Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mqtqPeDvkdX8iw45bXYzBsuNHvE.roa
File: mqtqPeDvkdX8iw45bXYzBsuNHvE.roa (raw, json)
Hash identifier: JxPK9e+qZLmfHQOnsuN+gnQ068HOn+MtVQeS9yK7wHY=
Subject key identifier: 9A:AB:6A:3D:E0:EF:91:D5:FC:8B:0E:39:6D:76:33:06:CB:8D:1E:F1
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01867AEB7814DAAF9FC397361D3AAC9B691D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mqtqPeDvkdX8iw45bXYzBsuNHvE.roa
Signing time: Wed 22 Feb 2023 20:58:17 +0000
ROA not before: Wed 22 Feb 2023 20:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 217.25.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:eb:78:14:da:af:9f:c3:97:36:1d:3a:ac:9b:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Feb 22 20:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aab6a3de0ef91d5fc8b0e396d763306cb8d1ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:6b:20:7d:0e:58:11:e4:ac:ba:09:db:3f:
7d:16:50:da:1e:a7:d2:f0:e9:94:96:ca:52:ea:d8:
64:b6:80:b0:58:a4:7f:a8:4f:0d:6d:9c:85:a4:7d:
9f:57:6b:b5:a8:f7:0a:87:60:0d:ab:e5:da:c2:40:
a0:1f:85:6f:cc:4b:40:4d:37:08:22:c8:7e:34:9b:
91:fe:fa:70:d8:dd:cc:b8:78:de:3d:1f:13:fb:0a:
c4:89:5f:07:a8:c5:82:26:99:03:0a:d6:8a:2a:cf:
44:83:9d:72:b1:28:50:63:53:3d:20:51:03:01:1e:
fe:79:83:7d:d4:40:44:c6:03:db:2e:cf:ee:e7:6a:
28:f2:23:e9:e9:aa:d3:1f:8b:18:71:9a:43:ba:1e:
34:52:86:f0:68:f5:91:9d:83:17:ab:1e:9f:40:8c:
b3:9b:c1:47:25:93:37:bf:19:49:71:e4:c2:1e:3c:
31:b9:75:ab:4e:ec:8f:f1:5c:22:76:f5:f8:19:87:
34:51:02:3d:a4:72:c9:30:4d:a7:5e:94:05:96:ff:
f8:19:35:34:d2:30:47:7d:a4:08:a3:ca:1d:44:60:
20:8f:dc:7c:84:c8:7b:04:7e:72:8e:4d:76:ee:34:
5e:b1:98:89:ae:c6:79:2b:4d:6a:80:87:c0:b2:80:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:6A:3D:E0:EF:91:D5:FC:8B:0E:39:6D:76:33:06:CB:8D:1E:F1
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mqtqPeDvkdX8iw45bXYzBsuNHvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4d:a2:0f:6c:d7:9b:de:74:d9:f5:19:62:39:60:cb:02:42:
fe:55:ec:de:20:16:b0:a4:cf:91:9f:b1:f8:f9:92:33:a8:72:
69:01:4c:47:fe:bd:21:b8:54:16:9e:0e:73:db:c6:45:fb:cc:
6e:e4:0a:a7:c0:4f:55:ed:0c:db:4a:84:71:c0:7f:d1:e6:2a:
cb:f0:b2:11:b7:8b:89:09:8d:cc:e8:dd:92:7e:95:32:8e:ff:
59:43:e3:23:65:fc:96:6d:c9:1c:3e:96:39:75:18:bf:e4:c7:
43:2c:5b:00:77:88:31:12:d6:31:9c:ed:eb:9d:3e:f9:68:37:
80:4a:c9:df:ca:e0:77:6b:b7:b6:cf:cd:b6:4f:44:78:fc:60:
8c:1c:6c:ef:60:6b:98:ff:57:8f:03:73:e9:f2:f3:48:fe:9d:
a0:48:27:15:7b:99:49:e0:67:47:02:34:2b:ed:14:ce:bd:fc:
d4:8d:61:7b:d4:bc:cf:2a:33:bc:c6:f2:e8:79:97:b1:65:02:
97:2e:47:ca:10:94:de:a5:c6:56:5a:f3:11:9f:c0:b9:26:19:
10:35:f3:42:e2:4e:dc:fe:e5:97:a9:51:6b:96:36:34:27:ba:
d3:35:a1:5a:fe:79:28:97:6d:f2:46:a5:cf:fa:ce:31:a4:08:
bb:b9:94:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ663gU2q+fw5c2HTqsm2kdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwMjIyMjA1ODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWFiNmEzZGUwZWY5MWQ1ZmM4YjBlMzk2ZDc2MzMwNmNiOGQxZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokJrIH0OWBHkrLoJ2z99FlDaHqfS
8OmUlspS6thktoCwWKR/qE8NbZyFpH2fV2u1qPcKh2ANq+XawkCgH4VvzEtATTcI
Ish+NJuR/vpw2N3MuHjePR8T+wrEiV8HqMWCJpkDCtaKKs9Eg51ysShQY1M9IFED
AR7+eYN91EBExgPbLs/u52oo8iPp6arTH4sYcZpDuh40UobwaPWRnYMXqx6fQIyz
m8FHJZM3vxlJceTCHjwxuXWrTuyP8VwidvX4GYc0UQI9pHLJME2nXpQFlv/4GTU0
0jBHfaQIo8odRGAgj9x8hMh7BH5yjk127jResZiJrsZ5K01qgIfAsoALzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqraj3g75HV/IsOOW12MwbLjR7xMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvbXF0cVBlRHZrZFg4aXc0NWJYWXpCc3VOSHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RkMMA0G
CSqGSIb3DQEBCwUAA4IBAQCYTaIPbNeb3nTZ9RliOWDLAkL+VezeIBawpM+Rn7H4
+ZIzqHJpAUxH/r0huFQWng5z28ZF+8xu5AqnwE9V7QzbSoRxwH/R5irL8LIRt4uJ
CY3M6N2SfpUyjv9ZQ+MjZfyWbckcPpY5dRi/5MdDLFsAd4gxEtYxnO3rnT75aDeA
SsnfyuB3a7e2z822T0R4/GCMHGzvYGuY/1ePA3Pp8vNI/p2gSCcVe5lJ4GdHAjQr
7RTOvfzUjWF71LzPKjO8xvLoeZexZQKXLkfKEJTepcZWWvMRn8C5JhkQNfNC4k7c
/uWXqVFrljY0J7rTNaFa/nkol23yRqXP+s4xpAi7uZQM
Generated at Sat Jul 22 12:33:42 2023 by rpki-client on console-fra.rpki-client.org