Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/17ZBlpwCxqAjbULyBmNhXHF-hlM.roa
File: 17ZBlpwCxqAjbULyBmNhXHF-hlM.roa (raw, json)
Hash identifier: +axOkLIXgdJOBT3veh4jWhhusGLCc03FDFHp+xowZOs=
Subject key identifier: D7:B6:41:96:9C:02:C6:A0:23:6D:42:F2:06:63:61:5C:71:7E:86:53
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 01856D93D8ED2320F0F1E075B6308265C80C
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/17ZBlpwCxqAjbULyBmNhXHF-hlM.roa
Signing time: Sun 01 Jan 2023 13:44:43 +0000
ROA not before: Sun 01 Jan 2023 13:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49849
IP address blocks: 212.70.152.0/24 maxlen: 24
212.70.152.0/22 maxlen: 22
212.70.155.0/24 maxlen: 24
212.70.153.0/24 maxlen: 24
212.70.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d8:ed:23:20:f0:f1:e0:75:b6:30:82:65:c8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 13:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7b641969c02c6a0236d42f20663615c717e8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:4c:da:63:9b:be:3e:97:4f:7e:0e:77:87:
b2:2b:18:ad:af:e7:d0:34:92:77:55:7c:14:be:cb:
38:a3:44:52:27:3f:3f:ec:28:26:3f:f2:92:41:97:
a0:f1:b6:28:da:d0:6d:07:02:d4:5e:c5:7b:47:a3:
4e:22:52:2f:63:e5:d5:51:ad:b3:c7:43:3d:e9:e6:
69:a5:25:55:25:db:47:0f:f0:7e:59:cb:48:50:6e:
23:81:88:a9:3f:48:ff:d0:4f:63:b7:f7:c8:3e:45:
b9:85:3a:da:49:f7:12:bd:64:33:95:a7:3c:22:b7:
c6:b5:59:fe:47:a1:c9:72:25:a7:43:54:dd:c2:76:
ad:7f:87:4d:f3:0e:d0:41:d0:7d:67:6d:fe:6c:24:
6d:80:cb:08:77:2f:81:43:6b:58:12:c3:70:94:00:
8e:be:3b:cb:30:07:5f:30:63:9a:31:e3:b9:b9:88:
b4:cd:fc:20:dc:c7:f9:2c:7c:ba:ff:34:68:d9:ea:
fe:7d:ff:52:f8:b2:34:a0:9d:c5:76:13:ea:9b:5c:
63:8b:c3:c6:b4:44:23:ba:27:40:9f:eb:2a:ef:84:
fa:ca:72:43:69:62:eb:75:a0:f1:b8:d4:d5:c9:fd:
ad:79:b5:99:29:6d:b0:28:95:f7:3c:43:03:cf:39:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:41:96:9C:02:C6:A0:23:6D:42:F2:06:63:61:5C:71:7E:86:53
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/17ZBlpwCxqAjbULyBmNhXHF-hlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:36:a8:d4:e4:b1:2c:8e:dd:a2:04:7c:30:b6:52:fc:71:ea:
d9:12:46:2a:b9:25:15:b0:76:aa:52:64:34:b6:6b:e9:43:e3:
9f:1d:ef:b1:57:1e:03:d2:80:2b:76:eb:da:3a:e1:af:bc:b4:
77:6e:77:b4:11:de:7c:4c:33:a4:92:13:be:22:21:d0:f4:80:
4b:90:a6:37:0d:ad:70:e7:25:71:bd:1b:7f:ae:59:93:91:37:
7f:a8:10:34:89:ea:d7:6f:46:8f:1b:87:19:26:75:2d:85:86:
33:e8:f4:5d:46:f4:7e:8f:7f:a7:08:60:48:6a:07:f3:24:ae:
8a:d7:fb:50:7e:1e:a1:95:ec:71:2c:f7:06:49:41:e1:0d:c5:
a6:d2:1a:1c:14:1c:f7:51:4c:91:79:51:cf:02:c4:c8:f8:97:
2d:94:bc:9d:5c:cb:d9:4a:38:21:b6:52:1c:f2:67:7f:9b:c4:
b1:51:98:e4:da:2b:02:05:23:97:2f:a3:43:b7:e6:c9:26:a4:
ea:fb:db:ae:85:15:09:81:de:06:c8:63:ff:8d:f4:be:0d:bd:
b4:81:ed:dd:1b:60:ff:18:8b:5d:3c:4a:75:58:3d:49:91:a5:
8f:41:e9:a1:63:fa:a2:94:d9:d1:0a:6b:76:e1:f5:f3:d9:66:
2e:72:db:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtk9jtIyDw8eB1tjCCZcgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1
ZmY0ODUwHhcNMjMwMTAxMTM0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2I2NDE5NjljMDJjNmEwMjM2ZDQyZjIwNjYzNjE1YzcxN2U4NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouBM2mObvj6XT34Od4eyKxitr+fQ
NJJ3VXwUvss4o0RSJz8/7CgmP/KSQZeg8bYo2tBtBwLUXsV7R6NOIlIvY+XVUa2z
x0M96eZppSVVJdtHD/B+WctIUG4jgYipP0j/0E9jt/fIPkW5hTraSfcSvWQzlac8
IrfGtVn+R6HJciWnQ1Tdwnatf4dN8w7QQdB9Z23+bCRtgMsIdy+BQ2tYEsNwlACO
vjvLMAdfMGOaMeO5uYi0zfwg3Mf5LHy6/zRo2er+ff9S+LI0oJ3FdhPqm1xji8PG
tEQjuidAn+sq74T6ynJDaWLrdaDxuNTVyf2tebWZKW2wKJX3PEMDzzmBcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNe2QZacAsagI21C8gZjYVxxfoZTMB8GA1UdIwQY
MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt
NTdlMWQ1YjcyYjJkLzEvMTdaQmxwd0N4cUFqYlVMeUJtTmhYSEYtaGxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk
LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1EaYMA0G
CSqGSIb3DQEBCwUAA4IBAQBqNqjU5LEsjt2iBHwwtlL8cerZEkYquSUVsHaqUmQ0
tmvpQ+OfHe+xVx4D0oArduvaOuGvvLR3bne0Ed58TDOkkhO+IiHQ9IBLkKY3Da1w
5yVxvRt/rlmTkTd/qBA0ierXb0aPG4cZJnUthYYz6PRdRvR+j3+nCGBIagfzJK6K
1/tQfh6hlexxLPcGSUHhDcWm0hocFBz3UUyReVHPAsTI+JctlLydXMvZSjghtlIc
8md/m8SxUZjk2isCBSOXL6NDt+bJJqTq+9uuhRUJgd4GyGP/jfS+Db20ge3dG2D/
GItdPEp1WD1JkaWPQemhY/qilNnRCmt24fXz2WYucttS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org