Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/RJcJ-pnw95oZbdCyYoVTn-jVu58.roa
File: RJcJ-pnw95oZbdCyYoVTn-jVu58.roa (raw, json)
Hash identifier: ueebdcIVxxMd9CmonXdxru8G+8h7yCYSheZ5Wj9cId0=
Subject key identifier: 44:97:09:FA:99:F0:F7:9A:19:6D:D0:B2:62:85:53:9F:E8:D5:BB:9F
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0186979CE0445A6FF83E928398DD0C2E6FA4
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/RJcJ-pnw95oZbdCyYoVTn-jVu58.roa
Signing time: Tue 28 Feb 2023 10:41:25 +0000
ROA not before: Tue 28 Feb 2023 10:41:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50599
IP address blocks: 212.7.213.0/24 maxlen: 24
91.236.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:9c:e0:44:5a:6f:f8:3e:92:83:98:dd:0c:2e:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Feb 28 10:41:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=449709fa99f0f79a196dd0b26285539fe8d5bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:59:52:4d:7f:2f:9e:8d:81:f4:db:d0:47:
68:de:28:89:e6:f9:47:7c:d5:ad:59:7c:5f:53:6f:
cc:75:8a:9f:f5:1d:73:ee:2d:c5:f0:6e:e3:5d:d3:
98:61:02:56:f9:66:54:79:99:e8:6f:51:d3:9d:b0:
f1:58:51:66:4c:8f:6f:4f:c2:c7:97:c1:86:8f:bc:
30:15:85:eb:75:48:d5:fa:40:45:37:5c:62:bf:75:
7c:51:ad:eb:18:68:7d:30:3d:54:bc:0e:46:0c:03:
70:96:23:b3:c3:6c:bd:89:23:99:1b:7b:85:a8:f9:
65:4f:b7:5e:82:22:87:a1:9a:89:76:f0:34:5f:dd:
bc:7d:70:9a:5a:96:ed:b8:18:68:72:2b:84:c5:12:
c8:af:89:6b:1e:67:53:3e:cb:48:fa:60:1f:28:48:
ab:5a:cc:4a:1f:79:bc:4d:88:21:fe:7a:d8:b4:9d:
1e:75:71:b3:6d:c3:90:e1:22:c5:9c:ec:c2:93:0a:
e1:3a:c3:21:df:1f:c0:3b:0a:2f:72:62:04:c9:6e:
87:eb:d4:2c:06:a2:11:55:29:05:8f:92:a7:3b:00:
46:56:e6:e8:fa:4c:f6:60:da:d5:13:15:ef:5c:22:
97:ae:36:f5:d5:67:60:22:b2:51:76:12:83:be:e3:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:09:FA:99:F0:F7:9A:19:6D:D0:B2:62:85:53:9F:E8:D5:BB:9F
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/RJcJ-pnw95oZbdCyYoVTn-jVu58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.131.0/24
212.7.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:85:20:30:cb:5a:67:a1:24:6d:49:aa:dd:39:46:c3:66:b9:
1f:57:67:99:dd:c0:85:77:74:dc:7e:6a:67:12:66:82:27:98:
6e:01:c9:00:9b:97:91:14:11:a2:21:5a:d6:3c:25:94:24:ee:
ae:73:24:13:05:ba:be:77:20:1c:19:36:a0:f0:71:20:80:25:
24:39:6f:5e:55:87:e4:6a:78:0c:c0:82:21:f5:28:7a:b5:74:
3c:0d:d1:aa:3c:7e:00:5a:fe:8a:fc:ad:b0:7a:bc:f7:f0:47:
0b:07:86:1f:a7:77:ee:af:e8:68:88:1f:83:3f:52:f4:56:77:
ea:00:6a:55:94:45:37:76:52:b9:ce:93:c3:b7:db:67:e7:60:
b7:b6:93:ff:17:3d:e8:c6:e8:30:ce:56:ae:02:6b:41:22:35:
00:b2:81:77:9f:00:c0:dc:a4:aa:6f:04:bd:94:67:33:8d:98:
ab:a9:34:26:fe:c0:05:97:45:ef:bd:fe:6f:35:e4:fa:a6:4f:
a4:93:1e:b5:ed:13:ff:01:06:b9:39:e7:f6:46:4c:30:83:58:
7f:7d:f1:c2:21:6b:30:f1:32:6d:43:99:1e:17:4e:5e:49:9a:
eb:ba:6b:79:ad:c9:58:d6:30:23:e8:43:bf:47:a4:b6:6f:cb:
a1:77:61:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaXnOBEWm/4PpKDmN0MLm+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk
MjU0YjcwHhcNMjMwMjI4MTA0MTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDk3MDlmYTk5ZjBmNzlhMTk2ZGQwYjI2Mjg1NTM5ZmU4ZDViYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI5ZUk1/L56NgfTb0Edo3iiJ5vlH
fNWtWXxfU2/MdYqf9R1z7i3F8G7jXdOYYQJW+WZUeZnob1HTnbDxWFFmTI9vT8LH
l8GGj7wwFYXrdUjV+kBFN1xiv3V8Ua3rGGh9MD1UvA5GDANwliOzw2y9iSOZG3uF
qPllT7degiKHoZqJdvA0X928fXCaWpbtuBhociuExRLIr4lrHmdTPstI+mAfKEir
WsxKH3m8TYgh/nrYtJ0edXGzbcOQ4SLFnOzCkwrhOsMh3x/AOwovcmIEyW6H69Qs
BqIRVSkFj5KnOwBGVubo+kz2YNrVExXvXCKXrjb11WdgIrJRdhKDvuPlXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFESXCfqZ8PeaGW3QsmKFU5/o1bufMB8GA1UdIwQY
MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt
YmYwNWFjYzgyYmQxLzEvUkpjSi1wbnc5NW9aYmRDeVlvVlRuLWpWdTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx
LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+yDAwQA
1AfVMA0GCSqGSIb3DQEBCwUAA4IBAQB/hSAwy1pnoSRtSardOUbDZrkfV2eZ3cCF
d3TcfmpnEmaCJ5huAckAm5eRFBGiIVrWPCWUJO6ucyQTBbq+dyAcGTag8HEggCUk
OW9eVYfkangMwIIh9Sh6tXQ8DdGqPH4AWv6K/K2werz38EcLB4Yfp3fur+hoiB+D
P1L0VnfqAGpVlEU3dlK5zpPDt9tn52C3tpP/Fz3oxugwzlauAmtBIjUAsoF3nwDA
3KSqbwS9lGczjZirqTQm/sAFl0Xvvf5vNeT6pk+kkx617RP/AQa5Oef2Rkwwg1h/
ffHCIWsw8TJtQ5keF05eSZrrumt5rclY1jAj6EO/R6S2b8uhd2Hz
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:08 2024 by rpki-client on console-fra.rpki-client.org