Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lZTbCKhTT7GE_HDUgvGjDO1YLm8.roa
File: lZTbCKhTT7GE_HDUgvGjDO1YLm8.roa (raw, json)
Hash identifier: 2fmN5T/pmzAqjUpaxbIUs8Ql/n7YBpYJrrrQXaUoGmk=
Subject key identifier: 95:94:DB:08:A8:53:4F:B1:84:FC:70:D4:82:F1:A3:0C:ED:58:2E:6F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0187D7C1EDCD861E7624F54D9723DA778A4B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lZTbCKhTT7GE_HDUgvGjDO1YLm8.roa
Signing time: Mon 01 May 2023 14:40:23 +0000
ROA not before: Mon 01 May 2023 14:40:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.115.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 05:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:c1:ed:cd:86:1e:76:24:f5:4d:97:23:da:77:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 1 14:40:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9594db08a8534fb184fc70d482f1a30ced582e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:e5:e7:fb:04:17:e6:e9:9d:8f:27:99:f6:
fc:59:f9:cd:a2:bc:b5:17:de:21:93:e1:49:65:20:
db:b5:6b:fc:76:4a:d8:3f:b4:fd:d3:fd:e3:8b:9f:
9e:73:b5:19:75:83:02:44:e9:04:31:e2:55:a5:46:
8c:f4:06:bc:0e:6d:d2:d2:79:bd:93:95:95:79:4f:
5e:50:78:cd:a5:d5:ac:78:09:17:d4:59:06:a2:83:
21:05:0d:4b:54:2e:32:53:97:2d:d9:a5:7f:4c:04:
0d:6a:74:ab:70:bb:b0:f7:b5:a5:88:60:ee:98:08:
af:e7:95:74:67:c8:24:e3:50:2d:5a:55:97:5d:0e:
a4:38:68:71:ba:36:a6:aa:c8:84:d8:27:72:bc:0c:
af:94:16:0e:17:fb:cb:1c:66:37:91:09:80:12:cd:
6e:1d:22:ce:92:0e:c2:10:9a:4e:98:e5:4e:07:c5:
1b:5d:a4:a6:60:8d:2c:47:eb:81:ef:94:33:bc:8b:
32:cb:6a:c3:dd:24:17:48:6a:2a:e3:78:8f:43:bb:
0b:f0:27:5c:3e:d5:c8:8f:e2:7a:a3:9d:a1:52:4c:
ac:fc:1d:85:20:fb:d2:96:f2:4d:a1:85:ca:fa:2d:
88:5f:90:5a:28:0d:e6:31:81:34:8f:2e:f1:d8:ce:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:DB:08:A8:53:4F:B1:84:FC:70:D4:82:F1:A3:0C:ED:58:2E:6F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lZTbCKhTT7GE_HDUgvGjDO1YLm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/23
Signature Algorithm: sha256WithRSAEncryption
60:73:6d:f1:13:47:f4:50:2b:e5:24:b4:54:29:67:43:08:91:
cc:52:8b:d8:bf:82:c0:d2:49:4c:4c:88:1c:ba:81:d8:6d:b3:
27:fa:2a:99:7a:b2:c5:fb:c9:91:16:ed:66:a3:b2:1e:5a:cf:
ba:d0:67:93:a5:d0:59:6d:d7:d4:38:7c:13:23:e6:2d:6b:10:
f3:7a:c8:30:f3:04:5c:ff:ed:92:6b:04:34:cc:f9:ff:09:66:
6c:af:3c:bd:38:65:d9:56:56:8a:de:ef:1c:1c:00:52:97:39:
73:05:98:f1:dc:de:1c:61:9a:0f:a8:81:ce:96:d8:c7:52:fa:
72:53:f2:40:68:3f:87:2d:9f:dc:e3:84:55:7a:7f:33:5f:5b:
32:87:84:3f:74:99:0c:24:dc:30:ea:50:ed:09:89:55:36:dc:
ff:af:0a:c5:e3:c8:b3:2d:72:81:cb:e9:ec:c6:26:52:e9:67:
3e:13:89:65:4c:98:47:b9:bb:dc:ca:df:e9:12:82:51:ce:43:
13:19:45:84:9d:81:77:84:5b:43:3b:fc:a4:42:23:78:82:59:
30:83:92:b2:d1:4f:2c:01:ed:c5:e9:93:a3:d2:38:8a:4c:f2:
9f:59:33:5b:cb:e4:ca:aa:c2:7a:a0:fd:8e:bb:71:5a:67:84:
14:dd:01:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfXwe3Nhh52JPVNlyPad4pLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwNTAxMTQ0MDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTk0ZGIwOGE4NTM0ZmIxODRmYzcwZDQ4MmYxYTMwY2VkNTgyZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFPl5/sEF+bpnY8nmfb8WfnNory1
F94hk+FJZSDbtWv8dkrYP7T90/3ji5+ec7UZdYMCROkEMeJVpUaM9Aa8Dm3S0nm9
k5WVeU9eUHjNpdWseAkX1FkGooMhBQ1LVC4yU5ct2aV/TAQNanSrcLuw97WliGDu
mAiv55V0Z8gk41AtWlWXXQ6kOGhxujamqsiE2CdyvAyvlBYOF/vLHGY3kQmAEs1u
HSLOkg7CEJpOmOVOB8UbXaSmYI0sR+uB75QzvIsyy2rD3SQXSGoq43iPQ7sL8Cdc
PtXIj+J6o52hUkys/B2FIPvSlvJNoYXK+i2IX5BaKA3mMYE0jy7x2M7hDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWU2wioU0+xhPxw1ILxowztWC5vMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvbFpUYkNLaFRUN0dFX0hEVWd2R2pETzFZTG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HN8MA0G
CSqGSIb3DQEBCwUAA4IBAQBgc23xE0f0UCvlJLRUKWdDCJHMUovYv4LA0klMTIgc
uoHYbbMn+iqZerLF+8mRFu1mo7IeWs+60GeTpdBZbdfUOHwTI+YtaxDzesgw8wRc
/+2SawQ0zPn/CWZsrzy9OGXZVlaK3u8cHABSlzlzBZjx3N4cYZoPqIHOltjHUvpy
U/JAaD+HLZ/c44RVen8zX1syh4Q/dJkMJNww6lDtCYlVNtz/rwrF48izLXKBy+ns
xiZS6Wc+E4llTJhHubvcyt/pEoJRzkMTGUWEnYF3hFtDO/ykQiN4glkwg5Ky0U8s
Ae3F6ZOj0jiKTPKfWTNby+TKqsJ6oP2Ou3FaZ4QU3QFe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org