Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/OColNYhd4LPXaZJFhxgaobl77Ss.roa
File: OColNYhd4LPXaZJFhxgaobl77Ss.roa (raw, json)
Hash identifier: nmOUodD0PD85IEKzn9IdYwcKfTPBzyncGdFLpTDl+vE=
Subject key identifier: 38:2A:25:35:88:5D:E0:B3:D7:69:92:45:87:18:1A:A1:B9:7B:ED:2B
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0187C72A29216EB83895A9BC7B75B4BE5F29
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/OColNYhd4LPXaZJFhxgaobl77Ss.roa
Signing time: Fri 28 Apr 2023 09:20:41 +0000
ROA not before: Fri 28 Apr 2023 09:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.0.0/20 maxlen: 24
212.104.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 10:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:2a:29:21:6e:b8:38:95:a9:bc:7b:75:b4:be:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Apr 28 09:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382a2535885de0b3d769924587181aa1b97bed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:3a:49:d1:17:ff:7f:fc:a6:1b:ef:7f:0c:
98:d8:55:01:4c:2f:f4:bb:fd:68:b7:7a:87:16:cd:
d8:d8:5f:31:28:8e:54:9c:85:a6:90:0b:2d:80:b9:
06:be:9f:66:be:9c:a5:48:90:a4:68:88:8e:5f:fc:
74:82:1d:93:65:7a:45:68:8a:d3:6c:2a:90:57:6a:
05:5f:52:8e:37:d6:b0:fe:7d:88:99:d9:a9:12:36:
fb:31:b8:99:57:73:2f:c1:cc:c2:63:73:63:f1:53:
cd:f9:a6:eb:8f:67:01:b2:f2:11:be:38:09:12:f3:
85:a3:48:33:db:6a:f8:ed:95:0c:96:df:4c:17:dd:
63:e5:11:cf:fe:40:35:ff:f9:cc:2d:45:9a:54:50:
28:49:67:3e:86:7a:1a:7b:1f:05:9b:76:26:cd:4b:
53:28:5d:7a:4c:0f:25:66:10:4b:fe:f6:e6:82:a8:
cd:a3:c5:1a:e5:fd:50:c3:ea:19:65:80:9b:8a:f0:
bc:73:e1:0f:cf:d2:7e:a7:cd:0e:5c:2e:1c:5b:3b:
9c:e3:1d:df:09:94:78:02:ed:85:b3:3e:03:74:0f:
c1:8f:29:6a:1b:3d:9b:6f:b4:a5:4f:80:6a:04:b7:
e4:5f:3a:a1:f6:56:fc:7a:8f:8d:c6:c1:f8:36:af:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:25:35:88:5D:E0:B3:D7:69:92:45:87:18:1A:A1:B9:7B:ED:2B
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/OColNYhd4LPXaZJFhxgaobl77Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/20
212.104.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:1e:ae:f3:61:3a:ba:aa:aa:b6:a2:18:cf:87:2b:2e:0d:14:
48:01:33:0c:7b:63:25:18:53:be:01:4c:de:f5:b2:73:34:5a:
10:1a:5f:c9:89:b8:f7:00:88:a7:41:3a:c6:d7:ad:bd:34:b6:
e9:5c:3b:f4:7a:a2:ba:06:65:77:c0:12:49:68:49:cc:33:58:
a4:01:02:21:42:ed:22:d0:3c:72:75:3a:ba:70:6f:40:cc:19:
b9:40:f2:bd:5e:be:a3:f4:b3:ce:72:f8:41:65:15:8e:6d:09:
17:a4:a4:a7:f6:69:a1:c0:ae:d2:f0:9f:85:29:b3:77:9e:64:
2e:88:6f:67:b8:ea:20:13:91:ee:70:06:a8:43:10:5c:6a:e9:
7e:34:3e:a6:7f:a7:9b:d6:c4:3f:9a:e6:5f:4d:81:bf:e8:f3:
2b:25:57:b5:c3:d0:7f:fa:4a:78:43:c8:52:c3:83:d0:7f:48:
6e:e3:80:7a:55:b7:9e:39:62:09:8e:68:24:e3:a6:65:a3:86:
e2:6f:41:08:3a:5a:ed:7f:d1:f7:e7:4e:e4:6d:86:0c:c3:b8:
91:95:8b:9c:7e:79:d5:28:a7:1d:df:a7:fd:ea:3d:12:9e:56:
32:2b:44:e7:1f:3f:32:41:06:1f:54:44:a1:3d:26:0f:1a:bf:
ad:e4:91:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfHKikhbrg4lam8e3W0vl8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjMwNDI4MDkyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODJhMjUzNTg4NWRlMGIzZDc2OTkyNDU4NzE4MWFhMWI5N2JlZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL06SdEX/3/8phvvfwyY2FUBTC/0
u/1ot3qHFs3Y2F8xKI5UnIWmkAstgLkGvp9mvpylSJCkaIiOX/x0gh2TZXpFaIrT
bCqQV2oFX1KON9aw/n2ImdmpEjb7MbiZV3MvwczCY3Nj8VPN+abrj2cBsvIRvjgJ
EvOFo0gz22r47ZUMlt9MF91j5RHP/kA1//nMLUWaVFAoSWc+hnoaex8Fm3YmzUtT
KF16TA8lZhBL/vbmgqjNo8Ua5f1Qw+oZZYCbivC8c+EPz9J+p80OXC4cWzuc4x3f
CZR4Au2Fsz4DdA/BjylqGz2bb7SlT4BqBLfkXzqh9lb8eo+NxsH4Nq9WlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDgqJTWIXeCz12mSRYcYGqG5e+0rMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvT0NvbE5ZaGQ0TFBYYVpKRmh4Z2FvYmw3N1NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQE1GgAAwQD
1GgoMA0GCSqGSIb3DQEBCwUAA4IBAQCpHq7zYTq6qqq2ohjPhysuDRRIATMMe2Ml
GFO+AUze9bJzNFoQGl/Jibj3AIinQTrG1629NLbpXDv0eqK6BmV3wBJJaEnMM1ik
AQIhQu0i0DxydTq6cG9AzBm5QPK9Xr6j9LPOcvhBZRWObQkXpKSn9mmhwK7S8J+F
KbN3nmQuiG9nuOogE5HucAaoQxBcaul+ND6mf6eb1sQ/muZfTYG/6PMrJVe1w9B/
+kp4Q8hSw4PQf0hu44B6VbeeOWIJjmgk46Zlo4bib0EIOlrtf9H3507kbYYMw7iR
lYucfnnVKKcd36f96j0SnlYyK0TnHz8yQQYfVEShPSYPGr+t5JE9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:15 2024 by rpki-client on console-fra.rpki-client.org