Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/468UeYfU61kYABLGsiRiFgMSzGA.roa
File: 468UeYfU61kYABLGsiRiFgMSzGA.roa (raw, json)
Hash identifier: 4NdF2L2pyshs1qwEdkNMHVYn9TDf81y49d4xhfeXMBA=
Subject key identifier: E3:AF:14:79:87:D4:EB:59:18:00:12:C6:B2:24:62:16:03:12:CC:60
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 01864CB53A2042D3145FF9AE344BB4C585D9
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/468UeYfU61kYABLGsiRiFgMSzGA.roa
Signing time: Mon 13 Feb 2023 21:36:30 +0000
ROA not before: Mon 13 Feb 2023 21:36:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42000
IP address blocks: 212.18.101.0/24 maxlen: 24
2a12:5c00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:b5:3a:20:42:d3:14:5f:f9:ae:34:4b:b4:c5:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Feb 13 21:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3af147987d4eb59180012c6b22462160312cc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:6e:38:55:68:00:0a:4b:16:82:97:59:5f:
82:2b:d9:3a:ac:ac:91:98:4c:60:d7:f5:ef:9f:11:
9f:08:65:af:df:3d:66:1e:49:26:10:a2:13:a5:11:
40:09:59:37:65:de:c8:2e:91:24:06:4c:03:0f:13:
98:0d:96:5a:f0:2e:c5:cd:55:80:29:60:5a:fb:8a:
e1:3f:ac:a5:65:14:82:3b:79:5c:d5:31:ab:3b:58:
01:b0:07:83:9f:0d:b8:55:75:5e:a0:82:4b:60:12:
b7:78:2f:95:fd:9b:f2:e7:64:fd:4f:23:1b:b0:3b:
43:df:41:e7:a8:89:63:5d:31:67:74:44:f7:74:95:
81:2d:af:84:08:d3:3c:a0:c8:9f:ab:3f:8f:f7:e4:
29:72:75:4d:ce:11:d7:53:28:49:5d:ab:c7:7d:6e:
41:f9:3c:34:6f:83:bc:42:c0:7e:e3:aa:40:d2:e5:
c2:4c:6e:8c:b7:a6:57:e2:c3:03:c7:c4:ac:a9:d3:
a4:91:65:03:74:46:15:93:f7:75:f3:8b:0b:67:83:
17:8b:8a:2f:0b:89:0d:f5:30:84:cd:b8:e1:0f:20:
ba:d5:24:16:26:98:2b:7c:f2:c2:13:49:a7:79:3e:
32:d0:45:8f:20:dd:3b:51:47:00:02:a7:a0:ba:0e:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:14:79:87:D4:EB:59:18:00:12:C6:B2:24:62:16:03:12:CC:60
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/468UeYfU61kYABLGsiRiFgMSzGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.101.0/24
IPv6:
2a12:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
62:9e:eb:04:31:24:9b:cf:76:18:9a:7b:9c:21:af:83:78:d0:
e4:92:b6:9f:57:9c:d2:84:a2:38:33:c8:42:82:ef:16:a8:d9:
73:59:a6:74:af:38:21:e6:5b:d7:54:cb:3d:69:15:71:7e:c7:
93:62:fa:c0:d9:88:30:a3:29:77:37:0b:91:1a:f7:09:3c:f8:
85:2a:4e:03:35:42:77:29:76:bb:f0:8b:30:14:b6:c0:a9:60:
f7:49:18:3e:74:40:76:df:f2:fa:1a:0f:81:8a:0e:2c:22:a4:
b6:ad:be:7d:50:8d:c9:31:0b:0c:b7:60:12:32:46:2d:3f:20:
39:00:a4:d6:9c:e6:68:c6:ff:59:1e:fe:65:76:1e:88:78:35:
b9:93:91:9f:df:77:7c:76:dc:fb:3f:29:8b:55:88:b6:db:87:
6c:1e:47:16:1b:98:fb:45:92:13:40:ad:5f:c0:78:8e:c7:86:
e8:8a:d5:d6:25:dd:99:21:40:1e:e0:99:bb:ef:d7:93:20:cf:
ec:f1:70:d5:0b:59:f9:25:41:3e:47:dc:c0:20:b6:49:a0:5b:
57:fc:f9:06:e9:65:14:22:6f:14:af:cb:c4:58:e1:6e:0c:e5:
6c:a7:41:0b:68:4d:64:48:42:f3:c2:24:b8:00:95:69:b9:f0:
63:ba:df:68
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYZMtTogQtMUX/muNEu0xYXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWY0Y2U5MTM5NjIxODFjZjdjOTM3NmRmYWI1YTIyNWQ2
ZTVhZWEwHhcNMjMwMjEzMjEzNjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2FmMTQ3OTg3ZDRlYjU5MTgwMDEyYzZiMjI0NjIxNjAzMTJjYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8FuOFVoAApLFoKXWV+CK9k6rKyR
mExg1/XvnxGfCGWv3z1mHkkmEKITpRFACVk3Zd7ILpEkBkwDDxOYDZZa8C7FzVWA
KWBa+4rhP6ylZRSCO3lc1TGrO1gBsAeDnw24VXVeoIJLYBK3eC+V/Zvy52T9TyMb
sDtD30HnqIljXTFndET3dJWBLa+ECNM8oMifqz+P9+QpcnVNzhHXUyhJXavHfW5B
+Tw0b4O8QsB+46pA0uXCTG6Mt6ZX4sMDx8SsqdOkkWUDdEYVk/d184sLZ4MXi4ov
C4kN9TCEzbjhDyC61SQWJpgrfPLCE0mneT4y0EWPIN07UUcAAqegug7HhwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOOvFHmH1OtZGAASxrIkYhYDEsxgMB8GA1UdIwQY
MBaAFIdfTOkTliGBz3yTdt+rWiJdblrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEt
MzhkZmVhZjJiNzEwLzEvNDY4VWVZZlU2MWtZQUJMR3NpUmlGZ01TekdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEtMzhkZmVhZjJiNzEw
LzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1BJlMA0E
AgACMAcDBQAqElwAMA0GCSqGSIb3DQEBCwUAA4IBAQBinusEMSSbz3YYmnucIa+D
eNDkkrafV5zShKI4M8hCgu8WqNlzWaZ0rzgh5lvXVMs9aRVxfseTYvrA2Ygwoyl3
NwuRGvcJPPiFKk4DNUJ3KXa78IswFLbAqWD3SRg+dEB23/L6Gg+Big4sIqS2rb59
UI3JMQsMt2ASMkYtPyA5AKTWnOZoxv9ZHv5ldh6IeDW5k5Gf33d8dtz7PymLVYi2
24dsHkcWG5j7RZITQK1fwHiOx4boitXWJd2ZIUAe4Jm779eTIM/s8XDVC1n5JUE+
R9zAILZJoFtX/PkG6WUUIm8Ur8vEWOFuDOVsp0ELaE1kSELzwiS4AJVpufBjut9o
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:22 2024 by rpki-client on console-ams.rpki-client.org