Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/1-CIm01KwA8UXGKbsFfFgruoNgcE.roa
File: 1-CIm01KwA8UXGKbsFfFgruoNgcE.roa (raw, json)
Hash identifier: OlP7Be8IQa+j2/jGr0J3GtYzrya1O2ZQKP5a7la6Xzw=
Subject key identifier: F8:22:26:D3:52:B0:03:C5:17:18:A6:EC:15:F1:60:AE:EA:0D:81:C1
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 0188B59F1B8D6E79857B0D17C1A16CFD8114
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/1-CIm01KwA8UXGKbsFfFgruoNgcE.roa
Signing time: Tue 13 Jun 2023 16:38:03 +0000
ROA not before: Tue 13 Jun 2023 16:38:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56958
IP address blocks: 201.46.112.0/23 maxlen: 24
178.211.133.0/24 maxlen: 24
2a12:d280::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Oct 2023 14:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:9f:1b:8d:6e:79:85:7b:0d:17:c1:a1:6c:fd:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jun 13 16:38:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f82226d352b003c51718a6ec15f160aeea0d81c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:c9:43:af:15:39:e5:de:0d:f9:54:b0:9d:
5c:5a:f4:d3:e3:cd:bd:3e:d2:56:fd:bc:0b:e2:2c:
40:ad:7b:ac:de:13:9a:3e:1d:4c:85:80:54:b9:84:
1c:be:a5:83:29:b9:6d:4c:46:ad:c0:48:34:1b:bc:
2e:7d:8e:a4:28:fb:01:df:01:d5:a4:06:7d:3b:0d:
5c:20:46:38:7e:8a:27:bc:ff:a5:37:f3:ce:3c:5b:
eb:dd:20:9a:8a:1f:5b:08:c3:82:bf:ef:14:7f:76:
a1:a0:8d:58:79:60:3d:93:60:41:2d:50:75:6d:c9:
2e:0a:e9:6c:ac:1c:1d:ad:6e:8c:e0:23:22:67:ee:
b6:b4:af:3f:04:d2:2e:fc:43:53:e2:85:c1:65:78:
a3:3b:50:9a:2c:86:3f:61:e3:be:db:dc:d8:04:c0:
9f:8b:7c:88:33:fd:51:73:fe:7f:2b:d6:06:a6:68:
a8:43:52:65:84:5b:67:e5:8a:b7:e1:12:79:8c:a7:
0e:43:49:91:78:cb:fd:a9:74:f4:79:fb:52:cb:3b:
40:a7:5a:c2:d9:3a:18:52:1b:9b:14:73:45:2b:35:
92:06:e8:72:c2:06:da:85:42:46:93:e3:06:97:64:
b1:ed:1b:c8:76:7f:77:a4:55:0a:a9:e0:8e:58:db:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:26:D3:52:B0:03:C5:17:18:A6:EC:15:F1:60:AE:EA:0D:81:C1
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/1-CIm01KwA8UXGKbsFfFgruoNgcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.133.0/24
201.46.112.0/23
IPv6:
2a12:d280::/29
Signature Algorithm: sha256WithRSAEncryption
35:f9:0d:ac:2f:c4:74:16:d1:c7:12:a3:4f:ac:db:2f:5b:d0:
c3:f7:af:f7:f6:23:da:bd:6c:05:cb:94:46:87:b3:f1:fb:34:
6c:d9:30:ed:0e:c8:e5:3e:1a:f0:45:99:6f:2a:cf:b3:ef:5f:
07:a1:33:8d:34:c7:b4:7d:81:4e:62:0d:ff:65:33:67:ac:8d:
28:07:74:26:98:db:e6:16:3d:d1:95:8c:ce:ce:71:94:34:8b:
08:f3:28:89:f6:36:cc:6f:ae:61:15:c6:f6:5d:a4:a2:87:ba:
34:6a:b3:3a:bd:41:c7:30:39:54:26:df:1b:ec:70:fe:92:35:
20:82:53:00:1f:0e:a5:d5:53:b7:b4:92:ed:9f:4f:ca:bc:12:
4f:ea:a8:4d:5a:e8:68:2a:d2:53:d3:48:84:8b:51:51:f7:b4:
28:3b:dd:7b:22:55:f5:42:0f:9b:d4:d8:bc:8a:46:12:2a:09:
02:8d:d8:bb:28:b0:b3:36:d2:ef:da:50:67:03:06:e7:00:82:
06:c6:0b:1c:b5:41:36:90:9c:bf:ab:08:12:90:a9:88:ae:0f:
c3:ad:e6:a9:1e:21:2a:43:4d:df:53:1f:31:3f:33:4e:50:b5:
10:ba:24:38:b2:4f:f3:4d:9f:cc:48:07:37:de:71:fa:16:02:
dd:a5:2a:f4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYi1nxuNbnmFew0XwaFs/YEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZWIzM2MyY2VmYjVkYTM0NjA3YjAwYjUwMDVlNDRiNzU1
MjRhMWYwHhcNMjMwNjEzMTYzODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODIyMjZkMzUyYjAwM2M1MTcxOGE2ZWMxNWYxNjBhZWVhMGQ4MWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8DJQ68VOeXeDflUsJ1cWvTT4829
PtJW/bwL4ixArXus3hOaPh1MhYBUuYQcvqWDKbltTEatwEg0G7wufY6kKPsB3wHV
pAZ9Ow1cIEY4foonvP+lN/POPFvr3SCaih9bCMOCv+8Uf3ahoI1YeWA9k2BBLVB1
bckuCulsrBwdrW6M4CMiZ+62tK8/BNIu/ENT4oXBZXijO1CaLIY/YeO+29zYBMCf
i3yIM/1Rc/5/K9YGpmioQ1JlhFtn5Yq34RJ5jKcOQ0mReMv9qXT0eftSyztAp1rC
2ToYUhubFHNFKzWSBuhywgbahUJGk+MGl2Sx7RvIdn93pFUKqeCOWNsANwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPgiJtNSsAPFFxim7BXxYK7qDYHBMB8GA1UdIwQY
MBaAFJjrM8LO+12jRgewC1AF5Et1UkofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYt
MjBjNGRjMWU0YTc3LzEvMS1DSW0wMUt3QThVWEdLYnNGZkZncnVvTmdjRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTYvNzZiMWQzLTRmZDktNDZjZi04M2U2LTIwYzRkYzFlNGE3
Ny8xL21Pc3p3czc3WGFOR0I3QUxVQVhrUzNWU1NoOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEALLThQME
AckucDANBAIAAjAHAwUDKhLSgDANBgkqhkiG9w0BAQsFAAOCAQEANfkNrC/EdBbR
xxKjT6zbL1vQw/ev9/Yj2r1sBcuURoez8fs0bNkw7Q7I5T4a8EWZbyrPs+9fB6Ez
jTTHtH2BTmIN/2UzZ6yNKAd0Jpjb5hY90ZWMzs5xlDSLCPMoifY2zG+uYRXG9l2k
ooe6NGqzOr1BxzA5VCbfG+xw/pI1IIJTAB8OpdVTt7SS7Z9PyrwST+qoTVroaCrS
U9NIhItRUfe0KDvdeyJV9UIPm9TYvIpGEioJAo3YuyiwszbS79pQZwMG5wCCBsYL
HLVBNpCcv6sIEpCpiK4Pw63mqR4hKkNN31MfMT8zTlC1ELokOLJP802fzEgHN95x
+hYC3aUq9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org