Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/Cx_ecMgB00dkmLW__4JfCmKhsXM.roa
File: Cx_ecMgB00dkmLW__4JfCmKhsXM.roa (raw, json)
Hash identifier: axdW4056XuWawjNsM2SS2EP4jcb4XFKYynOpwtxAZ+c=
Subject key identifier: 0B:1F:DE:70:C8:01:D3:47:64:98:B5:BF:FF:82:5F:0A:62:A1:B1:73
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01856E0AEB1AD8A80DE75D51DADDFBD45D84
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/Cx_ecMgB00dkmLW__4JfCmKhsXM.roa
Signing time: Sun 01 Jan 2023 15:54:47 +0000
ROA not before: Sun 01 Jan 2023 15:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12437
IP address blocks: 212.62.79.0/24 maxlen: 24
84.201.96.0/24 maxlen: 24
81.89.224.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:eb:1a:d8:a8:0d:e7:5d:51:da:dd:fb:d4:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 15:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b1fde70c801d3476498b5bfff825f0a62a1b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:55:ce:c0:68:74:86:1f:c8:e7:c0:fa:03:
40:25:1a:d8:1d:5a:da:90:97:09:38:84:86:98:4b:
bb:bf:31:b0:a6:5d:0b:5f:9c:e7:ad:25:38:34:44:
0d:19:c0:80:c9:d5:aa:45:74:70:bc:5a:e5:3f:57:
9f:0c:07:68:b1:7e:83:52:b0:25:c8:9f:3c:13:4e:
73:56:17:0f:e7:c0:8b:ef:68:74:90:87:0e:37:3b:
b7:cc:69:0b:c2:56:34:88:d7:78:b6:d5:6e:9f:ee:
15:bc:0c:d6:22:00:ad:bc:27:5d:39:16:8e:69:3c:
5b:ac:f0:94:59:31:65:57:02:92:e7:dc:69:63:e8:
5b:60:9e:e2:93:87:6b:3a:0e:19:40:d3:8b:76:4d:
22:54:fd:46:8f:9c:2d:43:81:49:b0:67:fd:01:e8:
5b:29:5b:69:84:01:f1:91:47:34:a0:f3:cf:de:d8:
21:c3:d2:64:c9:25:a2:bc:bd:c7:39:6f:a8:2e:60:
d1:5e:29:ac:3a:f5:33:5a:a9:2d:e8:0b:b7:80:73:
1e:e7:37:b9:44:09:f2:78:c0:a6:a9:77:18:0a:0c:
41:b8:cd:27:cd:d7:32:09:66:1b:4f:3b:f1:a9:a4:
77:bf:1d:0e:ee:e1:7a:d1:6a:ea:72:4f:17:76:92:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:DE:70:C8:01:D3:47:64:98:B5:BF:FF:82:5F:0A:62:A1:B1:73
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/Cx_ecMgB00dkmLW__4JfCmKhsXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/23
84.201.96.0/24
212.62.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f2:8b:aa:0b:e8:85:8d:5e:02:34:f7:ef:4e:08:37:fc:f4:
ec:f7:1f:bd:84:0c:1a:b0:eb:60:3b:ff:1c:85:40:59:e2:d1:
66:5d:62:87:8c:03:ac:ae:d9:b1:c3:c9:9b:a4:67:82:92:16:
62:d9:58:3b:aa:4b:91:3e:f4:05:7b:0d:0e:40:48:21:34:6d:
5a:6e:5d:2d:2c:ab:5e:e8:82:ae:cf:81:a6:b6:fe:31:65:d5:
a3:25:11:71:5b:a5:88:46:44:ba:54:28:a1:82:21:63:fd:73:
b5:29:e1:74:54:11:50:5b:c0:45:0b:c0:b1:1d:42:2a:c0:07:
4e:25:98:62:c6:cb:7a:84:3a:6f:3c:8f:60:ff:23:b1:4d:ac:
c7:66:da:2e:1f:cc:11:ad:8c:1d:e8:47:84:1a:9a:ca:ab:f6:
5e:bc:98:ac:39:0b:db:44:a1:0f:67:40:f5:8e:c9:ff:20:bd:
b7:ab:8d:cb:2b:bd:a2:88:7e:08:c0:c9:38:12:9e:bf:6c:dc:
c1:5d:6f:9a:8d:54:4e:67:2a:fd:2f:61:bb:ed:af:db:4c:c0:
b5:74:dd:96:10:0a:28:da:49:5d:1b:f1:6d:ac:48:f5:6a:a8:
bd:65:a2:8a:12:ba:5b:7a:69:74:21:4a:c1:a6:a8:18:07:94:
96:e6:f3:2a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVuCusa2KgN511R2t371F2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5
NTgwYmIwHhcNMjMwMTAxMTU1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjFmZGU3MGM4MDFkMzQ3NjQ5OGI1YmZmZjgyNWYwYTYyYTFiMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8pVzsBodIYfyOfA+gNAJRrYHVra
kJcJOISGmEu7vzGwpl0LX5znrSU4NEQNGcCAydWqRXRwvFrlP1efDAdosX6DUrAl
yJ88E05zVhcP58CL72h0kIcONzu3zGkLwlY0iNd4ttVun+4VvAzWIgCtvCddORaO
aTxbrPCUWTFlVwKS59xpY+hbYJ7ik4drOg4ZQNOLdk0iVP1Gj5wtQ4FJsGf9Aehb
KVtphAHxkUc0oPPP3tghw9JkySWivL3HOW+oLmDRXimsOvUzWqkt6Au3gHMe5ze5
RAnyeMCmqXcYCgxBuM0nzdcyCWYbTzvxqaR3vx0O7uF60Wrqck8XdpKERQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAsf3nDIAdNHZJi1v/+CXwpiobFzMB8GA1UdIwQY
MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt
ZThjOWFkNWYwNTFhLzEvQ3hfZWNNZ0IwMGRrbUxXX180SmZDbUtoc1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh
LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUVngAwQA
VMlgAwQA1D5PMA0GCSqGSIb3DQEBCwUAA4IBAQB78ouqC+iFjV4CNPfvTgg3/PTs
9x+9hAwasOtgO/8chUBZ4tFmXWKHjAOsrtmxw8mbpGeCkhZi2Vg7qkuRPvQFew0O
QEghNG1abl0tLKte6IKuz4Gmtv4xZdWjJRFxW6WIRkS6VCihgiFj/XO1KeF0VBFQ
W8BFC8CxHUIqwAdOJZhixst6hDpvPI9g/yOxTazHZtouH8wRrYwd6EeEGprKq/Ze
vJisOQvbRKEPZ0D1jsn/IL23q43LK72iiH4IwMk4Ep6/bNzBXW+ajVROZyr9L2G7
7a/bTMC1dN2WEAoo2kldG/FtrEj1aqi9ZaKKErpbeml0IUrBpqgYB5SW5vMq
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:46 2024 by rpki-client on console-fra.rpki-client.org