Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/1J9Dmg8SjHwJ0Z-2IA6HavDz_oU.roa
File: 1J9Dmg8SjHwJ0Z-2IA6HavDz_oU.roa (raw, json)
Hash identifier: zEwR0Vkb0RWr4tVBe5LRcMljm+vU+OTkUEv+U4eXoHk=
Subject key identifier: D4:9F:43:9A:0F:12:8C:7C:09:D1:9F:B6:20:0E:87:6A:F0:F3:FE:85
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018A1C49AB7F868BA134B051012E3F5703C6
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/1J9Dmg8SjHwJ0Z-2IA6HavDz_oU.roa
Signing time: Tue 22 Aug 2023 08:08:24 +0000
ROA not before: Tue 22 Aug 2023 08:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43647
IP address blocks: 213.148.18.0/23 maxlen: 23
213.148.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 27 Nov 2023 07:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:49:ab:7f:86:8b:a1:34:b0:51:01:2e:3f:57:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Aug 22 08:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49f439a0f128c7c09d19fb6200e876af0f3fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:29:56:3d:8f:46:7e:66:4c:33:e6:ec:41:
3c:a9:05:64:fc:b6:69:0c:ba:2d:03:b9:12:c5:fc:
6a:78:42:9e:06:a6:30:76:81:3b:65:21:08:0c:28:
32:5b:26:94:1c:e8:49:72:38:ff:2c:81:43:92:fd:
9e:f1:e2:59:da:f1:1d:b5:47:e8:df:d1:d8:1d:db:
16:ad:c5:f9:6d:61:c7:d6:fa:26:5c:d5:a9:9c:d9:
84:11:cf:d7:b9:e1:ae:a0:54:a0:1f:52:55:4f:6d:
2b:da:af:82:d8:e5:95:55:de:2c:0a:53:76:99:b9:
bf:47:c0:1a:05:25:0a:4e:4e:7b:3d:de:3b:ed:47:
8a:e6:71:ee:ab:60:7f:79:0b:93:3c:14:5c:a6:87:
f2:50:4e:77:18:e4:4d:3d:84:4c:c8:b4:c3:1d:7e:
9b:d9:a3:0f:30:15:42:ed:c5:dc:52:fe:17:02:b6:
40:a5:40:6f:53:24:39:e5:7f:8a:2d:c3:cb:97:62:
eb:81:30:ae:27:bc:47:3e:2f:d0:d8:ca:99:89:d9:
a3:ad:ef:38:f1:8d:a8:7c:1c:93:2d:40:55:8e:20:
db:c3:4b:a6:d3:e2:d0:43:b2:4b:26:d1:49:47:8f:
bc:68:fe:73:4a:8a:07:a4:e8:64:89:d0:5f:26:26:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:43:9A:0F:12:8C:7C:09:D1:9F:B6:20:0E:87:6A:F0:F3:FE:85
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/1J9Dmg8SjHwJ0Z-2IA6HavDz_oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.18.0-213.148.23.255
Signature Algorithm: sha256WithRSAEncryption
42:2d:6c:8e:99:b4:5a:78:f2:12:5b:8d:de:2f:6a:a2:0b:c9:
2f:36:7d:73:84:2c:f8:39:bd:a1:f3:c7:0b:ba:a6:64:1a:b7:
59:59:61:e2:52:0d:a6:38:7c:a6:0e:e9:0c:3e:f9:83:96:db:
c5:d6:29:4f:28:b2:51:71:d4:bf:fa:76:91:a7:78:78:96:11:
ee:46:79:cd:ac:be:41:b4:93:57:fb:36:95:fd:37:48:9f:1b:
39:62:23:a6:26:3c:11:7a:01:55:42:23:dd:68:64:e7:c0:29:
0d:67:fb:42:e8:6c:7f:c1:42:3e:4e:b6:bb:e7:ca:55:d2:e3:
f6:04:12:0d:2b:64:57:2e:02:73:63:2a:16:2c:db:35:5a:8c:
93:fb:08:a4:2c:4f:d4:36:17:a5:e6:4c:08:e2:1c:2c:a3:b3:
37:ab:a5:d8:81:15:82:c9:37:80:f9:94:45:7f:1d:3a:8c:8e:
3e:ca:22:7a:2e:1a:2f:3b:6a:c8:c6:60:e1:ea:8f:6d:ac:b2:
29:27:f1:85:b0:34:9c:f4:6b:ee:0f:d5:3a:b7:ea:b0:8a:41:
d7:83:69:5b:58:25:ca:fa:e3:13:79:bd:fb:01:6d:47:c8:53:
96:f1:bc:22:b7:e0:ad:ab:cc:b1:26:5c:55:1f:23:49:24:8d:
f4:c9:dc:7e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYocSat/houhNLBRAS4/VwPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx
ZThkYmQwHhcNMjMwODIyMDgwODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDlmNDM5YTBmMTI4YzdjMDlkMTlmYjYyMDBlODc2YWYwZjNmZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI4pVj2PRn5mTDPm7EE8qQVk/LZp
DLotA7kSxfxqeEKeBqYwdoE7ZSEIDCgyWyaUHOhJcjj/LIFDkv2e8eJZ2vEdtUfo
39HYHdsWrcX5bWHH1vomXNWpnNmEEc/XueGuoFSgH1JVT20r2q+C2OWVVd4sClN2
mbm/R8AaBSUKTk57Pd477UeK5nHuq2B/eQuTPBRcpofyUE53GORNPYRMyLTDHX6b
2aMPMBVC7cXcUv4XArZApUBvUyQ55X+KLcPLl2LrgTCuJ7xHPi/Q2MqZidmjre84
8Y2ofByTLUBVjiDbw0um0+LQQ7JLJtFJR4+8aP5zSooHpOhkidBfJiZUBwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNSfQ5oPEox8CdGftiAOh2rw8/6FMB8GA1UdIwQY
MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt
M2EzODkzMzJmNzlmLzEvMUo5RG1nOFNqSHdKMFotMklBNkhhdkR6X29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm
LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHVlBID
BAPVlBAwDQYJKoZIhvcNAQELBQADggEBAEItbI6ZtFp48hJbjd4vaqILyS82fXOE
LPg5vaHzxwu6pmQat1lZYeJSDaY4fKYO6Qw++YOW28XWKU8oslFx1L/6dpGneHiW
Ee5Gec2svkG0k1f7NpX9N0ifGzliI6YmPBF6AVVCI91oZOfAKQ1n+0LobH/BQj5O
trvnylXS4/YEEg0rZFcuAnNjKhYs2zVajJP7CKQsT9Q2F6XmTAjiHCyjszerpdiB
FYLJN4D5lEV/HTqMjj7KInouGi87asjGYOHqj22ssikn8YWwNJz0a+4P1Tq36rCK
QdeDaVtYJcr64xN5vfsBbUfIU5bxvCK34K2rzLEmXFUfI0kkjfTJ3H4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org