Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/iNxLArEeWKzl2V5waFLcnUggIuc.roa
File: iNxLArEeWKzl2V5waFLcnUggIuc.roa (raw, json)
Hash identifier: /c4/WqwyioN7Uq6gmVI/4Z1h2UmXlpxsJWEPzioEvPY=
Subject key identifier: 88:DC:4B:02:B1:1E:58:AC:E5:D9:5E:70:68:52:DC:9D:48:20:22:E7
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8B4CEFC1AD09E8662694E8E9D11C
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/iNxLArEeWKzl2V5waFLcnUggIuc.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60639
IP address blocks: 212.192.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8b:4c:ef:c1:ad:09:e8:66:26:94:e8:e9:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88dc4b02b11e58ace5d95e706852dc9d482022e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:4e:d2:99:e3:b1:0a:1a:40:6d:92:42:ec:
e4:5b:4d:4e:6a:9e:bf:a3:10:3f:2a:ed:0c:d0:e2:
a2:bb:f0:06:cf:2d:7b:0d:6b:17:cf:66:1d:e6:f9:
40:0a:6e:fa:f7:31:f6:cb:b9:ea:31:e2:42:25:a7:
36:af:65:75:87:6b:8e:0c:52:0b:f6:c3:06:df:17:
9e:65:98:26:16:da:62:a3:4e:f8:5f:f7:2a:ee:11:
ad:a7:18:f0:d1:54:47:1c:b1:5e:ae:31:bf:04:c3:
dd:34:5e:83:94:3d:e3:6d:5e:06:ca:b2:38:2c:f0:
23:7a:00:a8:f8:6c:b3:12:e4:a8:5c:b7:87:ee:f6:
5d:09:8f:02:5c:2f:1c:0a:76:25:d5:a2:6e:22:48:
67:52:a7:2e:da:92:22:34:f5:f6:0e:a0:ad:f9:be:
32:26:10:16:7e:83:6c:ac:0c:f8:7c:32:1d:af:0a:
71:38:16:b5:46:08:06:55:04:57:2c:7f:ce:a1:c8:
d3:a5:9d:c5:d8:f8:79:de:13:35:37:7c:c0:06:ec:
bc:92:53:24:d8:a4:4b:21:ba:03:97:38:10:ec:70:
93:4a:56:c5:8e:ac:4f:f0:03:1a:be:e0:16:0c:29:
95:9d:13:7a:2a:a6:08:da:d5:78:92:ee:23:a6:14:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:4B:02:B1:1E:58:AC:E5:D9:5E:70:68:52:DC:9D:48:20:22:E7
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/iNxLArEeWKzl2V5waFLcnUggIuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d7:c1:e7:e7:8e:e9:40:6a:d7:de:06:e4:11:1a:68:cd:dd:
14:48:bf:e9:f5:f2:35:c8:52:23:f7:6b:ac:dc:32:01:bb:ff:
e2:67:31:12:21:69:b8:a2:4e:e3:09:c7:57:ef:bc:a5:c2:3a:
a0:1c:96:a4:55:e3:ed:ac:08:e0:d1:32:57:78:60:7c:56:df:
2e:e9:04:4f:93:9a:1e:d1:8e:09:1e:1c:23:8d:a4:10:7a:6f:
5f:bb:71:06:f7:4f:10:e6:fb:06:5c:17:c7:ab:d6:35:db:63:
23:d1:6f:b8:eb:5f:74:0d:33:d3:08:9d:7e:1c:89:67:9a:38:
52:84:d9:2b:0b:7b:12:b4:25:92:2e:23:e8:3c:fc:46:51:87:
ff:06:56:fd:d4:a4:b8:6f:94:32:52:d1:5a:d3:93:bc:c7:3c:
86:a1:d8:a3:f7:c0:93:44:7f:15:a9:45:9d:9d:77:99:02:56:
29:d1:54:55:51:a2:88:2f:b2:15:c4:4f:4c:d6:79:b1:bc:4c:
31:a7:43:a7:58:ad:eb:6b:4e:eb:31:6d:ad:c6:56:91:68:86:
59:17:2b:b8:9e:ce:4f:af:46:23:da:94:0c:42:b3:ae:1c:53:
80:de:32:05:1a:f5:b7:34:c2:0d:bf:4c:c6:00:b5:fc:64:4f:
0e:8f:d4:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnotM78GtCehmJpTo6dEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMwMTAyMDgzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGRjNGIwMmIxMWU1OGFjZTVkOTVlNzA2ODUyZGM5ZDQ4MjAyMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHVO0pnjsQoaQG2SQuzkW01Oap6/
oxA/Ku0M0OKiu/AGzy17DWsXz2Yd5vlACm769zH2y7nqMeJCJac2r2V1h2uODFIL
9sMG3xeeZZgmFtpio074X/cq7hGtpxjw0VRHHLFerjG/BMPdNF6DlD3jbV4GyrI4
LPAjegCo+GyzEuSoXLeH7vZdCY8CXC8cCnYl1aJuIkhnUqcu2pIiNPX2DqCt+b4y
JhAWfoNsrAz4fDIdrwpxOBa1RggGVQRXLH/OocjTpZ3F2Ph53hM1N3zABuy8klMk
2KRLIboDlzgQ7HCTSlbFjqxP8AMavuAWDCmVnRN6KqYI2tV4ku4jphR32wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjcSwKxHlis5dlecGhS3J1IICLnMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvaU54TEFyRWVXS3psMlY1d2FGTGNuVWdnSXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDNMA0G
CSqGSIb3DQEBCwUAA4IBAQCl18Hn547pQGrX3gbkERpozd0USL/p9fI1yFIj92us
3DIBu//iZzESIWm4ok7jCcdX77ylwjqgHJakVePtrAjg0TJXeGB8Vt8u6QRPk5oe
0Y4JHhwjjaQQem9fu3EG908Q5vsGXBfHq9Y122Mj0W+46190DTPTCJ1+HIlnmjhS
hNkrC3sStCWSLiPoPPxGUYf/Blb91KS4b5QyUtFa05O8xzyGodij98CTRH8VqUWd
nXeZAlYp0VRVUaKIL7IVxE9M1nmxvEwxp0OnWK3ra07rMW2txlaRaIZZFyu4ns5P
r0Yj2pQMQrOuHFOA3jIFGvW3NMINv0zGALX8ZE8Oj9TS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org