Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/VcLjhzPy07WuPWwTasRrOcY5iQA.roa
File: VcLjhzPy07WuPWwTasRrOcY5iQA.roa (raw, json)
Hash identifier: ZmFtYDt/Bv5jYYLdIYER7n3Q6x96DiMJtzhvrZ211FM=
Subject key identifier: 55:C2:E3:87:33:F2:D3:B5:AE:3D:6C:13:6A:C4:6B:39:C6:39:89:00
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0190EF36802F245A960F00B3B5D7BBF6BA8D
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/VcLjhzPy07WuPWwTasRrOcY5iQA.roa
Signing time: Fri 26 Jul 2024 13:24:04 +0000
ROA not before: Fri 26 Jul 2024 13:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206048
IP address blocks: 212.7.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:36:80:2f:24:5a:96:0f:00:b3:b5:d7:bb:f6:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jul 26 13:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c2e38733f2d3b5ae3d6c136ac46b39c6398900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:49:c1:2f:f9:69:80:62:1d:5b:60:9d:46:7a:
50:e1:aa:4f:c6:e4:64:d7:89:ed:d5:53:13:35:ef:
ee:3b:9e:36:54:5c:cb:29:5a:ee:0a:66:02:19:45:
c2:e2:62:18:a3:ee:c2:d6:68:0f:a3:72:22:a8:4e:
1c:1f:1b:3d:63:eb:38:61:42:ef:45:a1:ea:c0:c1:
ef:be:e9:71:cb:73:4f:e3:02:77:43:9c:4c:fc:33:
6f:19:03:dc:7a:1b:2c:66:cd:ee:df:d5:2f:4b:67:
2c:67:ce:f4:06:bf:b9:eb:ae:0e:59:d0:f3:6c:38:
8a:1b:25:61:6d:33:55:09:2d:b6:c3:3c:28:fd:ce:
e4:f7:d4:71:8e:a9:7b:9c:2b:a7:58:0c:36:3e:fe:
bb:ee:b9:e4:46:9c:a6:b6:a4:99:74:f4:42:43:f5:
91:f7:39:9c:79:96:2e:c7:df:94:34:2b:30:3f:28:
06:92:15:e0:3c:c1:71:a4:8b:59:0d:54:3c:06:9a:
73:5f:07:ab:1a:bd:62:40:a8:81:7b:f2:35:b7:f0:
63:3a:9e:59:57:b0:7e:fd:86:85:b5:41:5d:b6:35:
32:6a:9b:95:b7:c8:b5:5b:72:17:8f:f6:ca:e1:83:
ee:29:4e:45:0c:6b:98:57:18:ad:9d:9d:e3:1c:5d:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:E3:87:33:F2:D3:B5:AE:3D:6C:13:6A:C4:6B:39:C6:39:89:00
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/VcLjhzPy07WuPWwTasRrOcY5iQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.215.0/24
Signature Algorithm: sha256WithRSAEncryption
05:23:da:6a:c4:2d:48:be:75:aa:51:20:34:72:c3:99:80:3b:
10:50:87:2f:ec:64:72:45:4a:5e:f8:0f:5c:b9:23:8c:0a:4b:
20:7c:60:4e:88:2a:f6:b8:3d:aa:69:13:06:f0:8a:24:b2:79:
96:9a:90:09:94:0a:98:12:d3:9d:f8:d3:15:6e:cb:6b:c1:2a:
4a:a9:46:ee:11:f9:91:e6:71:03:74:49:80:11:ae:38:55:c6:
e2:d2:44:f8:8b:84:0b:f1:fa:78:b8:fd:ae:18:80:0c:33:c0:
40:5f:15:76:f0:29:3f:c2:e8:3a:00:6b:c7:54:94:b8:e1:a3:
0b:63:c8:40:26:75:21:d3:4e:d0:38:f9:64:de:7b:e6:ac:84:
d6:a6:dc:30:6d:8c:6b:75:04:52:dd:bf:37:d0:e2:2b:26:26:
6b:55:08:1e:4b:4e:7e:c1:d8:78:f7:15:8a:3e:65:e5:1d:e4:
49:97:5c:b7:df:ba:03:40:ba:05:8f:68:e8:4f:38:9d:a7:7e:
b9:98:a0:db:88:7c:82:70:1c:52:fb:a9:6a:ff:fb:76:58:c7:
79:63:3b:87:88:96:9d:a7:46:ee:af:53:9a:6c:8f:3d:cb:38:
45:bf:eb:8d:1d:04:f4:d2:56:c0:9e:48:a3:b2:89:35:ac:1c:
de:a3:a4:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDvNoAvJFqWDwCztde79rqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk
MjU0YjcwHhcNMjQwNzI2MTMyNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWMyZTM4NzMzZjJkM2I1YWUzZDZjMTM2YWM0NmIzOWM2Mzk4OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UnBL/lpgGIdW2CdRnpQ4apPxuRk
14nt1VMTNe/uO542VFzLKVruCmYCGUXC4mIYo+7C1mgPo3IiqE4cHxs9Y+s4YULv
RaHqwMHvvulxy3NP4wJ3Q5xM/DNvGQPcehssZs3u39UvS2csZ870Br+5664OWdDz
bDiKGyVhbTNVCS22wzwo/c7k99Rxjql7nCunWAw2Pv677rnkRpymtqSZdPRCQ/WR
9zmceZYux9+UNCswPygGkhXgPMFxpItZDVQ8BppzXwerGr1iQKiBe/I1t/BjOp5Z
V7B+/YaFtUFdtjUyapuVt8i1W3IXj/bK4YPuKU5FDGuYVxitnZ3jHF0wxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXC44cz8tO1rj1sE2rEaznGOYkAMB8GA1UdIwQY
MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt
YmYwNWFjYzgyYmQxLzEvVmNMamh6UHkwN1d1UFd3VGFzUnJPY1k1aVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx
LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AfXMA0G
CSqGSIb3DQEBCwUAA4IBAQAFI9pqxC1IvnWqUSA0csOZgDsQUIcv7GRyRUpe+A9c
uSOMCksgfGBOiCr2uD2qaRMG8IoksnmWmpAJlAqYEtOd+NMVbstrwSpKqUbuEfmR
5nEDdEmAEa44Vcbi0kT4i4QL8fp4uP2uGIAMM8BAXxV28Ck/wug6AGvHVJS44aML
Y8hAJnUh007QOPlk3nvmrITWptwwbYxrdQRS3b830OIrJiZrVQgeS05+wdh49xWK
PmXlHeRJl1y337oDQLoFj2joTzidp365mKDbiHyCcBxS+6lq//t2WMd5YzuHiJad
p0bur1OabI89yzhFv+uNHQT00lbAnkijsok1rBzeo6Sq
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:32:22 2025 by rpki-client