Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/Fz8YfRDljwJ4HNeiz0FYWtA6s38.roa
File: Fz8YfRDljwJ4HNeiz0FYWtA6s38.roa (raw, json)
Hash identifier: mSV+6yW6pgUFXEBAYFzIeOb/8D5JzaO3peZkGUp2J+8=
Subject key identifier: 17:3F:18:7D:10:E5:8F:02:78:1C:D7:A2:CF:41:58:5A:D0:3A:B3:7F
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 0186BDAD5CFD2C31580172F069F47CDB39AB
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/Fz8YfRDljwJ4HNeiz0FYWtA6s38.roa
Signing time: Tue 07 Mar 2023 20:05:00 +0000
ROA not before: Tue 07 Mar 2023 20:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212472
IP address blocks: 31.12.72.0/24 maxlen: 24
213.163.252.0/23 maxlen: 24
2a12:acc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:ad:5c:fd:2c:31:58:01:72:f0:69:f4:7c:db:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Mar 7 20:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=173f187d10e58f02781cd7a2cf41585ad03ab37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:10:6f:42:cc:66:60:39:1f:93:ab:50:0d:
60:23:ea:b2:08:cc:ab:bb:dd:9e:2e:2b:f7:c7:a8:
05:56:6f:aa:eb:f2:86:bd:fa:74:d5:ae:9e:2c:62:
9a:fb:73:1d:9c:e3:90:0f:95:7a:40:82:8e:c2:6a:
77:38:2e:a7:a2:ab:d6:a9:80:80:49:71:82:9a:1f:
fd:94:1c:27:8c:e0:0e:e0:12:b8:b3:d6:93:04:72:
20:77:42:a2:37:8d:88:63:54:02:a1:94:ca:49:9b:
01:59:b3:5f:a0:93:43:66:b2:cc:8b:e2:67:59:48:
77:33:bd:7d:0d:6c:af:d5:2a:c2:d5:18:d9:14:9b:
82:22:88:59:a7:a3:bd:9a:70:97:5f:78:53:ca:50:
e8:d0:9b:88:19:6e:f1:f8:a3:4f:87:d7:10:d7:fd:
2d:a2:0a:1c:03:9b:58:a4:13:a0:63:85:d5:b3:63:
d5:13:b7:7f:b6:9a:d9:05:5e:42:dd:72:e3:8d:2f:
d8:c1:e9:22:7b:f7:74:28:96:4c:da:27:50:db:10:
17:b3:d3:49:1f:4e:37:58:a2:2d:7d:64:9c:ce:20:
db:68:8a:5f:42:52:f8:2b:b5:6c:0c:a9:a5:f7:6d:
27:9b:cc:b8:84:cc:2d:57:ab:ac:00:38:e5:80:a1:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:18:7D:10:E5:8F:02:78:1C:D7:A2:CF:41:58:5A:D0:3A:B3:7F
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/Fz8YfRDljwJ4HNeiz0FYWtA6s38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.72.0/24
213.163.252.0/23
IPv6:
2a12:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
00:73:32:51:b0:46:7f:06:23:8d:9e:02:3d:a2:86:d2:62:fe:
c8:87:fe:58:77:6d:3e:e7:c7:77:a5:fe:26:04:8d:82:78:1d:
71:a8:8f:ef:a3:1b:bf:01:50:94:34:11:b8:36:b4:80:6f:ab:
07:95:fb:1d:ad:d1:45:8a:f2:d4:17:b8:13:6e:5c:11:2c:7a:
18:31:80:0e:5f:85:b8:42:a6:35:23:54:3b:9a:b0:7c:fc:c5:
71:e3:3c:6f:fb:61:69:4b:32:97:24:34:fa:65:f0:5e:b5:a0:
6a:f6:58:a4:93:5f:40:a1:8b:77:42:bd:f1:8f:b7:9e:52:85:
ea:96:83:9b:19:1b:58:a0:8d:8b:ca:bf:8d:75:f7:9d:65:99:
8c:9f:08:6e:40:16:f1:e1:cc:56:df:58:f4:6d:de:a5:1e:07:
20:1f:a4:b9:d6:5c:35:44:5b:6a:fc:61:fb:66:c4:66:61:3a:
64:5e:8b:6c:2f:62:3b:8f:69:75:c1:cd:f0:7b:42:eb:a9:e0:
62:5b:b9:80:87:66:ea:06:1c:fc:cb:7a:2e:f0:8d:74:0a:06:
6d:de:6e:84:a6:5e:08:4b:27:02:1e:71:35:da:d9:73:70:46:
24:18:6c:1a:20:fe:02:8a:ea:2e:b2:85:fe:52:8f:8f:e3:e4:
7f:c5:30:66
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYa9rVz9LDFYAXLwafR82zmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2RjYjZkYjlhNzVjMTAxN2ZlZTY3MmY3M2I5NjE3NzFi
NzdjYTEwHhcNMjMwMzA3MjAwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzNmMTg3ZDEwZTU4ZjAyNzgxY2Q3YTJjZjQxNTg1YWQwM2FiMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz0Qb0LMZmA5H5OrUA1gI+qyCMyr
u92eLiv3x6gFVm+q6/KGvfp01a6eLGKa+3MdnOOQD5V6QIKOwmp3OC6noqvWqYCA
SXGCmh/9lBwnjOAO4BK4s9aTBHIgd0KiN42IY1QCoZTKSZsBWbNfoJNDZrLMi+Jn
WUh3M719DWyv1SrC1RjZFJuCIohZp6O9mnCXX3hTylDo0JuIGW7x+KNPh9cQ1/0t
ogocA5tYpBOgY4XVs2PVE7d/tprZBV5C3XLjjS/Ywekie/d0KJZM2idQ2xAXs9NJ
H043WKItfWScziDbaIpfQlL4K7VsDKml920nm8y4hMwtV6usADjlgKErkwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBc/GH0Q5Y8CeBzXos9BWFrQOrN/MB8GA1UdIwQY
MBaAFKB9y225p1wQF/7mcvc7lhdxt3yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEt
Y2I0MGVlMDQ4ZGMwLzEvRno4WWZSRGxqd0o0SE5laXowRllXdEE2czM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEtY2I0MGVlMDQ4ZGMw
LzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAHwxIAwQB
1aP8MA0EAgACMAcDBQMqEqzAMA0GCSqGSIb3DQEBCwUAA4IBAQAAczJRsEZ/BiON
ngI9oobSYv7Ih/5Yd20+58d3pf4mBI2CeB1xqI/voxu/AVCUNBG4NrSAb6sHlfsd
rdFFivLUF7gTblwRLHoYMYAOX4W4QqY1I1Q7mrB8/MVx4zxv+2FpSzKXJDT6ZfBe
taBq9likk19AoYt3Qr3xj7eeUoXqloObGRtYoI2Lyr+NdfedZZmMnwhuQBbx4cxW
31j0bd6lHgcgH6S51lw1RFtq/GH7ZsRmYTpkXotsL2I7j2l1wc3we0LrqeBiW7mA
h2bqBhz8y3ou8I10CgZt3m6Epl4ISycCHnE12tlzcEYkGGwaIP4CiuousoX+Uo+P
4+R/xTBm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:44 2024 by rpki-client on console-fra.rpki-client.org