Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/E19gjs1mfyMc2-II9sYfRC2L52Y.roa
File: E19gjs1mfyMc2-II9sYfRC2L52Y.roa (raw, json)
Hash identifier: BHXjmmbJvxnpBXi0ocryxj8p04F3qXNRUf5Jr9wqOHg=
Subject key identifier: 13:5F:60:8E:CD:66:7F:23:1C:DB:E2:08:F6:C6:1F:44:2D:8B:E7:66
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018C154794472D761C8B8764AA7F2915A4C4
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/E19gjs1mfyMc2-II9sYfRC2L52Y.roa
Signing time: Tue 28 Nov 2023 09:34:21 +0000
ROA not before: Tue 28 Nov 2023 09:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48988
IP address blocks: 213.148.0.0/20 maxlen: 24
2a13:8280::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 20 Dec 2023 10:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:47:94:47:2d:76:1c:8b:87:64:aa:7f:29:15:a4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Nov 28 09:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=135f608ecd667f231cdbe208f6c61f442d8be766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:23:ec:c1:2d:dd:50:7b:ae:70:d5:49:87:
0c:c6:ac:d7:e2:ca:b2:42:9c:77:ec:ea:87:19:5d:
43:e7:de:29:cc:e1:ea:eb:c5:e2:79:c2:3d:7b:be:
26:91:69:9c:6e:42:f7:89:2f:e5:1a:c4:cb:25:54:
a2:47:08:a7:95:34:d8:6c:7e:9f:b0:ac:f0:d9:42:
15:2a:a8:de:d5:97:27:b7:a5:19:c3:e3:67:60:7c:
0f:25:ed:f7:92:a8:6b:c2:c5:a0:91:1c:59:e6:ee:
72:31:55:0a:9d:e0:3d:ba:58:4a:c0:65:c5:0a:c2:
67:73:7b:2e:37:ec:ac:58:c6:32:f4:21:f3:36:29:
1b:f2:6e:d1:51:91:25:8e:1b:08:a3:36:35:04:dc:
2e:29:de:00:36:f1:35:1d:e9:a9:dc:8f:a7:75:86:
f4:1a:46:6b:16:42:79:04:4d:f4:7d:b0:5e:46:d0:
dc:6a:cf:17:3b:a8:d8:fc:35:8e:ee:59:55:a2:1e:
ac:70:0c:b7:c2:fb:39:f2:9e:fe:f6:35:ea:20:56:
95:ec:85:e5:2a:59:3d:1b:1f:6e:8a:89:cc:59:d9:
20:54:88:6a:a4:5f:74:f7:6a:f7:bc:37:44:9b:cf:
8a:ec:6a:8c:de:65:08:c9:49:fd:11:02:d3:2b:ef:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:60:8E:CD:66:7F:23:1C:DB:E2:08:F6:C6:1F:44:2D:8B:E7:66
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/E19gjs1mfyMc2-II9sYfRC2L52Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.0.0/20
IPv6:
2a13:8280::/32
Signature Algorithm: sha256WithRSAEncryption
04:77:5c:5d:b0:1c:f1:bd:f8:e5:f5:ca:1a:b2:bc:12:6e:0a:
34:ae:8e:a9:7e:88:fe:1c:40:34:53:b8:30:2b:e5:66:31:14:
06:12:03:b9:04:80:6d:c9:d3:e6:f1:51:15:1b:72:20:10:c5:
48:a2:61:bd:5a:e4:3f:7f:56:6b:e6:d3:a7:15:c3:7b:3d:af:
32:f8:3f:be:e9:03:4d:2f:7f:bd:e5:56:3b:a6:71:0a:5a:cb:
e7:e0:07:a2:78:13:d4:16:8d:16:80:6c:cc:6f:8c:84:a6:73:
35:21:42:f2:25:d7:a7:46:46:92:51:25:69:d8:3a:d4:ee:9f:
55:a4:4d:2b:e6:1c:ac:4e:85:bb:82:e8:04:ae:5f:52:36:ee:
18:52:d5:40:9d:b9:8f:f4:ad:3a:a5:70:aa:b4:54:85:7b:c7:
21:7c:66:20:1b:41:c6:1d:ce:88:ce:34:a3:9c:b6:ca:26:84:
88:a0:71:93:da:a2:a7:40:4d:c9:60:53:b2:f9:9a:c3:f2:ba:
be:15:d5:e6:91:37:0b:b2:36:d7:34:d3:99:3c:a2:da:6e:27:
a4:b4:4b:a1:a5:d2:9b:e7:e7:ab:77:49:eb:23:d6:8d:53:2b:
cd:fe:53:50:e1:40:95:cc:00:73:ec:c1:26:97:9e:e8:51:5d:
73:c5:90:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYwVR5RHLXYci4dkqn8pFaTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx
ZThkYmQwHhcNMjMxMTI4MDkzNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzVmNjA4ZWNkNjY3ZjIzMWNkYmUyMDhmNmM2MWY0NDJkOGJlNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKUj7MEt3VB7rnDVSYcMxqzX4sqy
Qpx37OqHGV1D594pzOHq68XiecI9e74mkWmcbkL3iS/lGsTLJVSiRwinlTTYbH6f
sKzw2UIVKqje1Zcnt6UZw+NnYHwPJe33kqhrwsWgkRxZ5u5yMVUKneA9ulhKwGXF
CsJnc3suN+ysWMYy9CHzNikb8m7RUZEljhsIozY1BNwuKd4ANvE1Hemp3I+ndYb0
GkZrFkJ5BE30fbBeRtDcas8XO6jY/DWO7llVoh6scAy3wvs58p7+9jXqIFaV7IXl
Klk9Gx9uionMWdkgVIhqpF9092r3vDdEm8+K7GqM3mUIyUn9EQLTK+8D9QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBNfYI7NZn8jHNviCPbGH0Qti+dmMB8GA1UdIwQY
MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt
M2EzODkzMzJmNzlmLzEvRTE5Z2pzMW1meU1jMi1JSTlzWWZSQzJMNTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm
LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE1ZQAMA0E
AgACMAcDBQAqE4KAMA0GCSqGSIb3DQEBCwUAA4IBAQAEd1xdsBzxvfjl9coasrwS
bgo0ro6pfoj+HEA0U7gwK+VmMRQGEgO5BIBtydPm8VEVG3IgEMVIomG9WuQ/f1Zr
5tOnFcN7Pa8y+D++6QNNL3+95VY7pnEKWsvn4AeieBPUFo0WgGzMb4yEpnM1IULy
JdenRkaSUSVp2DrU7p9VpE0r5hysToW7gugErl9SNu4YUtVAnbmP9K06pXCqtFSF
e8chfGYgG0HGHc6IzjSjnLbKJoSIoHGT2qKnQE3JYFOy+ZrD8rq+FdXmkTcLsjbX
NNOZPKLabiektEuhpdKb5+erd0nrI9aNUyvN/lNQ4UCVzABz7MEml57oUV1zxZDH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org