:32:cf:08:e9:16:3c:
93:2d:15:f6:e4:a9:01:7a:a7:b3:ba:a3:07:5f:d7:73:62:ee:
d8:07:6b:94:0a:d6:d0:62:d1:d6:cf:cd:f5:ca:33:ba:92:b1:
be:92:4f:bf:4d:0c:9d:6e:96:da:38:26:96:71:56:89:e1:cc:
5b:00:46:06:f6:79:31:96:41:66:41:e1:6a:04:15:08:92:16:
dd:46:fb:57:69:c3:03:6b:97:b6:ac:23:86:71:ca:44:e0:14:
be:84:6b:eb:9d:23:72:db:5d:45:57:29:a0:5c:75:98:d5:b7:
69:94:75:bf:e7:8c:e8:9b:c6:30:fb:da:6a:92:42:93:19:4a:
15:8d:fe:ae:f1:89:3f:ce:40:10:96:8f:bc:5a:7e:13:e2:42:
ab:a4:80:2b:7f:cd:45:bd:5c:ca:30:a2:94:67:3e:5c:52:85:
bd:87:24:cd:c3:62:09:4d:32:9a:64:28:6e:41:aa:fd:a9:47:
28:2b:5e:b3:32:36:44:02:49:c8:15:a0:5f:48:a2:f6:c2:fb:
ac:a2:87:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlB5cwwe2Ktmdxdq9jxe4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTcyNDVkNzgwNzg5ODVjMTQ3ZGNjYmUwZWM2ZDE2OGRk
OTk4MmQwHhcNMjMwMTAxMTM0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGMwNGFmNzM4ZTYwMWIwYjYyODFhODVjZWVkNzlkMmY4ZjliYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte06TOW56Qi5S0uBChTdZ/v58Zdp
ZQBNe7cbOwUj+V7OAFPewwWYerlpq3x0qZFMYT2KbifP7rUs0aQW/YBmF3VpZURs
3XQwTysgeIlDAMlLX7zed2IydpP+KOoC21G0OYXbMoQs2F68dgtwgWfJIwe45E+B
E/aBRXIQOPyWYO5Eotv+vp6u601Svgn6YcVTjnRRDPybrMsQ5RZ9a9gWenMeXhsl
JeTHC7asa23O8eD3AC0ho3GcYjrTlb0kAHass5uwQZO3jQZO5gV+g+eXCnFOhpfm
2VLmHHY4L/4VUxc8LOlzJPHb995cwsH3azLRH05NJ7x91tRX5a1GhT+sfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTASvc45gGwtigahc7tedL4+bwGMB8GA1UdIwQY
MBaAFFeXJF14B4mFwUfcy+DsbRaN2ZgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUt
NzNlMzhjY2UxMzgzLzEvdE1CSzl6am1BYkMyS0JxRnp1MTUwdmo1dkFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUtNzNlMzhjY2UxMzgz
LzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstRwMA0G
CSqGSIb3DQEBCwUAA4IBAQApsGsVVJ4Qi5XdmdKvDS8P04W7mYDr7q7L4OHxSwX7
JS0v2VF2tIj72Jm4QSP9Yv4yzwjpFjyTLRX25KkBeqezuqMHX9dzYu7YB2uUCtbQ
YtHWz831yjO6krG+kk+/TQydbpbaOCaWcVaJ4cxbAEYG9nkxlkFmQeFqBBUIkhbd
RvtXacMDa5e2rCOGccpE4BS+hGvrnSNy211FVymgXHWY1bdplHW/54zom8Yw+9pq
kkKTGUoVjf6u8Yk/zkAQlo+8Wn4T4kKrpIArf81FvVzKMKKUZz5cUoW9hyTNw2IJ
TTKaZChuQar9qUcoK16zMjZEAknIFaBfSKL2wvusoocV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:09 2024 by rpki-client on console-ams.rpki-client.org