Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/EtJ4YVJRZeJAo63zmv9qCoWRk5w.roa
File: EtJ4YVJRZeJAo63zmv9qCoWRk5w.roa (raw, json)
Hash identifier: O+q/2jVfqumuaunh6Y82MZlUbdvmG1wx3ug5KoDnnf0=
Subject key identifier: 12:D2:78:61:52:51:65:E2:40:A3:AD:F3:9A:FF:6A:0A:85:91:93:9C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D9411C32A1D661B0D7ED27C193D89D0
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/EtJ4YVJRZeJAo63zmv9qCoWRk5w.roa
Signing time: Sun 01 Jan 2023 13:44:58 +0000
ROA not before: Sun 01 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 88.151.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:11:c3:2a:1d:66:1b:0d:7e:d2:7c:19:3d:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d27861525165e240a3adf39aff6a0a8591939c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:9f:78:35:0f:eb:9b:a3:50:5a:32:eb:be:
4a:d1:fc:8c:7f:6c:2b:44:ed:00:f8:04:66:64:18:
e9:05:5c:cd:a8:1a:9f:37:b5:26:26:3b:ab:e8:56:
a0:be:73:5a:85:3f:7a:30:eb:64:f4:ae:92:b6:40:
a5:83:ab:2e:99:11:79:d8:b4:7b:85:f2:ef:f6:f5:
40:1c:89:1f:a6:3a:75:0c:a7:75:12:fe:db:72:1c:
af:3c:8b:64:ea:38:c2:1f:52:a8:9e:98:58:b5:d6:
22:29:ca:69:3c:65:7e:5a:34:b8:83:98:9d:9c:3b:
01:1b:f9:33:de:b5:8d:1f:b1:83:6f:0f:d4:1a:33:
67:20:e7:3e:a8:53:94:89:0d:88:76:94:1c:84:a6:
99:c7:7d:43:3d:e5:b1:a6:a1:5b:75:96:03:51:07:
db:4b:05:39:40:59:28:f0:89:fc:ee:ee:54:80:c8:
3c:c3:2d:bc:a4:aa:bf:b8:a3:21:aa:cd:ba:b8:da:
2b:93:dc:99:55:d5:e6:62:4a:13:7d:5e:14:d6:e7:
16:01:f6:cd:66:25:17:17:b5:57:d8:54:c5:e6:ba:
60:fa:4a:02:b0:b3:60:6c:e3:0c:b1:9a:50:07:8e:
5b:b6:e7:39:0c:93:8e:94:3b:d3:ea:a0:e1:ba:18:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:78:61:52:51:65:E2:40:A3:AD:F3:9A:FF:6A:0A:85:91:93:9C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/EtJ4YVJRZeJAo63zmv9qCoWRk5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:09:c8:21:6a:31:4f:95:b5:b9:f3:af:6e:7e:76:a8:44:fb:
25:99:20:18:39:ef:b0:18:c9:2d:81:1b:7e:53:d9:52:58:0d:
88:9b:b5:cc:3b:1c:25:13:88:47:d5:f3:ac:ed:a5:f8:99:ce:
cd:be:22:c8:bf:6c:32:83:20:58:60:38:d4:0b:4f:c0:6b:b8:
43:44:fe:08:e1:61:3b:26:d4:f2:40:5f:c5:25:45:6a:8d:78:
88:2c:c7:00:9f:98:a1:60:4e:3b:b1:1b:7e:1f:30:e6:8e:e1:
e5:79:3e:f3:57:4a:4b:88:a4:98:8a:9a:c8:d1:0f:d9:60:eb:
4f:14:b1:c4:eb:b0:34:4e:d6:2f:bb:4e:2d:40:db:03:3f:2d:
48:bb:e0:d8:15:50:b8:07:70:75:0b:aa:78:81:27:19:ab:1b:
de:4a:0e:85:c3:1e:f0:f7:3f:3f:ea:ad:ba:de:47:ac:2c:f0:
66:12:1a:07:13:65:9c:ae:84:bc:3a:09:8e:78:df:b6:e3:c5:
a9:7e:75:1c:c7:1c:0f:fa:e2:6a:3d:0f:a9:80:42:41:4a:c6:
d7:3f:11:b0:96:ef:65:25:71:e3:d9:b4:e1:97:86:9e:8b:6c:
9f:2c:95:04:f4:57:a1:59:14:5b:95:2b:f3:7c:2d:cc:e5:0c:
1f:df:b0:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlBHDKh1mGw1+0nwZPYnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTAxMTM0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQyNzg2MTUyNTE2NWUyNDBhM2FkZjM5YWZmNmEwYTg1OTE5MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+ufeDUP65ujUFoy675K0fyMf2wr
RO0A+ARmZBjpBVzNqBqfN7UmJjur6FagvnNahT96MOtk9K6StkClg6sumRF52LR7
hfLv9vVAHIkfpjp1DKd1Ev7bchyvPItk6jjCH1KonphYtdYiKcppPGV+WjS4g5id
nDsBG/kz3rWNH7GDbw/UGjNnIOc+qFOUiQ2IdpQchKaZx31DPeWxpqFbdZYDUQfb
SwU5QFko8In87u5UgMg8wy28pKq/uKMhqs26uNork9yZVdXmYkoTfV4U1ucWAfbN
ZiUXF7VX2FTF5rpg+koCsLNgbOMMsZpQB45btuc5DJOOlDvT6qDhuhhLXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLSeGFSUWXiQKOt85r/agqFkZOcMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvRXRKNFlWSlJaZUpBbzYzem12OXFDb1dSazV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfHMA0G
CSqGSIb3DQEBCwUAA4IBAQCtCcghajFPlbW5869ufnaoRPslmSAYOe+wGMktgRt+
U9lSWA2Im7XMOxwlE4hH1fOs7aX4mc7NviLIv2wygyBYYDjUC0/Aa7hDRP4I4WE7
JtTyQF/FJUVqjXiILMcAn5ihYE47sRt+HzDmjuHleT7zV0pLiKSYiprI0Q/ZYOtP
FLHE67A0TtYvu04tQNsDPy1Iu+DYFVC4B3B1C6p4gScZqxveSg6Fwx7w9z8/6q26
3kesLPBmEhoHE2WcroS8OgmOeN+248WpfnUcxxwP+uJqPQ+pgEJBSsbXPxGwlu9l
JXHj2bThl4aei2yfLJUE9FehWRRblSvzfC3M5Qwf37AF
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:55 2024 by rpki-client on console-fra.rpki-client.org