Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PE22vm7zGl4hQk76LH_62Y3HSEw.roa
File: PE22vm7zGl4hQk76LH_62Y3HSEw.roa (raw, json)
Hash identifier: LNwpv3ELfLebL2AS0BRdYUrk+lSXj6yhfLz4Q39OtTg=
Subject key identifier: 3C:4D:B6:BE:6E:F3:1A:5E:21:42:4E:FA:2C:7F:FA:D9:8D:C7:48:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E9F91054FA9534C140640F8195EAC9AF6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PE22vm7zGl4hQk76LH_62Y3HSEw.roa
Signing time: Tue 02 Apr 2024 16:07:45 +0000
ROA not before: Tue 02 Apr 2024 16:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197737
IP address blocks: 213.210.39.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 11:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:91:05:4f:a9:53:4c:14:06:40:f8:19:5e:ac:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 2 16:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c4db6be6ef31a5e21424efa2c7ffad98dc7484c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:ea:38:42:5d:a7:1b:0a:d8:79:9a:6a:a8:
28:ad:08:2c:82:08:4a:9e:71:fe:09:49:97:d6:88:
b7:d1:3f:5f:01:a2:ea:eb:70:56:96:cd:d5:8f:8c:
be:42:9d:fc:67:d6:13:52:4a:35:71:8e:b5:ee:fb:
6a:b4:c9:9b:29:1e:3e:24:51:99:52:47:26:3d:b4:
66:0b:da:b4:fb:da:d2:74:08:c9:7f:2c:00:aa:b3:
93:88:e6:a9:6c:30:3a:66:d3:a2:02:45:85:19:52:
7b:5b:c0:06:0c:59:9b:70:3d:9a:6f:6d:ff:d3:61:
4d:d2:ce:a7:ff:b5:03:a0:20:4c:60:0e:d8:1e:64:
5b:65:39:1f:9f:b5:2a:f0:ff:9c:dc:41:4a:a8:51:
44:3e:df:b7:3c:2f:28:41:ad:6d:7b:d8:26:2d:d7:
39:c9:b1:f5:7f:7d:0e:14:db:7f:ae:c5:35:89:46:
2b:cf:0a:07:a3:a8:ef:0f:af:f6:cc:c4:80:2b:7e:
94:07:4d:77:79:f8:a1:b5:0b:fb:96:2c:a6:c0:b0:
26:61:cf:51:a1:c7:0b:f5:77:f9:d9:db:ab:d6:65:
c1:59:8d:8c:ab:f3:eb:fd:26:56:da:ac:bc:99:9c:
aa:9d:26:62:8f:ac:98:1c:70:b5:e5:4c:7a:ae:ab:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:B6:BE:6E:F3:1A:5E:21:42:4E:FA:2C:7F:FA:D9:8D:C7:48:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PE22vm7zGl4hQk76LH_62Y3HSEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.39.0/24
217.145.68.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e5:f6:e9:4b:73:55:eb:41:de:81:4d:cc:85:fe:89:49:69:
4c:49:c7:69:89:ca:b5:22:8a:4d:7f:01:27:4e:96:8f:ca:02:
f7:15:5f:b9:f6:90:33:f7:09:e2:92:53:72:54:a7:b0:66:ed:
4f:13:b8:27:a0:55:21:14:2a:4c:70:61:55:b3:b7:7e:b7:df:
3c:74:b7:e4:d7:b8:1b:bc:08:5d:3d:43:c6:30:1a:5b:bf:77:
31:1e:19:03:ba:29:a5:cf:f9:7a:93:74:a6:40:af:aa:f0:ab:
92:2e:28:d5:fe:e7:c5:59:d0:80:ac:76:64:fe:d6:0a:92:6a:
2d:15:29:96:a6:c0:a1:9e:0a:3d:32:98:80:a4:b0:a3:17:e1:
2a:c0:67:41:d5:cd:22:c9:34:32:14:72:bd:07:96:09:23:ba:
cf:b3:7e:60:b2:d8:78:ec:61:d8:20:e0:6d:d8:ce:30:7b:25:
4f:ed:ef:b2:10:cc:fd:2a:4c:4b:5f:05:ab:13:91:eb:fd:bf:
51:8d:b0:d9:38:61:84:cc:20:9f:02:4b:cc:32:8a:0c:a0:69:
29:e3:b1:08:63:d0:fb:58:74:cc:51:ed:cb:28:60:d1:7e:ad:
bd:3a:fe:7b:52:a8:66:7c:b1:c7:60:fd:18:43:d2:97:00:58:
6a:09:a5:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6fkQVPqVNMFAZA+BlerJr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDAyMTYwNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzRkYjZiZTZlZjMxYTVlMjE0MjRlZmEyYzdmZmFkOThkYzc0ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnenqOEJdpxsK2HmaaqgorQgsgghK
nnH+CUmX1oi30T9fAaLq63BWls3Vj4y+Qp38Z9YTUko1cY617vtqtMmbKR4+JFGZ
UkcmPbRmC9q0+9rSdAjJfywAqrOTiOapbDA6ZtOiAkWFGVJ7W8AGDFmbcD2ab23/
02FN0s6n/7UDoCBMYA7YHmRbZTkfn7Uq8P+c3EFKqFFEPt+3PC8oQa1te9gmLdc5
ybH1f30OFNt/rsU1iUYrzwoHo6jvD6/2zMSAK36UB013efihtQv7liymwLAmYc9R
occL9Xf52dur1mXBWY2Mq/Pr/SZW2qy8mZyqnSZij6yYHHC15Ux6rqscnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDxNtr5u8xpeIUJO+ix/+tmNx0hMMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUEUyMnZtN3pHbDRoUWs3NkxIXzYyWTNIU0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1dInAwQB
2ZFEMA0GCSqGSIb3DQEBCwUAA4IBAQCc5fbpS3NV60HegU3Mhf6JSWlMScdpicq1
IopNfwEnTpaPygL3FV+59pAz9wniklNyVKewZu1PE7gnoFUhFCpMcGFVs7d+t988
dLfk17gbvAhdPUPGMBpbv3cxHhkDuimlz/l6k3SmQK+q8KuSLijV/ufFWdCArHZk
/tYKkmotFSmWpsChngo9MpiApLCjF+EqwGdB1c0iyTQyFHK9B5YJI7rPs35gsth4
7GHYIOBt2M4weyVP7e+yEMz9KkxLXwWrE5Hr/b9RjbDZOGGEzCCfAkvMMooMoGkp
47EIY9D7WHTMUe3LKGDRfq29Ov57UqhmfLHHYP0YQ9KXAFhqCaU3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org