Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/EvMt5VAHnCLbT_6B2emByoSXjko.roa
File: EvMt5VAHnCLbT_6B2emByoSXjko.roa (raw, json)
Hash identifier: 4chCCBGl6auQQoMduFLe9MJ2AelWgkUTzesQOiRpSNI=
Subject key identifier: 12:F3:2D:E5:50:07:9C:22:DB:4F:FE:81:D9:E9:81:CA:84:97:8E:4A
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0187C738BC8753811DB453DEE16676811AEC
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/EvMt5VAHnCLbT_6B2emByoSXjko.roa
Signing time: Fri 28 Apr 2023 09:36:36 +0000
ROA not before: Fri 28 Apr 2023 09:36:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28716
IP address blocks: 212.104.56.0/21 maxlen: 24
212.104.16.0/20 maxlen: 24
212.104.32.0/21 maxlen: 21
212.104.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:38:bc:87:53:81:1d:b4:53:de:e1:66:76:81:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Apr 28 09:36:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12f32de550079c22db4ffe81d9e981ca84978e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:38:83:38:df:1a:0a:3f:39:72:61:c2:5b:
9d:4c:61:15:66:a2:b1:22:1f:47:57:58:fc:d9:3e:
33:be:b7:26:24:fd:a0:ce:41:0e:a1:3b:e2:2a:bd:
94:29:b3:99:1d:9d:fa:e3:d1:40:d7:26:cb:00:c3:
5a:10:47:9a:34:c7:bb:45:6e:6e:38:86:8f:ba:e8:
2e:4c:fa:b4:27:3a:97:ce:1b:40:37:e1:72:50:a0:
11:09:19:eb:e2:ec:11:c5:40:8c:e8:d9:2c:e3:7a:
37:92:9b:e6:88:92:fc:bc:f6:30:ae:6c:14:b4:01:
08:95:7c:f3:45:1a:fb:a3:0a:63:03:3f:d1:9a:a7:
aa:e4:de:95:4b:c4:9a:c1:0f:8d:23:4b:38:9d:4e:
3e:71:13:ec:27:9c:8f:84:d0:7d:75:31:9e:78:7b:
dd:87:06:91:f5:0f:cd:b9:95:55:e9:ca:71:af:8c:
7d:af:4a:82:46:48:ce:f3:94:b2:a8:60:cc:6f:fe:
a1:75:41:5c:3e:7d:75:7f:80:70:3f:6d:7d:24:cd:
35:25:8f:00:ba:38:f8:7d:b9:ad:35:e5:4f:52:35:
66:c7:fc:1c:46:54:50:81:b2:11:90:a9:42:05:26:
b8:66:a8:90:23:4f:0d:d4:12:2b:cc:a4:ad:66:94:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:2D:E5:50:07:9C:22:DB:4F:FE:81:D9:E9:81:CA:84:97:8E:4A
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/EvMt5VAHnCLbT_6B2emByoSXjko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.16.0-212.104.39.255
212.104.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:58:81:a9:37:8b:cd:b0:b0:29:8a:6a:cd:d6:44:61:65:99:
9c:22:9e:b1:af:0b:2a:94:41:8b:30:93:1e:41:61:82:16:df:
26:0d:8d:e5:2a:2f:cd:b9:cf:ba:10:72:77:b8:7f:00:60:00:
11:07:11:92:8d:16:88:c5:ec:ac:f3:fe:1e:0f:33:8d:ba:2b:
74:50:45:3f:33:65:72:c7:df:a0:03:f1:ff:3d:db:7c:54:35:
b0:ae:48:9a:41:e1:c6:34:fd:fd:c6:d3:dd:d0:fe:ad:25:8a:
03:7c:87:53:a4:51:8a:ab:34:f7:ff:7f:15:6c:2e:21:e4:11:
e9:04:03:61:91:8e:0c:d9:82:b5:4e:33:50:6a:2a:04:25:a5:
11:9b:a6:b9:49:74:4f:95:d1:52:2c:66:b0:dd:03:5f:50:7e:
6b:12:64:ab:65:40:f6:a0:c1:11:25:c3:8d:7f:67:74:68:ec:
51:36:de:05:63:c4:7d:06:be:e0:06:cb:8e:ad:b9:65:86:29:
8c:bc:ae:58:71:87:ef:49:11:37:60:81:3c:cd:02:bf:df:39:
6e:ce:45:bb:8a:bd:2a:ac:cf:95:59:0d:74:48:41:30:5e:61:
61:d6:58:29:da:1a:be:d1:2f:3a:82:e5:cb:2c:77:85:89:a4:
7c:1b:4d:76
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYfHOLyHU4EdtFPe4WZ2gRrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjMwNDI4MDkzNjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmYzMmRlNTUwMDc5YzIyZGI0ZmZlODFkOWU5ODFjYTg0OTc4ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZk4gzjfGgo/OXJhwludTGEVZqKx
Ih9HV1j82T4zvrcmJP2gzkEOoTviKr2UKbOZHZ3649FA1ybLAMNaEEeaNMe7RW5u
OIaPuuguTPq0JzqXzhtAN+FyUKARCRnr4uwRxUCM6Nks43o3kpvmiJL8vPYwrmwU
tAEIlXzzRRr7owpjAz/Rmqeq5N6VS8SawQ+NI0s4nU4+cRPsJ5yPhNB9dTGeeHvd
hwaR9Q/NuZVV6cpxr4x9r0qCRkjO85SyqGDMb/6hdUFcPn11f4BwP219JM01JY8A
ujj4fbmtNeVPUjVmx/wcRlRQgbIRkKlCBSa4ZqiQI08N1BIrzKStZpQi2wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBLzLeVQB5wi20/+gdnpgcqEl45KMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvRXZNdDVWQUhuQ0xiVF82QjJlbUJ5b1NYamtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBATUaBAD
BAPUaCADBATUaDAwDQYJKoZIhvcNAQELBQADggEBAJ5Ygak3i82wsCmKas3WRGFl
mZwinrGvCyqUQYswkx5BYYIW3yYNjeUqL825z7oQcne4fwBgABEHEZKNFojF7Kzz
/h4PM426K3RQRT8zZXLH36AD8f8923xUNbCuSJpB4cY0/f3G093Q/q0ligN8h1Ok
UYqrNPf/fxVsLiHkEekEA2GRjgzZgrVOM1BqKgQlpRGbprlJdE+V0VIsZrDdA19Q
fmsSZKtlQPagwRElw41/Z3Ro7FE23gVjxH0GvuAGy46tuWWGKYy8rlhxh+9JETdg
gTzNAr/fOW7ORbuKvSqsz5VZDXRIQTBeYWHWWCnaGr7RLzqC5cssd4WJpHwbTXY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-fra.rpki-client.org