Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/scb25tEktcIvewTR-yt3jRcQfrg.roa
File: scb25tEktcIvewTR-yt3jRcQfrg.roa (raw, json)
Hash identifier: 9ZboOJuA5p79c40rszXYGonCxszZFjyUCMnV0Ep6vW0=
Subject key identifier: B1:C6:F6:E6:D1:24:B5:C2:2F:7B:04:D1:FB:2B:77:8D:17:10:7E:B8
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 018C013A36E823043878DE782A5BF7A6FAAA
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/scb25tEktcIvewTR-yt3jRcQfrg.roa
Signing time: Fri 24 Nov 2023 12:07:21 +0000
ROA not before: Fri 24 Nov 2023 12:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.43.160.0/19 maxlen: 19
213.147.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:3a:36:e8:23:04:38:78:de:78:2a:5b:f7:a6:fa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Nov 24 12:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c6f6e6d124b5c22f7b04d1fb2b778d17107eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:2d:e8:87:3e:cd:d1:ba:65:86:ff:c0:3e:
e2:4b:f0:8f:2d:7a:29:09:8e:4e:05:5b:ed:00:b1:
1d:76:dc:0b:9b:b8:55:df:01:81:85:d4:76:9c:77:
d0:32:38:9a:69:14:79:6b:cc:a2:e7:b1:20:95:bf:
8e:89:6d:4b:07:2b:78:e2:08:8d:4b:ae:e3:ba:ee:
a4:a0:be:46:aa:23:d1:df:2f:e4:39:cb:b0:a8:f9:
a9:ae:9c:ab:d3:d0:5d:68:b6:1c:2d:9b:84:d7:1d:
ff:4b:5e:42:e3:3f:d5:3e:bf:1b:b2:d8:55:30:b8:
28:aa:7f:33:d3:ce:05:fa:be:96:5e:16:f2:49:66:
3a:2b:56:3d:01:bd:84:de:e4:38:be:0d:d3:64:1a:
1a:84:a2:47:06:af:14:05:08:fb:05:bc:19:00:93:
4e:28:9b:d9:b7:01:a6:59:8a:e9:3d:58:bf:b2:29:
7e:0e:c6:f7:2d:41:c3:36:1d:16:c6:18:e7:91:d4:
97:d0:1f:3a:a4:a4:12:b0:13:a1:b3:52:cf:cd:a2:
c2:8a:e3:e9:69:7e:c1:1e:0c:20:3d:aa:c3:e3:7f:
0d:19:b5:3c:61:14:00:80:09:30:8e:4b:2f:4c:a1:
54:f3:3b:a0:cd:66:35:1c:5c:f6:8b:91:75:df:c1:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:F6:E6:D1:24:B5:C2:2F:7B:04:D1:FB:2B:77:8D:17:10:7E:B8
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/scb25tEktcIvewTR-yt3jRcQfrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.43.160.0/19
213.147.224.0/19
Signature Algorithm: sha256WithRSAEncryption
68:35:9f:6e:2c:7a:a5:6a:a0:b9:f2:c5:c4:9b:ae:59:05:ad:
aa:9c:66:17:e4:06:9e:54:d7:c2:fb:76:d9:ae:96:19:e7:dc:
b4:a9:c5:4d:27:d0:ab:0d:a1:cc:15:ab:83:00:0a:45:f0:8e:
10:13:f7:a1:39:e7:d8:78:12:03:02:55:ed:ef:b6:99:9c:b5:
04:24:0e:39:08:22:ad:eb:7c:11:69:ad:44:af:43:ae:77:85:
b6:ab:ce:e5:f6:42:47:15:66:00:25:a4:e8:c8:7a:ab:55:88:
1c:68:26:80:f3:77:c2:0d:fe:01:dc:38:94:42:34:5a:71:a4:
85:0c:80:73:d6:58:f7:ce:f6:97:42:14:5d:f5:56:52:1b:76:
dc:82:04:4f:2c:d4:f7:c6:0b:7b:80:bc:dc:88:26:79:4a:bf:
ab:43:63:f6:74:7c:af:5c:2f:12:02:93:a6:8f:14:bd:eb:96:
d8:18:bd:44:24:de:4b:9b:25:a6:67:db:5d:c8:ca:d8:87:9a:
36:5c:4a:f8:ee:c2:5e:83:35:bb:ac:c1:62:96:17:3e:b1:4e:
c8:f9:83:c0:84:b5:05:2b:a1:18:3d:d6:ac:bc:fe:1d:46:0f:
f6:69:7a:09:9a:3a:f8:76:2d:fc:f5:6d:fa:65:99:9a:be:d4:
b9:3f:68:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwBOjboIwQ4eN54Klv3pvqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjMxMTI0MTIwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM2ZjZlNmQxMjRiNWMyMmY3YjA0ZDFmYjJiNzc4ZDE3MTA3ZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0st6Ic+zdG6ZYb/wD7iS/CPLXop
CY5OBVvtALEddtwLm7hV3wGBhdR2nHfQMjiaaRR5a8yi57Eglb+OiW1LByt44giN
S67juu6koL5GqiPR3y/kOcuwqPmprpyr09BdaLYcLZuE1x3/S15C4z/VPr8bsthV
MLgoqn8z084F+r6WXhbySWY6K1Y9Ab2E3uQ4vg3TZBoahKJHBq8UBQj7BbwZAJNO
KJvZtwGmWYrpPVi/sil+Dsb3LUHDNh0WxhjnkdSX0B86pKQSsBOhs1LPzaLCiuPp
aX7BHgwgParD438NGbU8YRQAgAkwjksvTKFU8zugzWY1HFz2i5F138FNIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLHG9ubRJLXCL3sE0fsrd40XEH64MB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvc2NiMjV0RWt0Y0l2ZXdUUi15dDNqUmNRZnJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF1CugAwQF
1ZPgMA0GCSqGSIb3DQEBCwUAA4IBAQBoNZ9uLHqlaqC58sXEm65ZBa2qnGYX5Aae
VNfC+3bZrpYZ59y0qcVNJ9CrDaHMFauDAApF8I4QE/ehOefYeBIDAlXt77aZnLUE
JA45CCKt63wRaa1Er0Oud4W2q87l9kJHFWYAJaToyHqrVYgcaCaA83fCDf4B3DiU
QjRacaSFDIBz1lj3zvaXQhRd9VZSG3bcggRPLNT3xgt7gLzciCZ5Sr+rQ2P2dHyv
XC8SApOmjxS965bYGL1EJN5LmyWmZ9tdyMrYh5o2XEr47sJegzW7rMFilhc+sU7I
+YPAhLUFK6EYPdasvP4dRg/2aXoJmjr4di389W36ZZmavtS5P2jP
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:33 2024 by rpki-client on console-fra.rpki-client.org