Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/B9qEbZIBsukYN5jNUKhsauIX_3w.roa
File: B9qEbZIBsukYN5jNUKhsauIX_3w.roa (raw, json)
Hash identifier: h//f3hP7DQSsf1zZ2vjOISZLCuZQ+Qm/UrQRB+iNjmg=
Subject key identifier: 07:DA:84:6D:92:01:B2:E9:18:37:98:CD:50:A8:6C:6A:E2:17:FF:7C
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 018BEEBA31427F665D5393AB4EC6C4A9900F
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/B9qEbZIBsukYN5jNUKhsauIX_3w.roa
Signing time: Mon 20 Nov 2023 21:54:21 +0000
ROA not before: Mon 20 Nov 2023 21:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136744
IP address blocks: 212.23.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:ba:31:42:7f:66:5d:53:93:ab:4e:c6:c4:a9:90:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Nov 20 21:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07da846d9201b2e9183798cd50a86c6ae217ff7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:b8:3e:f5:41:e7:b4:75:2d:ac:36:51:3d:
32:cd:19:8e:37:b3:54:9b:1d:df:b6:a9:8f:21:02:
ed:19:f2:1a:14:37:ee:35:25:b6:0f:3f:a7:df:41:
5a:a8:01:34:c2:60:a1:33:96:ee:5e:69:2a:a4:e1:
55:6b:06:c0:b7:d9:e6:5b:4b:45:7b:c2:bc:9c:e2:
ad:5e:a1:30:ea:45:e2:b6:93:d0:94:72:b4:04:64:
c7:0a:ef:f6:5e:24:b9:a2:20:ff:4a:d1:f9:04:1a:
0d:2c:4c:6f:ab:30:8e:4d:cc:37:92:8b:d9:a7:88:
fa:7b:e2:d8:81:55:4a:e9:41:e2:29:33:b0:14:c1:
cf:b9:e0:90:70:c2:70:60:0a:62:82:ed:52:53:d9:
89:5d:4b:5e:4f:2b:b4:55:11:17:54:94:d6:92:60:
3e:6a:27:0e:66:16:74:05:0d:fa:f7:75:bd:a9:ff:
8c:9a:1a:cf:e9:5c:21:b8:a5:ce:1e:bd:b5:f7:c3:
ba:f2:d9:47:28:63:57:25:80:7c:fe:56:aa:0c:3d:
b9:1d:cf:dd:d7:6f:f9:a9:c3:74:d5:18:9c:29:07:
9b:6f:f9:7f:9f:c0:e2:fb:06:3e:8f:90:76:ec:e3:
4a:0c:f6:a4:fb:45:10:60:22:1b:69:db:8b:ad:18:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DA:84:6D:92:01:B2:E9:18:37:98:CD:50:A8:6C:6A:E2:17:FF:7C
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/B9qEbZIBsukYN5jNUKhsauIX_3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:22:5a:49:d3:cd:6e:36:97:9e:e2:3a:a5:af:7e:a1:e6:19:
23:16:c2:1b:c7:54:4c:15:88:b5:1a:09:72:e4:e9:9d:22:35:
be:7a:3c:1f:a5:33:b0:e3:8e:98:68:cc:cb:29:6b:f0:01:82:
6d:f6:d6:8e:7a:90:9d:2e:b3:97:2f:2b:31:0d:ac:d5:23:e2:
91:7f:2b:b2:13:fa:99:bb:dc:1d:41:4a:a6:8d:2f:a5:52:73:
f1:c4:b6:a5:87:0b:6c:60:df:af:af:78:c7:0e:8c:c0:bc:24:
7d:df:42:44:7f:c7:79:a2:d2:20:6c:d3:4d:fb:0c:a3:e3:df:
32:94:39:c1:db:08:f4:53:de:ac:c8:16:30:1d:15:5f:8f:1c:
7f:8b:b6:cb:a1:da:f1:29:97:75:37:4f:32:14:90:ec:4f:d4:
b8:80:20:f0:7b:0a:2f:c5:14:65:0c:ca:c7:77:6c:ad:eb:67:
bc:a7:e4:2d:cf:20:fb:24:e9:7a:b2:a1:41:4d:d5:2d:fa:d6:
4d:8e:b2:d9:6e:a0:7f:05:92:d1:b8:09:03:ce:60:2d:2b:0d:
1a:1a:1b:7f:ae:4b:a0:cd:ed:b5:2a:23:cc:d0:ce:8c:ff:e5:
cc:10:0b:67:52:ac:b4:2d:d1:46:47:fa:b9:5d:dc:50:56:fb:
60:4d:0a:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvuujFCf2ZdU5OrTsbEqZAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzczNGRmZWExMjA2NTc0MTJlYTg2N2RkYmM3Yjg0ZDEz
MmJmNzgwHhcNMjMxMTIwMjE1NDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2RhODQ2ZDkyMDFiMmU5MTgzNzk4Y2Q1MGE4NmM2YWUyMTdmZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLi4PvVB57R1Law2UT0yzRmON7NU
mx3ftqmPIQLtGfIaFDfuNSW2Dz+n30FaqAE0wmChM5buXmkqpOFVawbAt9nmW0tF
e8K8nOKtXqEw6kXitpPQlHK0BGTHCu/2XiS5oiD/StH5BBoNLExvqzCOTcw3kovZ
p4j6e+LYgVVK6UHiKTOwFMHPueCQcMJwYApigu1SU9mJXUteTyu0VREXVJTWkmA+
aicOZhZ0BQ3693W9qf+MmhrP6VwhuKXOHr2198O68tlHKGNXJYB8/laqDD25Hc/d
12/5qcN01RicKQebb/l/n8Di+wY+j5B27ONKDPak+0UQYCIbaduLrRhtYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfahG2SAbLpGDeYzVCobGriF/98MB8GA1UdIwQY
MBaAFH93NN/qEgZXQS6oZ928e4TRMr94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82ODAzMjQtZWUxZi00MGYyLTg4ZGYt
MTk2OTMxOTYyZDNjLzEvQjlxRWJaSUJzdWtZTjVqTlVLaHNhdUlYXzN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82ODAzMjQtZWUxZi00MGYyLTg4ZGYtMTk2OTMxOTYyZDNj
LzEvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfQMA0G
CSqGSIb3DQEBCwUAA4IBAQCxIlpJ081uNpee4jqlr36h5hkjFsIbx1RMFYi1Ggly
5OmdIjW+ejwfpTOw446YaMzLKWvwAYJt9taOepCdLrOXLysxDazVI+KRfyuyE/qZ
u9wdQUqmjS+lUnPxxLalhwtsYN+vr3jHDozAvCR930JEf8d5otIgbNNN+wyj498y
lDnB2wj0U96syBYwHRVfjxx/i7bLodrxKZd1N08yFJDsT9S4gCDwewovxRRlDMrH
d2yt62e8p+QtzyD7JOl6sqFBTdUt+tZNjrLZbqB/BZLRuAkDzmAtKw0aGht/rkug
ze21KiPM0M6M/+XMEAtnUqy0LdFGR/q5XdxQVvtgTQqL
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:32 2024 by rpki-client on console-ams.rpki-client.org