Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/opprPJ-o50Z-Juku100-JVXDhNw.roa
File: opprPJ-o50Z-Juku100-JVXDhNw.roa (raw, json)
Hash identifier: xkI0AaqGVMpxtJ31GIfgqT833pZ2JXBM94+EPW6XPIM=
Subject key identifier: A2:9A:6B:3C:9F:A8:E7:46:7E:26:E9:2E:D7:4D:3E:25:55:C3:84:DC
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 01856D5D1EB2542700F2AB6248E090377E3E
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/opprPJ-o50Z-Juku100-JVXDhNw.roa
Signing time: Sun 01 Jan 2023 12:44:57 +0000
ROA not before: Sun 01 Jan 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16365
IP address blocks: 212.149.0.0/18 maxlen: 18
212.149.0.0/19 maxlen: 19
212.149.32.0/19 maxlen: 19
2a00:d580:4900::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 21 Apr 2023 14:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:1e:b2:54:27:00:f2:ab:62:48:e0:90:37:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jan 1 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a29a6b3c9fa8e7467e26e92ed74d3e2555c384dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:5c:1d:62:f4:ca:ee:e9:0c:54:51:67:a1:
51:72:31:c2:67:13:6e:de:a6:b5:e5:c3:c0:99:70:
d5:49:e3:3c:90:7a:1f:76:6e:95:4a:72:3c:34:b8:
8c:74:b5:ed:1d:f0:2e:ce:33:d3:7a:a1:11:64:b8:
6f:2e:11:57:21:a0:a3:13:3e:1e:4c:a8:01:ca:fa:
57:1b:30:00:30:12:80:b9:2f:25:74:8d:c9:c8:1a:
ab:57:ca:85:15:10:23:98:fb:c3:61:0a:f9:a5:7e:
f6:ef:ac:33:6d:e1:fd:f1:1b:af:6e:d7:2f:ce:b0:
fa:7e:62:ed:57:d3:4e:b4:cf:9d:93:5d:5b:5a:4e:
73:13:e7:f2:c6:6b:27:56:61:12:ae:48:d4:4c:a9:
30:b5:e7:a7:b2:8c:0d:e4:4a:a4:ea:b0:e9:78:87:
66:bc:70:e1:40:91:8e:f6:12:ba:33:a7:32:97:bd:
37:76:cd:c7:2d:e3:d5:22:09:b0:9c:d4:bc:ae:74:
dd:df:0b:e9:43:1e:a0:93:44:ae:b0:52:83:34:ef:
c2:33:b1:48:44:e8:4e:59:c5:ca:cb:db:08:96:4b:
4b:64:45:51:68:c1:f8:25:9d:f5:6e:a7:e8:6b:8b:
da:b6:10:0f:2e:14:18:7f:5a:00:21:34:52:c2:da:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:6B:3C:9F:A8:E7:46:7E:26:E9:2E:D7:4D:3E:25:55:C3:84:DC
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/opprPJ-o50Z-Juku100-JVXDhNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.149.0.0/18
IPv6:
2a00:d580:4900::/40
Signature Algorithm: sha256WithRSAEncryption
35:7a:ac:89:69:0c:14:a0:94:fd:74:00:66:2b:fe:b6:52:07:
f3:57:b9:5c:c4:25:c7:50:9a:21:3e:b6:cb:08:4b:8f:25:75:
8c:1d:10:89:04:84:cc:93:d3:7c:27:a8:a2:d6:ef:2b:1e:f3:
42:cf:bc:96:8e:42:ff:2f:6e:6c:64:8c:8d:5c:01:6d:ba:07:
e1:67:29:c1:72:cf:ce:f1:37:67:e3:aa:09:42:67:cd:3d:73:
43:ad:bf:f9:ba:53:da:c6:31:58:60:fe:ad:c3:41:1c:96:52:
bd:68:8d:0c:37:74:81:2b:e3:8a:b1:51:cd:69:98:e1:e5:ea:
2e:2c:81:98:9e:eb:33:48:4d:c5:47:c5:ff:14:4d:f1:ee:b5:
4b:9a:b2:ea:be:02:16:21:33:99:0a:7a:69:e8:08:64:ed:d2:
f0:f0:3f:eb:cd:5d:0c:22:4d:3d:8c:a6:01:1d:17:98:26:f8:
3d:4f:6c:64:9e:48:08:d4:d9:7a:73:c7:0e:24:6e:0b:93:8d:
32:64:95:9a:2b:21:0e:7b:97:76:8a:b8:c0:36:3a:fe:e5:2a:
f8:33:1d:cf:8d:18:ad:97:a4:d5:6c:c9:ca:de:41:27:e7:12:
82:e7:44:40:ac:6e:1b:4f:d7:23:dd:47:df:ea:8f:ab:29:1b:
24:c9:c7:80
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVtXR6yVCcA8qtiSOCQN34+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx
ODI1ZWYwHhcNMjMwMTAxMTI0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjlhNmIzYzlmYThlNzQ2N2UyNmU5MmVkNzRkM2UyNTU1YzM4NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1ZcHWL0yu7pDFRRZ6FRcjHCZxNu
3qa15cPAmXDVSeM8kHofdm6VSnI8NLiMdLXtHfAuzjPTeqERZLhvLhFXIaCjEz4e
TKgByvpXGzAAMBKAuS8ldI3JyBqrV8qFFRAjmPvDYQr5pX7276wzbeH98Ruvbtcv
zrD6fmLtV9NOtM+dk11bWk5zE+fyxmsnVmESrkjUTKkwteensowN5Eqk6rDpeIdm
vHDhQJGO9hK6M6cyl703ds3HLePVIgmwnNS8rnTd3wvpQx6gk0SusFKDNO/CM7FI
ROhOWcXKy9sIlktLZEVRaMH4JZ31bqfoa4vathAPLhQYf1oAITRSwto2NQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFKKaazyfqOdGfibpLtdNPiVVw4TcMB8GA1UdIwQY
MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt
NzU0YjYwYzViNTY4LzEvb3BwclBKLW81MFotSnVrdTEwMC1KVlhEaE53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4
LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQG1JUAMA4E
AgACMAgDBgAqANWASTANBgkqhkiG9w0BAQsFAAOCAQEANXqsiWkMFKCU/XQAZiv+
tlIH81e5XMQlx1CaIT62ywhLjyV1jB0QiQSEzJPTfCeootbvKx7zQs+8lo5C/y9u
bGSMjVwBbboH4WcpwXLPzvE3Z+OqCUJnzT1zQ62/+bpT2sYxWGD+rcNBHJZSvWiN
DDd0gSvjirFRzWmY4eXqLiyBmJ7rM0hNxUfF/xRN8e61S5qy6r4CFiEzmQp6aegI
ZO3S8PA/681dDCJNPYymAR0XmCb4PU9sZJ5ICNTZenPHDiRuC5ONMmSVmishDnuX
doq4wDY6/uUq+DMdz40YrZek1WzJyt5BJ+cSgudEQKxuG0/XI91H3+qPqykbJMnH
gA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:31 2024 by rpki-client on console-ams.rpki-client.org