Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/rZvM614fqocxjgYlUdRuZhE2Uwk.roa
File: rZvM614fqocxjgYlUdRuZhE2Uwk.roa (raw, json)
Hash identifier: SyTIsvvdpbAWfT+bLFlKn6lRswrgOmeOd5qt30AjLaY=
Subject key identifier: AD:9B:CC:EB:5E:1F:AA:87:31:8E:06:25:51:D4:6E:66:11:36:53:09
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4925230CFADADFF2EB480AC5BC5E235
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/rZvM614fqocxjgYlUdRuZhE2Uwk.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200361
IP address blocks: 212.21.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:52:30:cf:ad:ad:ff:2e:b4:80:ac:5b:c5:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad9bcceb5e1faa87318e062551d46e6611365309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:d5:94:1a:7c:7a:bf:02:19:b1:e1:d1:d1:
1d:05:8a:2a:54:e3:14:31:a8:4a:c9:3c:0c:0a:a2:
5f:1f:e6:03:be:2e:d5:1d:ae:d4:e7:43:22:e4:05:
4a:12:1b:78:19:27:be:3f:c9:73:1f:f0:a4:b3:d3:
a0:5c:bd:d3:1e:f9:3f:42:a0:e2:1d:44:fe:7b:f2:
a0:b2:95:fd:e4:dd:1e:a7:07:25:32:9c:74:8c:43:
66:51:b8:ac:1d:92:e2:2e:8f:8c:b1:da:b3:19:10:
ce:76:93:6c:11:2c:c7:ff:a8:cc:47:22:99:14:eb:
fc:4b:d3:89:a3:c1:f3:53:67:c7:44:1f:25:ad:b3:
89:9c:f6:7e:93:66:a5:c4:52:a9:d2:9c:c9:18:bf:
48:0e:9b:7d:6f:9d:0e:6a:25:2f:a3:67:37:46:af:
67:c6:7c:33:d1:5a:f2:b7:6b:34:3e:b4:4a:a5:a2:
06:65:b0:66:f5:0f:a1:5b:27:1d:d2:1d:f0:dc:d9:
c8:b9:57:0d:5b:cc:77:b4:c2:f8:fe:5f:e6:69:ae:
6c:15:c6:d2:8b:eb:c2:66:3d:f3:e4:42:7b:c4:40:
8a:14:f9:fa:ad:f2:d4:3b:d5:de:d6:37:fd:e8:ff:
b2:31:0c:56:5e:c3:8f:0f:0d:80:5d:cb:dd:e8:15:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9B:CC:EB:5E:1F:AA:87:31:8E:06:25:51:D4:6E:66:11:36:53:09
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/rZvM614fqocxjgYlUdRuZhE2Uwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:76:26:4f:10:3e:6b:69:2b:f4:a8:f5:f4:b7:7e:9d:07:0a:
99:a7:0f:32:73:60:85:9e:86:ae:7f:0c:87:08:3d:77:75:7a:
7f:07:f8:c5:54:21:d6:f6:b0:d8:55:e5:7c:7a:dc:fd:c8:5d:
da:2f:46:6d:54:47:8b:9d:f2:ed:0e:bb:57:94:9a:cb:0e:58:
c1:b1:41:7f:c2:0d:88:0d:40:bb:44:b4:50:27:e9:95:ff:59:
4f:a2:68:36:f3:51:38:cc:6d:b7:4f:5a:75:60:08:ec:17:18:
56:ca:36:03:cb:c7:76:13:b8:2a:88:09:f4:b8:9b:2a:88:9b:
0c:9e:d3:9d:04:cb:7c:eb:1f:a5:6a:1b:c8:1a:95:4d:d5:1d:
31:7e:91:80:3f:78:f4:82:72:e2:b6:22:d2:89:9c:26:e9:8a:
1f:8f:2a:c9:e8:9b:16:2a:b5:54:a5:31:9d:71:d3:3f:63:27:
ed:06:f5:21:f6:a9:e8:af:9c:41:65:43:2a:94:32:4f:8b:f5:
30:0c:91:0c:c2:64:c8:89:04:06:a2:a2:b5:69:ab:b2:84:4d:
e3:cf:df:6c:10:5a:9a:c7:0b:8a:3d:f0:4e:58:8e:cb:0c:51:
51:30:37:38:c3:c7:c7:98:72:e2:74:98:cd:8a:c6:57:6e:ba:
12:21:05:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEklIwz62t/y60gKxbxeI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjQwMTAxMTAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDliY2NlYjVlMWZhYTg3MzE4ZTA2MjU1MWQ0NmU2NjExMzY1MzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstbVlBp8er8CGbHh0dEdBYoqVOMU
MahKyTwMCqJfH+YDvi7VHa7U50Mi5AVKEht4GSe+P8lzH/Cks9OgXL3THvk/QqDi
HUT+e/KgspX95N0epwclMpx0jENmUbisHZLiLo+MsdqzGRDOdpNsESzH/6jMRyKZ
FOv8S9OJo8HzU2fHRB8lrbOJnPZ+k2alxFKp0pzJGL9IDpt9b50OaiUvo2c3Rq9n
xnwz0Vryt2s0PrRKpaIGZbBm9Q+hWycd0h3w3NnIuVcNW8x3tML4/l/maa5sFcbS
i+vCZj3z5EJ7xECKFPn6rfLUO9Xe1jf96P+yMQxWXsOPDw2AXcvd6BXNCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2bzOteH6qHMY4GJVHUbmYRNlMJMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvclp2TTYxNGZxb2N4amdZbFVkUnVaaEUyVXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BWGMA0G
CSqGSIb3DQEBCwUAA4IBAQA+diZPED5raSv0qPX0t36dBwqZpw8yc2CFnoaufwyH
CD13dXp/B/jFVCHW9rDYVeV8etz9yF3aL0ZtVEeLnfLtDrtXlJrLDljBsUF/wg2I
DUC7RLRQJ+mV/1lPomg281E4zG23T1p1YAjsFxhWyjYDy8d2E7gqiAn0uJsqiJsM
ntOdBMt86x+lahvIGpVN1R0xfpGAP3j0gnLitiLSiZwm6YofjyrJ6JsWKrVUpTGd
cdM/YyftBvUh9qnor5xBZUMqlDJPi/UwDJEMwmTIiQQGoqK1aauyhE3jz99sEFqa
xwuKPfBOWI7LDFFRMDc4w8fHmHLidJjNisZXbroSIQUW
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:57 2025 by rpki-client