Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/qEE6ZEr1MuRUSgd1kb3FZdfLirc.roa
File: qEE6ZEr1MuRUSgd1kb3FZdfLirc.roa (raw, json)
Hash identifier: M7OerWCT4FFZFd5SzcyMgdrk1CX3eqxuybmYXKqqIEw=
Subject key identifier: A8:41:3A:64:4A:F5:32:E4:54:4A:07:75:91:BD:C5:65:D7:CB:8A:B7
Certificate issuer: /CN=d0ca153080e4a99ea858951152209829ef6d3b72
Certificate serial: 01856D5CE40A2D688D3584D0201802F57EEE
Authority key identifier: D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/qEE6ZEr1MuRUSgd1kb3FZdfLirc.roa
Signing time: Sun 01 Jan 2023 12:44:42 +0000
ROA not before: Sun 01 Jan 2023 12:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.52.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:e4:0a:2d:68:8d:35:84:d0:20:18:02:f5:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca153080e4a99ea858951152209829ef6d3b72
Validity
Not Before: Jan 1 12:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8413a644af532e4544a077591bdc565d7cb8ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:6c:7b:a5:21:3d:b2:f5:5b:91:dc:7f:f3:
82:ac:91:bb:da:23:2b:8f:5e:f4:bf:5e:8a:6b:55:
5e:0b:c0:31:5a:07:b9:26:3b:cd:d1:b1:64:b3:a7:
7b:4d:d9:7d:c0:a4:8c:b9:74:68:30:8f:3f:c9:57:
69:32:cc:1e:55:71:77:4c:14:54:20:ec:f2:17:bd:
0a:14:28:00:56:b4:68:a3:25:14:0e:71:11:1c:27:
47:21:68:f5:01:bc:c7:bc:96:c4:77:6e:c0:6e:14:
14:a7:59:44:45:14:de:65:c9:c1:28:10:82:21:18:
d1:a4:38:19:56:67:f0:9e:ef:06:dd:45:e1:70:8b:
53:1d:95:35:28:89:b1:c2:dd:59:ce:1a:08:90:4e:
e2:b1:53:48:4c:17:d8:f8:b4:68:6e:3e:57:fd:0a:
0d:a8:8f:b6:b7:39:ff:89:d3:99:5a:ee:d3:98:2f:
14:46:22:6a:62:ea:bb:28:cf:81:73:cb:80:73:db:
0e:e6:f9:c8:7d:1c:e6:73:8b:40:ce:ea:21:3f:a7:
22:20:4a:0d:82:28:ac:b8:c5:91:83:79:10:c7:ba:
15:ee:23:30:c0:4b:2d:d7:1a:b6:4d:a0:87:d5:32:
5e:7d:9e:84:3f:00:be:6d:75:67:7f:06:2b:4a:f1:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:3A:64:4A:F5:32:E4:54:4A:07:75:91:BD:C5:65:D7:CB:8A:B7
X509v3 Authority Key Identifier:
keyid:D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/qEE6ZEr1MuRUSgd1kb3FZdfLirc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:78:e8:e2:88:52:65:97:aa:77:e4:56:4a:77:2d:dd:ca:8a:
5b:a1:58:51:e3:48:ab:0e:ab:5c:3c:08:8c:7b:90:3c:17:71:
6a:8f:2c:7a:42:19:81:39:01:b4:04:bb:d0:4a:95:46:1b:90:
3f:7a:6a:cb:52:b4:61:82:4f:02:00:86:38:c6:eb:64:94:b5:
ef:16:95:75:0b:09:77:6e:23:01:b1:b1:b5:fb:95:d2:bf:ad:
6f:20:90:b6:eb:2c:9d:b6:9f:68:34:6f:30:1c:97:5e:7e:09:
7e:8c:b8:de:bc:95:d3:1e:6e:54:4d:76:0e:9f:f6:c5:47:5e:
2b:29:f7:75:01:64:01:07:4b:e7:ca:09:4d:01:8c:fe:0f:a8:
d7:21:11:18:d5:c5:1e:ae:44:f0:28:88:45:b9:28:7a:fe:6e:
8c:45:96:ff:c7:ee:b9:d5:3f:5c:c2:f8:0d:f8:0f:d5:ed:87:
dc:a0:5b:4a:e2:72:31:84:40:56:22:c3:68:1c:00:b1:0b:0e:
06:32:6a:59:68:37:0d:0b:c3:88:df:c6:70:7a:b2:66:bd:a0:
92:87:03:d7:a7:e6:74:f3:b1:ab:50:9b:f8:93:cf:99:dd:9e:
e8:fd:1c:f3:24:a8:6c:05:1a:9a:d8:a2:b6:38:f3:74:72:37:
27:e3:0f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXOQKLWiNNYTQIBgC9X7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2ExNTMwODBlNGE5OWVhODU4OTUxMTUyMjA5ODI5ZWY2
ZDNiNzIwHhcNMjMwMTAxMTI0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODQxM2E2NDRhZjUzMmU0NTQ0YTA3NzU5MWJkYzU2NWQ3Y2I4YWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuBse6UhPbL1W5Hcf/OCrJG72iMr
j170v16Ka1VeC8AxWge5JjvN0bFks6d7Tdl9wKSMuXRoMI8/yVdpMsweVXF3TBRU
IOzyF70KFCgAVrRooyUUDnERHCdHIWj1AbzHvJbEd27AbhQUp1lERRTeZcnBKBCC
IRjRpDgZVmfwnu8G3UXhcItTHZU1KImxwt1ZzhoIkE7isVNITBfY+LRobj5X/QoN
qI+2tzn/idOZWu7TmC8URiJqYuq7KM+Bc8uAc9sO5vnIfRzmc4tAzuohP6ciIEoN
giisuMWRg3kQx7oV7iMwwEst1xq2TaCH1TJefZ6EPwC+bXVnfwYrSvG79QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhBOmRK9TLkVEoHdZG9xWXXy4q3MB8GA1UdIwQY
MBaAFNDKFTCA5KmeqFiVEVIgmCnvbTtyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1vVk1JRGtxWjZvV0pVUlVpQ1lLZTl0TzNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yODhlZTItYzFkZC00ZDNmLWJkN2It
MDlkYzNlMjUzZGYxLzEvcUVFNlpFcjFNdVJVU2dkMWtiM0ZaZGZMaXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yODhlZTItYzFkZC00ZDNmLWJkN2ItMDlkYzNlMjUzZGYx
LzEvME1vVk1JRGtxWjZvV0pVUlVpQ1lLZTl0TzNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQLMA0G
CSqGSIb3DQEBCwUAA4IBAQAteOjiiFJll6p35FZKdy3dyopboVhR40irDqtcPAiM
e5A8F3Fqjyx6QhmBOQG0BLvQSpVGG5A/emrLUrRhgk8CAIY4xutklLXvFpV1Cwl3
biMBsbG1+5XSv61vIJC26yydtp9oNG8wHJdefgl+jLjevJXTHm5UTXYOn/bFR14r
Kfd1AWQBB0vnyglNAYz+D6jXIREY1cUerkTwKIhFuSh6/m6MRZb/x+651T9cwvgN
+A/V7YfcoFtK4nIxhEBWIsNoHACxCw4GMmpZaDcNC8OI38ZwerJmvaCShwPXp+Z0
87GrUJv4k8+Z3Z7o/RzzJKhsBRqa2KK2OPN0cjcn4w8R
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org