Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/fZZozXLhhUYEE8KMXiVSJJ9D_ik.roa
File: fZZozXLhhUYEE8KMXiVSJJ9D_ik.roa (raw, json)
Hash identifier: ps5EW5fxTMlLgcYfF3S1PSvoK8jHreDzBtS7C+JBC/Q=
Subject key identifier: 7D:96:68:CD:72:E1:85:46:04:13:C2:8C:5E:25:52:24:9F:43:FE:29
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 018571FA17566755B2654F223B80D896B1EF
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/fZZozXLhhUYEE8KMXiVSJJ9D_ik.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212941
IP address blocks: 212.225.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:17:56:67:55:b2:65:4f:22:3b:80:d8:96:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d9668cd72e185460413c28c5e2552249f43fe29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:1e:4d:fa:2d:a9:41:b1:f5:a2:87:77:65:
9b:f3:54:22:b0:25:57:61:8b:eb:d4:ae:8b:c2:ba:
a4:9e:72:a1:72:84:c0:a8:68:84:55:19:f6:f5:e8:
4c:e8:41:d8:15:b9:a6:b5:38:d1:64:44:ca:90:c9:
09:b8:df:5f:cd:ae:9f:20:c9:9c:a6:b7:fa:bd:7e:
d0:d6:52:08:f2:54:2f:de:16:24:2e:a9:a1:a1:de:
60:3a:a8:a6:35:1a:f5:ca:85:d9:e5:5f:8b:b8:8f:
ed:a9:6a:5a:9e:f1:bf:d0:72:dd:a8:f1:3f:32:dd:
fe:9f:3e:74:70:64:2b:96:62:35:ed:99:95:c9:39:
ac:66:5c:e1:73:6c:d6:7a:f4:98:31:9d:2f:cf:34:
00:83:f8:6c:f5:a0:d4:47:19:3d:f3:16:a6:c7:0f:
21:24:eb:28:41:df:39:dd:ce:37:83:0b:32:28:a3:
b9:59:b3:d8:59:57:b6:f5:2c:28:1e:f8:03:60:44:
42:48:93:09:d3:bc:11:88:c5:ef:f6:8b:a1:8e:a3:
5e:a7:9e:4b:32:d3:1d:4b:3e:12:ac:42:e7:7f:06:
02:73:44:f3:2a:fa:d1:46:58:ee:89:d2:22:37:54:
58:34:5f:de:dc:14:5b:6b:1b:89:48:0e:f8:7c:f5:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:68:CD:72:E1:85:46:04:13:C2:8C:5E:25:52:24:9F:43:FE:29
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/fZZozXLhhUYEE8KMXiVSJJ9D_ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.225.224.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a5:b5:62:80:bf:14:a1:df:d9:95:94:ed:a4:48:17:45:13:
14:d1:23:e5:56:44:59:0e:e2:e5:bc:4b:2a:18:f0:68:dc:3f:
97:71:eb:0d:a9:bb:5c:aa:14:b5:10:72:42:5c:95:7c:70:b8:
6d:de:8b:2e:78:7f:83:70:f2:14:a5:f9:b4:fe:fd:dd:8d:21:
36:77:4e:1d:4d:7d:84:63:7e:3b:1b:8d:5f:70:2b:d4:80:55:
a9:63:24:83:de:6a:31:16:47:09:35:e5:94:5b:a5:ba:d0:95:
19:64:71:eb:7e:be:fa:f5:03:f5:b0:d9:c4:b4:6d:61:ea:93:
e0:be:1a:6b:de:ab:8c:e0:72:01:8d:b6:64:6d:cf:ef:d9:11:
55:aa:b4:c5:e9:07:9f:f1:ac:e2:3f:26:43:0a:18:09:f9:73:
e1:b5:5d:bb:d1:ad:74:e1:a5:5d:01:f9:96:6f:f3:cf:9b:57:
59:78:73:5e:bd:8d:cd:58:bf:57:1d:89:db:22:f9:80:ce:3b:
23:34:5a:46:00:7e:0b:d6:6f:72:cc:ff:6c:f3:07:ce:66:62:
b3:c1:d6:94:68:9a:9a:a8:30:02:8c:4d:dc:35:a9:e7:66:23:
74:53:b9:9b:c7:63:d7:5c:a3:f0:76:11:6e:ce:a0:48:3f:bd:
6e:ee:50:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx+hdWZ1WyZU8iO4DYlrHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjMwMTAyMTAxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDk2NjhjZDcyZTE4NTQ2MDQxM2MyOGM1ZTI1NTIyNDlmNDNmZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tweTfotqUGx9aKHd2Wb81QisCVX
YYvr1K6LwrqknnKhcoTAqGiEVRn29ehM6EHYFbmmtTjRZETKkMkJuN9fza6fIMmc
prf6vX7Q1lII8lQv3hYkLqmhod5gOqimNRr1yoXZ5V+LuI/tqWpanvG/0HLdqPE/
Mt3+nz50cGQrlmI17ZmVyTmsZlzhc2zWevSYMZ0vzzQAg/hs9aDURxk98xamxw8h
JOsoQd853c43gwsyKKO5WbPYWVe29SwoHvgDYERCSJMJ07wRiMXv9ouhjqNep55L
MtMdSz4SrELnfwYCc0TzKvrRRljuidIiN1RYNF/e3BRbaxuJSA74fPUvEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2WaM1y4YVGBBPCjF4lUiSfQ/4pMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvZlpab3pYTGhoVVlFRThLTVhpVlNKSjlEX2lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OHgMA0G
CSqGSIb3DQEBCwUAA4IBAQBxpbVigL8Uod/ZlZTtpEgXRRMU0SPlVkRZDuLlvEsq
GPBo3D+XcesNqbtcqhS1EHJCXJV8cLht3osueH+DcPIUpfm0/v3djSE2d04dTX2E
Y347G41fcCvUgFWpYySD3moxFkcJNeWUW6W60JUZZHHrfr769QP1sNnEtG1h6pPg
vhpr3quM4HIBjbZkbc/v2RFVqrTF6Qef8aziPyZDChgJ+XPhtV270a104aVdAfmW
b/PPm1dZeHNevY3NWL9XHYnbIvmAzjsjNFpGAH4L1m9yzP9s8wfOZmKzwdaUaJqa
qDACjE3cNannZiN0U7mbx2PXXKPwdhFuzqBIP71u7lBU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:14 2024 by rpki-client on console-ams.rpki-client.org