Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/P_UMTpD3PzW37HrOZZpNJlxNIws.roa
File: P_UMTpD3PzW37HrOZZpNJlxNIws.roa (raw, json)
Hash identifier: OUeWGAShbIxByLMvJdr61hfceF9AxqMi1QvXBDbNSNk=
Subject key identifier: 3F:F5:0C:4E:90:F7:3F:35:B7:EC:7A:CE:65:9A:4D:26:5C:4D:23:0B
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 018935B82F5447BF1D48BCA9CF7F2B3130B8
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/P_UMTpD3PzW37HrOZZpNJlxNIws.roa
Signing time: Sat 08 Jul 2023 13:36:50 +0000
ROA not before: Sat 08 Jul 2023 13:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48106
IP address blocks: 213.109.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 14:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:b8:2f:54:47:bf:1d:48:bc:a9:cf:7f:2b:31:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jul 8 13:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ff50c4e90f73f35b7ec7ace659a4d265c4d230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:fe:1c:67:51:0c:9b:55:51:e3:cb:c8:5a:
63:17:3f:eb:7c:a9:8e:c0:ed:2c:4c:22:8a:f4:ed:
a0:cf:1e:bb:b8:8b:cf:0b:c1:0c:3c:96:20:89:17:
37:5b:39:75:e8:d1:ff:b6:8b:d8:95:36:11:71:46:
05:8f:98:94:09:c1:fd:2e:a4:aa:8f:ea:94:46:30:
f3:75:cf:51:98:64:0e:df:c9:32:e4:8b:37:6b:4f:
b8:db:ba:44:69:b3:59:c2:05:6f:05:15:fc:cb:a3:
f6:86:0c:12:64:fd:0f:99:dd:f1:86:4b:c5:ee:77:
2e:c8:5a:e0:13:04:11:d3:57:d9:c7:eb:bc:4c:23:
da:5f:42:cb:28:11:e8:ac:0a:8a:8a:78:02:38:a1:
38:e1:1c:6f:a0:de:10:92:29:9c:be:e3:aa:0b:b6:
0d:fd:59:52:31:ff:06:e2:0e:fa:c9:ec:e1:a3:1f:
ec:76:8b:92:9b:67:9e:fe:25:13:15:9d:5d:61:49:
0e:3d:d2:b9:e2:51:4f:8d:e9:ca:bb:7b:c6:d4:30:
db:8a:88:b0:37:65:cd:72:ab:6c:79:39:6b:63:ca:
b5:d3:c6:97:34:a5:df:fb:71:b8:1b:07:01:2b:82:
50:bf:3c:e9:56:1a:99:62:48:5c:76:4b:7b:43:cf:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:0C:4E:90:F7:3F:35:B7:EC:7A:CE:65:9A:4D:26:5C:4D:23:0B
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/P_UMTpD3PzW37HrOZZpNJlxNIws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.84.0/24
Signature Algorithm: sha256WithRSAEncryption
40:62:92:3c:3b:85:7c:fd:9b:bc:f6:ca:ab:9a:a7:6a:0e:b9:
14:7d:0f:dd:9a:31:8d:92:dd:42:af:9c:cb:67:cd:d1:fd:36:
26:b3:27:dd:8e:04:79:cd:85:a9:01:f2:b5:6c:bb:7e:df:40:
16:c6:a1:4a:9e:da:01:58:b2:89:42:b5:1a:15:36:ed:48:07:
ae:57:c7:b6:2b:34:12:f2:b2:09:19:e9:29:79:bd:ed:b9:48:
43:71:ef:01:7d:f4:20:53:93:5c:41:95:63:79:e9:e2:fc:66:
ee:36:c8:c3:35:db:56:0e:9f:4e:10:c7:c2:b9:65:75:dc:8b:
3f:81:40:a0:b8:d8:bc:e1:37:70:15:09:01:e4:3d:74:a9:33:
ca:4d:88:5e:b7:7e:03:28:bf:5c:a4:ab:be:52:08:e9:a1:b6:
f2:16:15:8a:3b:5e:8c:d3:02:7c:85:5c:aa:13:72:e3:f1:ee:
59:d6:39:40:05:5e:00:0f:17:3c:09:d9:d6:1b:2d:6c:af:56:
87:1a:65:5f:71:6d:e6:9c:1c:ad:8b:27:20:c9:b0:ad:24:3a:
b9:af:8c:92:a7:65:64:1e:64:41:d3:59:77:5c:f7:9f:c6:79:
43:89:12:e0:f7:be:03:1a:e8:71:a7:69:10:0e:ab:0e:3f:6d:
0c:0c:ed:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk1uC9UR78dSLypz38rMTC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5
N2IxNWIwHhcNMjMwNzA4MTMzNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmY1MGM0ZTkwZjczZjM1YjdlYzdhY2U2NTlhNGQyNjVjNGQyMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLX+HGdRDJtVUePLyFpjFz/rfKmO
wO0sTCKK9O2gzx67uIvPC8EMPJYgiRc3Wzl16NH/tovYlTYRcUYFj5iUCcH9LqSq
j+qURjDzdc9RmGQO38ky5Is3a0+427pEabNZwgVvBRX8y6P2hgwSZP0Pmd3xhkvF
7ncuyFrgEwQR01fZx+u8TCPaX0LLKBHorAqKingCOKE44RxvoN4QkimcvuOqC7YN
/VlSMf8G4g76yezhox/sdouSm2ee/iUTFZ1dYUkOPdK54lFPjenKu3vG1DDbioiw
N2XNcqtseTlrY8q108aXNKXf+3G4GwcBK4JQvzzpVhqZYkhcdkt7Q8/khwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/1DE6Q9z81t+x6zmWaTSZcTSMLMB8GA1UdIwQY
MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt
NjE4MTljNDgwY2JlLzEvUF9VTVRwRDNQelczN0hyT1pacE5KbHhOSXdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl
LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W1UMA0G
CSqGSIb3DQEBCwUAA4IBAQBAYpI8O4V8/Zu89sqrmqdqDrkUfQ/dmjGNkt1Cr5zL
Z83R/TYmsyfdjgR5zYWpAfK1bLt+30AWxqFKntoBWLKJQrUaFTbtSAeuV8e2KzQS
8rIJGekpeb3tuUhDce8BffQgU5NcQZVjeeni/GbuNsjDNdtWDp9OEMfCuWV13Is/
gUCguNi84TdwFQkB5D10qTPKTYhet34DKL9cpKu+UgjpobbyFhWKO16M0wJ8hVyq
E3Lj8e5Z1jlABV4ADxc8CdnWGy1sr1aHGmVfcW3mnBytiycgybCtJDq5r4ySp2Vk
HmRB01l3XPefxnlDiRLg974DGuhxp2kQDqsOP20MDO0K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:58 2024 by rpki-client on console-ams.rpki-client.org