Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/hK8S7EYdECyedm3uX9Nyns-7cNs.roa
File: hK8S7EYdECyedm3uX9Nyns-7cNs.roa (raw, json)
Hash identifier: uyY7a6k0FwDO87f1wNyXimGvQ7twmgwBJAT+ufYzVuk=
Subject key identifier: 84:AF:12:EC:46:1D:10:2C:9E:76:6D:EE:5F:D3:72:9E:CF:BB:70:DB
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 0185714C33704A8DDE8AEFDFFA59997ACCF1
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/hK8S7EYdECyedm3uX9Nyns-7cNs.roa
Signing time: Mon 02 Jan 2023 07:04:57 +0000
ROA not before: Mon 02 Jan 2023 07:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205975
IP address blocks: 212.46.58.0/24 maxlen: 24
147.189.155.0/24 maxlen: 24
2a12:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Jan 2023 09:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:33:70:4a:8d:de:8a:ef:df:fa:59:99:7a:cc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Jan 2 07:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84af12ec461d102c9e766dee5fd3729ecfbb70db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:61:d0:17:41:31:c5:4c:11:f4:cb:6b:d7:
e5:9f:26:3f:93:2d:c6:e4:0e:c6:9b:9b:1b:f3:2c:
15:1d:fe:06:35:20:ea:c1:1c:3c:8a:de:84:d6:c5:
68:68:91:6e:72:a3:4b:9b:cb:0f:b9:29:8b:9b:15:
98:c2:88:fe:a9:7c:5d:9e:9f:ae:a4:d0:69:0c:dc:
d4:10:f3:45:22:b7:1a:a6:4f:f6:8f:60:93:ac:46:
86:23:55:5a:f6:1c:32:7c:e8:72:fe:7a:54:55:40:
d3:47:d6:51:11:15:84:81:f1:bb:67:55:73:c6:7c:
4e:74:d9:a1:31:f2:e2:25:94:33:a8:5e:c1:f2:7d:
23:7d:c1:f8:eb:c3:bc:77:35:4a:74:e0:59:47:68:
46:4f:28:a6:7e:b8:4e:31:0e:4a:41:3e:31:a2:f3:
6c:25:40:ee:4e:be:dc:f7:ff:9c:2b:c0:bb:c0:43:
4c:48:06:e8:0b:79:28:2e:ca:95:18:67:21:64:da:
1f:6d:61:95:23:11:27:b6:04:3e:eb:35:60:e4:7a:
94:5f:39:bb:4f:5a:43:62:41:6f:93:a8:ee:59:c0:
d0:0a:79:bd:55:94:81:ef:4c:ab:8a:fe:19:d8:af:
e8:54:35:5a:b7:68:e2:92:23:ab:1c:19:cd:ab:50:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:12:EC:46:1D:10:2C:9E:76:6D:EE:5F:D3:72:9E:CF:BB:70:DB
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/hK8S7EYdECyedm3uX9Nyns-7cNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.155.0/24
212.46.58.0/24
IPv6:
2a12:f40::/29
Signature Algorithm: sha256WithRSAEncryption
62:c2:d2:88:24:55:03:a1:61:c6:ad:68:4e:0b:42:fa:9d:53:
ec:a3:2f:be:6e:37:fc:73:19:29:75:3c:6b:06:50:3f:84:bf:
14:e4:3d:5d:02:22:fe:70:59:b6:40:5d:45:f6:95:65:04:75:
00:33:ed:71:c8:35:23:df:5b:c0:62:b2:45:36:72:f9:7f:9d:
26:5e:97:bb:f7:fd:7d:bc:e2:ac:67:d1:d3:d7:10:06:9f:fe:
5a:1a:8a:a0:5e:02:c4:fb:6e:51:d5:38:b7:6e:31:b6:5a:aa:
cd:b3:cc:c5:63:34:a1:6f:49:fd:1c:64:b8:49:25:33:07:d6:
87:3e:a3:e5:b6:fe:e4:48:4b:49:43:ee:1b:9f:87:d7:3a:12:
a8:a5:89:11:50:2b:43:3a:46:56:84:4f:1b:6f:97:b5:4f:88:
b7:61:cc:7d:b4:51:d5:95:73:fb:36:cc:e1:19:c4:ef:72:44:
44:5f:e1:0b:9e:6a:cc:4d:99:cd:14:03:38:68:af:b6:e2:60:
60:39:3e:a5:9e:2f:f0:65:af:6a:9b:a1:ca:2c:0f:8d:4b:9a:
9f:74:55:d4:42:62:7d:71:a9:57:8b:6a:da:f3:a6:00:5c:10:
95:2d:68:32:cf:30:1b:c4:75:b1:20:82:15:6f:32:33:5e:40:
a4:42:1c:5b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVxTDNwSo3eiu/f+lmZeszxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMjExMmNiZjZkY2M4ZGQzNDQ0ZTRlY2VkMjg0NDU3MzEw
ZjcwZDIwHhcNMjMwMTAyMDcwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGFmMTJlYzQ2MWQxMDJjOWU3NjZkZWU1ZmQzNzI5ZWNmYmI3MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidRh0BdBMcVMEfTLa9flnyY/ky3G
5A7Gm5sb8ywVHf4GNSDqwRw8it6E1sVoaJFucqNLm8sPuSmLmxWYwoj+qXxdnp+u
pNBpDNzUEPNFIrcapk/2j2CTrEaGI1Va9hwyfOhy/npUVUDTR9ZRERWEgfG7Z1Vz
xnxOdNmhMfLiJZQzqF7B8n0jfcH468O8dzVKdOBZR2hGTyimfrhOMQ5KQT4xovNs
JUDuTr7c9/+cK8C7wENMSAboC3koLsqVGGchZNofbWGVIxEntgQ+6zVg5HqUXzm7
T1pDYkFvk6juWcDQCnm9VZSB70yriv4Z2K/oVDVat2jikiOrHBnNq1CCAwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFISvEuxGHRAsnnZt7l/Tcp7Pu3DbMB8GA1UdIwQY
MBaAFE8hEsv23MjdNETk7O0oRFcxD3DSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMt
YjI3OThjMWEwMzI3LzEvaEs4UzdFWWRFQ3llZG0zdVg5Tnlucy03Y05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMtYjI3OThjMWEwMzI3
LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAk72bAwQA
1C46MA0EAgACMAcDBQMqEg9AMA0GCSqGSIb3DQEBCwUAA4IBAQBiwtKIJFUDoWHG
rWhOC0L6nVPsoy++bjf8cxkpdTxrBlA/hL8U5D1dAiL+cFm2QF1F9pVlBHUAM+1x
yDUj31vAYrJFNnL5f50mXpe79/19vOKsZ9HT1xAGn/5aGoqgXgLE+25R1Ti3bjG2
WqrNs8zFYzShb0n9HGS4SSUzB9aHPqPltv7kSEtJQ+4bn4fXOhKopYkRUCtDOkZW
hE8bb5e1T4i3Ycx9tFHVlXP7NszhGcTvckREX+ELnmrMTZnNFAM4aK+24mBgOT6l
ni/wZa9qm6HKLA+NS5qfdFXUQmJ9calXi2ra86YAXBCVLWgyzzAbxHWxIIIVbzIz
XkCkQhxb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:39 2024 by rpki-client on console-fra.rpki-client.org