Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/_nzkRPbh04aifPPVaSpsyIgXmoA.roa
File: _nzkRPbh04aifPPVaSpsyIgXmoA.roa (raw, json)
Hash identifier: lJ7I3+O1/V8aa292+4Tqs4EjiZHkM41GENIxErNnS6s=
Subject key identifier: FE:7C:E4:44:F6:E1:D3:86:A2:7C:F3:D5:69:2A:6C:C8:88:17:9A:80
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01856D7872CA5B8A2AB838BAA0D2F49BE3D3
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/_nzkRPbh04aifPPVaSpsyIgXmoA.roa
Signing time: Sun 01 Jan 2023 13:14:48 +0000
ROA not before: Sun 01 Jan 2023 13:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49463
IP address blocks: 213.215.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:72:ca:5b:8a:2a:b8:38:ba:a0:d2:f4:9b:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 1 13:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7ce444f6e1d386a27cf3d5692a6cc888179a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:e3:e0:8f:65:83:1e:12:f3:ea:77:fc:51:
38:2c:b7:26:cf:56:7e:69:a6:c4:c3:ac:de:40:73:
83:f9:f3:16:73:72:17:e9:d7:91:c3:07:e0:0f:ae:
d9:1d:c5:33:69:92:8e:db:38:e1:2c:13:35:9f:9b:
3d:96:51:3f:c5:91:3b:5a:85:bf:61:b5:c3:54:b7:
35:ca:41:3a:4e:1e:2c:47:36:d6:4d:aa:18:b8:a1:
99:24:c1:21:cd:87:1f:f5:8b:c7:ae:90:6f:17:66:
59:6c:e8:f3:aa:11:77:7b:72:8f:d4:b1:26:52:5c:
f8:f3:80:a7:b7:2b:3b:92:27:9c:19:83:0a:e9:69:
ba:6d:69:3c:d5:7c:8b:91:ce:8a:0a:4e:80:65:21:
74:a6:5c:fa:0b:ae:98:53:80:3c:ec:0e:1f:32:1b:
fd:ab:11:7f:c5:25:f0:dc:b8:d5:2a:c7:f8:08:fb:
43:5c:8a:eb:26:01:cb:0f:07:6e:2f:72:fb:ad:85:
44:f8:d2:64:ca:12:72:69:9d:76:b7:47:7b:ab:a8:
41:22:2e:04:63:3c:5a:d3:d0:e0:61:c1:76:4c:73:
5b:ba:14:81:28:b8:aa:c3:b6:f0:d8:22:80:58:36:
29:fd:5c:7e:07:23:2f:a6:49:be:8d:e0:82:1b:42:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:E4:44:F6:E1:D3:86:A2:7C:F3:D5:69:2A:6C:C8:88:17:9A:80
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/_nzkRPbh04aifPPVaSpsyIgXmoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.28.0/23
Signature Algorithm: sha256WithRSAEncryption
68:57:2c:50:ba:7a:85:3c:7a:8b:2d:4f:c4:f7:ba:a9:c7:3e:
23:4a:8a:6b:6f:50:86:db:f1:8f:60:49:6a:6a:1e:ce:6d:bb:
ea:9d:d7:43:ec:33:39:62:76:8c:f9:6d:6d:ba:2c:94:8d:5f:
03:63:ab:20:46:76:14:bf:2b:80:22:73:9e:c9:6d:8c:62:51:
81:16:2c:29:06:0a:16:1d:82:07:c2:ff:b1:8b:39:0e:c7:9d:
ec:c2:fa:1e:3d:95:2a:b7:de:0c:cd:6a:b7:4e:f4:86:ee:bf:
05:05:bb:b3:95:4b:17:6f:fd:cd:42:bc:fb:39:b7:9d:6f:68:
9b:48:7f:ae:67:12:4b:d4:72:3c:06:58:95:e9:b3:15:e8:6c:
02:df:e3:6d:f4:ea:88:6c:7f:92:56:f1:e8:98:57:44:bf:e7:
7a:43:1e:52:0c:1b:e6:da:a3:7a:fa:3c:2c:36:b5:61:a8:60:
1f:ba:d2:0d:b4:a2:af:de:d7:88:15:c8:ad:2f:f1:3d:b2:47:
69:1b:e3:24:67:d5:f1:2a:26:21:06:52:a9:21:e8:0f:8e:56:
f9:73:77:ad:e9:51:3b:f6:c4:ce:48:e0:b5:bb:db:4c:60:d0:
74:90:bf:c0:d2:b5:2a:9c:88:d3:83:35:2e:9b:32:33:eb:77:
d3:fb:fd:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteHLKW4oquDi6oNL0m+PTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4
NWNkYmEwHhcNMjMwMTAxMTMxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdjZTQ0NGY2ZTFkMzg2YTI3Y2YzZDU2OTJhNmNjODg4MTc5YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinbj4I9lgx4S8+p3/FE4LLcmz1Z+
aabEw6zeQHOD+fMWc3IX6deRwwfgD67ZHcUzaZKO2zjhLBM1n5s9llE/xZE7WoW/
YbXDVLc1ykE6Th4sRzbWTaoYuKGZJMEhzYcf9YvHrpBvF2ZZbOjzqhF3e3KP1LEm
Ulz484Cntys7kiecGYMK6Wm6bWk81XyLkc6KCk6AZSF0plz6C66YU4A87A4fMhv9
qxF/xSXw3LjVKsf4CPtDXIrrJgHLDwduL3L7rYVE+NJkyhJyaZ12t0d7q6hBIi4E
Yzxa09DgYcF2THNbuhSBKLiqw7bw2CKAWDYp/Vx+ByMvpkm+jeCCG0KXwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP585ET24dOGonzz1WkqbMiIF5qAMB8GA1UdIwQY
MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt
NzgxOGE4OTQ1NmNiLzEvX256a1JQYmgwNGFpZlBQVmFTcHN5SWdYbW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi
LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dccMA0G
CSqGSIb3DQEBCwUAA4IBAQBoVyxQunqFPHqLLU/E97qpxz4jSoprb1CG2/GPYElq
ah7ObbvqnddD7DM5YnaM+W1tuiyUjV8DY6sgRnYUvyuAInOeyW2MYlGBFiwpBgoW
HYIHwv+xizkOx53swvoePZUqt94MzWq3TvSG7r8FBbuzlUsXb/3NQrz7Obedb2ib
SH+uZxJL1HI8BliV6bMV6GwC3+Nt9OqIbH+SVvHomFdEv+d6Qx5SDBvm2qN6+jws
NrVhqGAfutINtKKv3teIFcitL/E9skdpG+MkZ9XxKiYhBlKpIegPjlb5c3et6VE7
9sTOSOC1u9tMYNB0kL/A0rUqnIjTgzUumzIz63fT+/22
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org