Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/O4qheJdq1wZUoJPwy80uqYESpa8.roa
File: O4qheJdq1wZUoJPwy80uqYESpa8.roa (raw, json)
Hash identifier: BpWKyGPQLAH4WQMC+DHWBwi1Y/0K0xUgHPHCVOPwUsk=
Subject key identifier: 3B:8A:A1:78:97:6A:D7:06:54:A0:93:F0:CB:CD:2E:A9:81:12:A5:AF
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 018570DE4541E693D9FBDFFD6FD370ED37A4
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/O4qheJdq1wZUoJPwy80uqYESpa8.roa
Signing time: Mon 02 Jan 2023 05:04:52 +0000
ROA not before: Mon 02 Jan 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204516
IP address blocks: 213.190.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:45:41:e6:93:d9:fb:df:fd:6f:d3:70:ed:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jan 2 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b8aa178976ad70654a093f0cbcd2ea98112a5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:88:2e:1c:67:3e:16:96:c8:f7:a5:3d:59:
89:e4:e4:4b:8b:0e:90:f7:7f:be:4e:e8:6f:9f:fe:
4f:a2:7b:00:5f:3b:08:7e:dd:26:6b:7c:06:a3:b6:
d3:ca:cd:96:a6:6c:74:4f:10:c2:7f:f9:74:63:cf:
e0:ae:79:84:65:1a:6a:15:6c:f3:be:9d:53:7e:bb:
cc:d1:96:10:62:bb:92:c0:f3:bb:28:21:39:cd:7c:
50:51:b3:4d:ec:a6:c5:2f:01:55:05:70:90:0e:dc:
ce:17:c4:46:38:51:f4:b7:51:08:db:ea:e3:30:e1:
a2:09:b7:0f:dc:15:13:c0:5f:c7:28:14:b9:4a:0a:
2b:8c:21:27:03:cf:a6:d9:cc:fb:2b:66:ba:fc:bb:
59:86:2a:9a:c2:f5:c7:ba:ec:8a:2f:26:58:6e:7e:
23:1c:43:6f:53:b3:21:78:2d:d3:a1:ef:59:b0:57:
13:15:59:58:f5:50:a0:3b:46:93:7b:1b:6d:e0:fc:
b3:16:0b:0b:ac:a0:6c:f5:a6:02:48:2e:8b:1c:f0:
62:f1:a3:78:6b:4c:47:ee:a7:26:53:61:b0:06:e7:
10:30:c2:58:52:b7:9c:3f:80:ba:3c:ea:b9:ae:4f:
66:a0:17:ed:0d:05:1f:8b:a6:76:ee:4e:44:50:27:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:A1:78:97:6A:D7:06:54:A0:93:F0:CB:CD:2E:A9:81:12:A5:AF
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/O4qheJdq1wZUoJPwy80uqYESpa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e0:d3:87:04:cd:40:6b:4c:60:f5:c1:cb:2a:3d:d0:94:f8:
71:38:38:56:a6:93:6e:96:03:aa:12:6e:c1:16:f4:59:21:a8:
4b:26:a5:ce:48:3e:84:d3:8e:4d:ed:c8:6e:8f:26:11:83:e1:
33:1f:f3:a0:0c:e3:14:ea:51:6f:34:7f:e7:d9:90:58:41:0f:
34:0b:21:e3:90:56:62:e1:48:25:9b:48:91:3a:2c:b7:ca:89:
38:5a:3b:af:d6:3f:03:21:4d:cb:f3:78:09:48:13:7c:60:6e:
b0:88:5f:d1:cc:04:bd:24:64:a8:69:f6:66:50:28:59:74:92:
1e:39:e1:b8:ee:c5:27:e8:64:53:b7:78:72:7e:bb:70:c0:6e:
b5:1b:ec:a2:fc:39:0a:a6:bc:49:57:fc:ec:e2:60:a4:20:73:
7e:01:b8:82:fe:89:c5:99:ce:45:e9:3e:b6:bd:35:66:d7:1d:
9f:c5:28:d8:84:78:5c:5d:28:04:88:fa:20:2d:d4:dd:cc:0b:
53:c3:61:3a:ea:82:a1:1c:51:35:0a:ed:94:80:d1:9e:70:c8:
6a:2f:99:d0:8f:48:7c:f7:cd:6d:c7:12:7c:60:c2:66:1f:24:
9d:3c:02:03:2b:60:46:b8:f9:c9:1d:e6:eb:7f:b5:3d:73:e8:
34:f5:fa:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw3kVB5pPZ+9/9b9Nw7TekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw
OGY3ODIwHhcNMjMwMTAyMDUwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjhhYTE3ODk3NmFkNzA2NTRhMDkzZjBjYmNkMmVhOTgxMTJhNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNiILhxnPhaWyPelPVmJ5ORLiw6Q
93++Tuhvn/5PonsAXzsIft0ma3wGo7bTys2Wpmx0TxDCf/l0Y8/grnmEZRpqFWzz
vp1TfrvM0ZYQYruSwPO7KCE5zXxQUbNN7KbFLwFVBXCQDtzOF8RGOFH0t1EI2+rj
MOGiCbcP3BUTwF/HKBS5SgorjCEnA8+m2cz7K2a6/LtZhiqawvXHuuyKLyZYbn4j
HENvU7MheC3Toe9ZsFcTFVlY9VCgO0aTextt4PyzFgsLrKBs9aYCSC6LHPBi8aN4
a0xH7qcmU2GwBucQMMJYUrecP4C6POq5rk9moBftDQUfi6Z27k5EUCeC7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuKoXiXatcGVKCT8MvNLqmBEqWvMB8GA1UdIwQY
MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt
NGU0YTM1ZGQzNjc3LzEvTzRxaGVKZHExd1pVb0pQd3k4MHVxWUVTcGE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3
LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b5GMA0G
CSqGSIb3DQEBCwUAA4IBAQA94NOHBM1Aa0xg9cHLKj3QlPhxODhWppNulgOqEm7B
FvRZIahLJqXOSD6E045N7chujyYRg+EzH/OgDOMU6lFvNH/n2ZBYQQ80CyHjkFZi
4Uglm0iROiy3yok4Wjuv1j8DIU3L83gJSBN8YG6wiF/RzAS9JGSoafZmUChZdJIe
OeG47sUn6GRTt3hyfrtwwG61G+yi/DkKprxJV/zs4mCkIHN+AbiC/onFmc5F6T62
vTVm1x2fxSjYhHhcXSgEiPogLdTdzAtTw2E66oKhHFE1Cu2UgNGecMhqL5nQj0h8
981txxJ8YMJmHySdPAIDK2BGuPnJHebrf7U9c+g09fo3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:35 2024 by rpki-client on console-ams.rpki-client.org