Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/NoSPIaltNLYwy_giXE_dvaTVo-o.roa
File: NoSPIaltNLYwy_giXE_dvaTVo-o.roa (raw, json)
Hash identifier: l74YMz627HwBRhUUBpHEMriPDtRIPqMB/hpQcMvueHE=
Subject key identifier: 36:84:8F:21:A9:6D:34:B6:30:CB:F8:22:5C:4F:DD:BD:A4:D5:A3:EA
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01856C813942C699BA32D2028EAC9613A9CD
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/NoSPIaltNLYwy_giXE_dvaTVo-o.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34970
IP address blocks: 212.103.22.0/23 maxlen: 24
212.103.24.0/24 maxlen: 24
212.103.28.0/24 maxlen: 24
212.103.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:39:42:c6:99:ba:32:d2:02:8e:ac:96:13:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36848f21a96d34b630cbf8225c4fddbda4d5a3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:47:ef:18:17:8c:bf:5c:1d:0a:9c:8f:66:
0d:de:30:dd:f3:d7:a3:87:67:44:4f:a2:aa:a6:5b:
09:a6:93:ba:e6:37:0f:fb:0d:dd:e5:40:f7:c0:6e:
7f:b7:79:5e:9b:e5:a3:a5:34:4a:23:92:00:a3:73:
2f:ff:22:62:60:4d:d0:2a:3d:15:37:63:6b:a7:94:
62:e4:60:c5:35:4c:73:2e:b5:e1:e3:24:32:28:19:
aa:29:74:e2:a9:bd:06:fa:9a:b2:4c:cd:68:9c:6b:
44:30:a9:18:68:76:27:87:8f:d5:4d:2e:98:37:ba:
c4:bf:e4:d0:4c:f3:88:3f:33:70:1d:a2:36:ab:8d:
18:f9:42:f6:25:3f:a6:9d:cb:a3:32:76:63:1c:a7:
9e:31:80:ec:b5:e8:9e:59:50:25:25:7c:1b:81:90:
e4:50:56:f4:93:64:5a:8b:67:ef:d0:c1:a7:25:a2:
5b:3c:19:59:dc:62:5e:10:88:a7:b3:71:b2:92:4a:
7d:5e:44:39:fa:d6:ed:ca:17:26:0e:cd:51:4d:15:
d8:54:fd:2d:1c:7e:94:0f:cb:d0:4f:43:bf:c1:18:
24:28:cd:43:4a:69:d4:70:99:6a:3b:11:a5:cf:88:
03:91:74:da:cd:5e:56:51:74:22:2a:98:86:ad:92:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:8F:21:A9:6D:34:B6:30:CB:F8:22:5C:4F:DD:BD:A4:D5:A3:EA
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/NoSPIaltNLYwy_giXE_dvaTVo-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.22.0-212.103.25.255
212.103.28.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d9:b0:60:1b:d9:88:29:6f:67:f6:80:13:3c:8b:0a:92:13:
a5:b7:82:e0:94:14:7a:73:db:7c:f6:80:a5:20:fe:77:1e:95:
9a:56:b8:8a:b9:0d:d5:bf:b6:24:b0:2b:f5:66:f2:6f:77:48:
fe:e9:09:19:9b:3b:bd:6a:a9:20:c7:15:df:a3:fa:2d:00:ad:
80:33:ec:a1:0d:64:c8:f2:c0:54:98:15:93:7a:99:8b:55:96:
8f:9e:4b:39:ae:9e:a8:d6:63:e7:0a:94:03:03:b8:d4:04:fa:
cb:9a:72:99:3a:b5:72:58:de:5e:ad:e6:68:01:54:9c:13:f8:
44:51:2b:67:d4:36:fe:76:96:a3:25:88:58:c4:f3:e2:12:f2:
62:96:9a:78:96:67:5d:d8:59:f4:a4:48:1d:64:7c:89:67:43:
2b:cf:b1:ec:65:db:1a:32:0c:a8:da:5d:ab:40:0a:39:1b:b3:
92:af:c8:67:06:ed:17:68:ba:b7:55:37:64:0b:e0:5c:8f:fa:
9d:d0:4a:8e:84:b9:08:3f:1f:f6:31:23:a1:da:19:2a:89:05:
c8:05:a3:83:54:55:7f:a0:e1:af:69:0b:fe:1e:f1:5c:e6:fd:
8a:6a:88:f8:7b:18:e2:d7:01:cb:5a:ff:15:16:1b:b3:ca:5b:
ce:d7:c8:b9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVsgTlCxpm6MtICjqyWE6nNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy
OGIwNDYwHhcNMjMwMTAxMDg0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjg0OGYyMWE5NmQzNGI2MzBjYmY4MjI1YzRmZGRiZGE0ZDVhM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMhH7xgXjL9cHQqcj2YN3jDd89ej
h2dET6KqplsJppO65jcP+w3d5UD3wG5/t3lem+WjpTRKI5IAo3Mv/yJiYE3QKj0V
N2Nrp5Ri5GDFNUxzLrXh4yQyKBmqKXTiqb0G+pqyTM1onGtEMKkYaHYnh4/VTS6Y
N7rEv+TQTPOIPzNwHaI2q40Y+UL2JT+mncujMnZjHKeeMYDsteieWVAlJXwbgZDk
UFb0k2Rai2fv0MGnJaJbPBlZ3GJeEIins3Gykkp9XkQ5+tbtyhcmDs1RTRXYVP0t
HH6UD8vQT0O/wRgkKM1DSmnUcJlqOxGlz4gDkXTazV5WUXQiKpiGrZIv3wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDaEjyGpbTS2MMv4IlxP3b2k1aPqMB8GA1UdIwQY
MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt
NTBkMmI3MGJjZjMxLzEvTm9TUElhbHROTFl3eV9naVhFX2R2YVRWby1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx
LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHUZxYD
BAHUZxgDBADUZxwwDQYJKoZIhvcNAQELBQADggEBAHDZsGAb2Ygpb2f2gBM8iwqS
E6W3guCUFHpz23z2gKUg/ncelZpWuIq5DdW/tiSwK/Vm8m93SP7pCRmbO71qqSDH
Fd+j+i0ArYAz7KENZMjywFSYFZN6mYtVlo+eSzmunqjWY+cKlAMDuNQE+suacpk6
tXJY3l6t5mgBVJwT+ERRK2fUNv52lqMliFjE8+IS8mKWmniWZ13YWfSkSB1kfIln
QyvPsexl2xoyDKjaXatACjkbs5KvyGcG7RdourdVN2QL4FyP+p3QSo6EuQg/H/Yx
I6HaGSqJBcgFo4NUVX+g4a9pC/4e8Vzm/YpqiPh7GOLXActa/xUWG7PKW87XyLk=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:23 2024 by rpki-client on console-fra.rpki-client.org