Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/PAYWZAgCdh_0F06chDkWMcppVIc.roa
File: PAYWZAgCdh_0F06chDkWMcppVIc.roa (raw, json)
Hash identifier: WpETeCruIz2HqmVOw3SwCiwkq4Q0MrYEv6NKp3w5VnE=
Subject key identifier: 3C:06:16:64:08:02:76:1F:F4:17:4E:9C:84:39:16:31:CA:69:54:87
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0186A720F574CD7995EF0FE8D4779F9D0C2C
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/PAYWZAgCdh_0F06chDkWMcppVIc.roa
Signing time: Fri 03 Mar 2023 11:00:00 +0000
ROA not before: Fri 03 Mar 2023 11:00:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.0.0/20 maxlen: 24
212.104.32.0/20 maxlen: 20
212.104.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 09:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:20:f5:74:cd:79:95:ef:0f:e8:d4:77:9f:9d:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Mar 3 11:00:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c0616640802761ff4174e9c84391631ca695487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:20:cb:70:94:a3:ec:60:6c:a7:09:c9:8d:
13:bf:a5:67:27:28:2b:85:a9:34:4f:e7:1f:ce:11:
16:dd:b8:9c:fa:67:7c:9d:29:47:3b:ab:1d:70:47:
93:be:9d:04:43:a8:65:8c:c7:9c:91:92:ae:b4:83:
9e:dd:19:1a:aa:f3:c9:c1:40:b4:cb:dd:82:6b:f1:
64:97:46:98:0b:78:6e:8c:2c:a8:fe:47:be:53:23:
ec:e6:1c:5a:9b:b0:08:12:1f:08:4e:e3:27:e5:f3:
1f:d9:a0:58:65:dc:bc:b1:f0:4e:c9:ff:22:e1:98:
9f:2c:01:a2:09:15:44:15:30:32:82:5a:31:c5:77:
26:cd:36:4b:f3:1b:64:bb:b7:6e:50:c9:1c:d0:0a:
c7:5d:39:39:25:11:21:8d:73:6b:ba:d4:9a:fa:87:
d3:a4:15:f6:d5:42:ed:58:cc:83:a0:86:e5:25:39:
b1:a3:54:e3:38:35:b4:35:49:f4:65:3b:97:ca:f8:
8b:87:6e:4a:3c:96:6c:f1:fc:2e:e1:6d:d0:a7:f5:
a5:70:74:e1:b7:cc:9f:01:79:33:2a:b0:03:05:45:
cd:4b:eb:c3:29:be:13:c7:7d:0f:75:15:bd:cf:a1:
0c:cd:46:a5:e4:d5:07:91:ae:b8:cc:5f:24:1a:89:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:16:64:08:02:76:1F:F4:17:4E:9C:84:39:16:31:CA:69:54:87
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/PAYWZAgCdh_0F06chDkWMcppVIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/20
212.104.32.0/20
Signature Algorithm: sha256WithRSAEncryption
01:04:4e:c5:6c:8c:e5:b0:70:f5:2a:1a:9e:83:0b:c5:6e:49:
2f:f9:93:fb:e0:bd:13:e5:a4:88:9b:c8:52:1f:22:3d:4a:40:
50:5c:47:cc:3b:e8:61:1f:e8:5c:a5:d0:aa:f6:49:39:d7:7a:
40:69:8b:66:d9:eb:98:e1:b8:43:6c:50:5f:a7:e8:9f:3e:3f:
0c:a7:fe:f0:f3:92:f9:49:68:35:06:d7:9a:65:4d:22:c3:a2:
d0:a7:4c:2b:ff:10:8d:ac:23:fd:dd:49:c9:08:d5:d5:e7:98:
a4:01:2f:54:e4:f9:94:3d:09:76:83:f9:6b:74:24:30:28:51:
70:c7:9c:22:99:f4:4f:c1:0d:63:de:e3:3c:4e:d9:e0:00:fe:
6d:2a:23:26:6c:ff:d0:2e:b7:bd:79:d9:ec:92:93:7b:67:e9:
65:16:ad:ab:1b:5f:8f:1b:e5:42:ab:54:12:d5:a7:91:f5:ec:
99:54:f4:07:1e:ba:94:ff:3f:f2:32:f5:46:1a:0b:86:25:63:
64:0f:eb:9f:d5:ea:33:42:59:d2:5c:a2:dc:f3:a3:4f:0e:6f:
02:10:4e:bb:76:b1:eb:88:14:d7:4c:31:38:19:41:7e:44:39:
ea:24:36:59:2e:cc:11:b5:58:2f:eb:84:8c:87:07:8d:13:65:
2c:03:a7:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYanIPV0zXmV7w/o1HefnQwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjMwMzAzMTEwMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzA2MTY2NDA4MDI3NjFmZjQxNzRlOWM4NDM5MTYzMWNhNjk1NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Mgy3CUo+xgbKcJyY0Tv6VnJygr
hak0T+cfzhEW3bic+md8nSlHO6sdcEeTvp0EQ6hljMeckZKutIOe3RkaqvPJwUC0
y92Ca/Fkl0aYC3hujCyo/ke+UyPs5hxam7AIEh8ITuMn5fMf2aBYZdy8sfBOyf8i
4ZifLAGiCRVEFTAygloxxXcmzTZL8xtku7duUMkc0ArHXTk5JREhjXNrutSa+ofT
pBX21ULtWMyDoIblJTmxo1TjODW0NUn0ZTuXyviLh25KPJZs8fwu4W3Qp/WlcHTh
t8yfAXkzKrADBUXNS+vDKb4Tx30PdRW9z6EMzUal5NUHka64zF8kGolIwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDwGFmQIAnYf9BdOnIQ5FjHKaVSHMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvUEFZV1pBZ0NkaF8wRjA2Y2hEa1dNY3BwVkljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQE1GgAAwQE
1GggMA0GCSqGSIb3DQEBCwUAA4IBAQABBE7FbIzlsHD1KhqegwvFbkkv+ZP74L0T
5aSIm8hSHyI9SkBQXEfMO+hhH+hcpdCq9kk513pAaYtm2euY4bhDbFBfp+ifPj8M
p/7w85L5SWg1BteaZU0iw6LQp0wr/xCNrCP93UnJCNXV55ikAS9U5PmUPQl2g/lr
dCQwKFFwx5wimfRPwQ1j3uM8TtngAP5tKiMmbP/QLre9ednskpN7Z+llFq2rG1+P
G+VCq1QS1aeR9eyZVPQHHrqU/z/yMvVGGguGJWNkD+uf1eozQlnSXKLc86NPDm8C
EE67drHriBTXTDE4GUF+RDnqJDZZLswRtVgv64SMhweNE2UsA6da
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:15 2024 by rpki-client on console-fra.rpki-client.org