Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/OEJWeWINWQi5RULKHoHuEiI-ba4.roa
File: OEJWeWINWQi5RULKHoHuEiI-ba4.roa (raw, json)
Hash identifier: KsnAX+gqQLMpYHWcX9u414UbNdO6NOEA6MnI/+ivOPs=
Subject key identifier: 38:42:56:79:62:0D:59:08:B9:45:42:CA:1E:81:EE:12:22:3E:6D:AE
Certificate issuer: /CN=9468fcc2176cf2c9ca67047aff769c7682bed1a4
Certificate serial: 01856FF03D64AA8076785433B9241AEB6F21
Authority key identifier: 94:68:FC:C2:17:6C:F2:C9:CA:67:04:7A:FF:76:9C:76:82:BE:D1:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGj8whds8snKZwR6_3acdoK-0aQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/OEJWeWINWQi5RULKHoHuEiI-ba4.roa
Signing time: Mon 02 Jan 2023 00:44:53 +0000
ROA not before: Mon 02 Jan 2023 00:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.18.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:3d:64:aa:80:76:78:54:33:b9:24:1a:eb:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9468fcc2176cf2c9ca67047aff769c7682bed1a4
Validity
Not Before: Jan 2 00:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38425679620d5908b94542ca1e81ee12223e6dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:0f:aa:82:ed:9c:09:fe:de:80:8d:d9:a5:
d5:b9:a4:0c:e6:99:bc:a1:95:69:bd:6b:e5:9d:bf:
61:2c:12:ff:c9:17:01:90:3e:aa:8e:04:68:d8:87:
fe:2a:d5:f8:0a:76:48:51:30:7a:42:4d:ab:bf:9d:
0c:2b:ed:d4:f8:b8:8b:2e:56:e0:b2:f5:2e:6d:06:
43:20:c7:d0:fa:d6:d0:ca:f9:4b:2f:db:5b:cc:c4:
8a:c2:ff:15:d8:05:af:06:6a:e9:44:78:47:61:a2:
82:a8:d0:63:21:df:f6:75:9d:3f:c7:fe:0f:38:47:
0f:26:53:4a:8f:e0:f5:ed:9e:e8:49:6c:05:4b:1b:
85:4c:5e:5d:ec:c6:f3:cb:f0:89:20:45:62:bf:79:
a8:26:85:63:7d:de:10:97:2d:8b:20:8c:4a:16:6e:
88:e1:cd:5f:ba:c7:8f:72:da:04:d6:2b:67:7a:22:
b5:f7:f3:46:f2:e5:19:34:aa:ec:52:66:f4:bf:dd:
8f:fe:3e:18:70:d6:e4:5d:c2:cb:c6:f1:ce:0c:b5:
cf:c8:2e:50:71:37:69:20:b9:b6:f3:15:7b:6f:2a:
97:c2:27:81:ea:3d:24:c8:f0:81:9f:57:6d:c4:68:
59:be:df:56:43:3d:e8:4c:d1:ea:d7:26:a3:84:a5:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:56:79:62:0D:59:08:B9:45:42:CA:1E:81:EE:12:22:3E:6D:AE
X509v3 Authority Key Identifier:
keyid:94:68:FC:C2:17:6C:F2:C9:CA:67:04:7A:FF:76:9C:76:82:BE:D1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGj8whds8snKZwR6_3acdoK-0aQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/OEJWeWINWQi5RULKHoHuEiI-ba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.106.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1c:4a:66:f2:5a:ef:ec:02:f2:d7:86:42:0a:c5:5a:dd:3d:
3e:52:89:e7:43:49:d2:db:ac:1f:19:a7:d8:35:6c:0c:0f:bf:
de:e1:b4:8e:01:fb:a2:91:a7:18:ce:b6:ad:e5:dd:52:29:0d:
9a:20:81:b8:06:60:33:45:a3:37:c1:de:2e:cc:2f:3d:72:cd:
9e:e4:92:e7:ad:fe:4e:d2:75:f6:c7:9b:72:fa:94:c3:7d:c1:
54:2c:cf:6b:52:8a:60:1f:e8:4a:82:24:01:c0:06:1a:bb:6c:
dc:d4:98:59:cb:40:ec:68:c8:72:ee:69:a4:a7:8d:b9:73:ce:
62:ee:84:77:a5:8f:7b:18:b9:b7:7e:a6:ad:b6:3d:f0:1c:a1:
ce:ff:1a:ef:51:8c:23:af:d9:56:1e:eb:59:ae:e2:18:a4:0f:
d2:53:7a:6b:24:32:06:c7:27:43:5c:60:89:3d:2e:31:b4:00:
c9:da:72:28:88:e6:28:7d:f8:08:29:75:12:b8:a2:3d:7a:9f:
e9:69:a2:dd:05:7e:c9:6d:54:97:05:fc:87:49:f8:ff:fa:f9:
9c:4a:0b:80:cc:e0:93:8f:c0:8f:98:fd:df:7e:36:f4:76:9c:
af:6d:0d:e6:07:c7:a5:c9:95:d6:a5:f5:ca:d0:fa:d5:60:14:
c7:be:27:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8D1kqoB2eFQzuSQa628hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjhmY2MyMTc2Y2YyYzljYTY3MDQ3YWZmNzY5Yzc2ODJi
ZWQxYTQwHhcNMjMwMTAyMDA0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQyNTY3OTYyMGQ1OTA4Yjk0NTQyY2ExZTgxZWUxMjIyM2U2ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSgPqoLtnAn+3oCN2aXVuaQM5pm8
oZVpvWvlnb9hLBL/yRcBkD6qjgRo2If+KtX4CnZIUTB6Qk2rv50MK+3U+LiLLlbg
svUubQZDIMfQ+tbQyvlLL9tbzMSKwv8V2AWvBmrpRHhHYaKCqNBjId/2dZ0/x/4P
OEcPJlNKj+D17Z7oSWwFSxuFTF5d7Mbzy/CJIEViv3moJoVjfd4Qly2LIIxKFm6I
4c1fusePctoE1itneiK19/NG8uUZNKrsUmb0v92P/j4YcNbkXcLLxvHODLXPyC5Q
cTdpILm28xV7byqXwieB6j0kyPCBn1dtxGhZvt9WQz3oTNHq1yajhKWSNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhCVnliDVkIuUVCyh6B7hIiPm2uMB8GA1UdIwQY
MBaAFJRo/MIXbPLJymcEev92nHaCvtGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdqOHdoZHM4c25LWndSNl8zYWNkb0stMGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80YzE2ZTktY2M4ZC00MzVlLWFkODEt
Y2QyZGU3N2IyYWU0LzEvT0VKV2VXSU5XUWk1UlVMS0hvSHVFaUktYmE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80YzE2ZTktY2M4ZC00MzVlLWFkODEtY2QyZGU3N2IyYWU0
LzEvbEdqOHdoZHM4c25LWndSNl8zYWNkb0stMGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BJqMA0G
CSqGSIb3DQEBCwUAA4IBAQBAHEpm8lrv7ALy14ZCCsVa3T0+UonnQ0nS26wfGafY
NWwMD7/e4bSOAfuikacYzrat5d1SKQ2aIIG4BmAzRaM3wd4uzC89cs2e5JLnrf5O
0nX2x5ty+pTDfcFULM9rUopgH+hKgiQBwAYau2zc1JhZy0DsaMhy7mmkp425c85i
7oR3pY97GLm3fqattj3wHKHO/xrvUYwjr9lWHutZruIYpA/SU3prJDIGxydDXGCJ
PS4xtADJ2nIoiOYoffgIKXUSuKI9ep/paaLdBX7JbVSXBfyHSfj/+vmcSguAzOCT
j8CPmP3ffjb0dpyvbQ3mB8elyZXWpfXK0PrVYBTHvieW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:08 2023 by rpki-client on console-fra.rpki-client.org