Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/2gtFhcHMF1rvN0QXB-PmN3Mq1IA.roa
File: 2gtFhcHMF1rvN0QXB-PmN3Mq1IA.roa (raw, json)
Hash identifier: IA+N4HT2/B93znORPCqihQ5IYoXRh8KUVIZumEg9aWY=
Subject key identifier: DA:0B:45:85:C1:CC:17:5A:EF:37:44:17:07:E3:E6:37:73:2A:D4:80
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 01856CAF0C1CF593AA04CC51EE1FFEDCD93A
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/2gtFhcHMF1rvN0QXB-PmN3Mq1IA.roa
Signing time: Sun 01 Jan 2023 09:34:49 +0000
ROA not before: Sun 01 Jan 2023 09:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205953
IP address blocks: 212.64.219.0/24 maxlen: 24
212.64.221.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0c:1c:f5:93:aa:04:cc:51:ee:1f:fe:dc:d9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 09:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da0b4585c1cc175aef37441707e3e637732ad480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e4:c1:5e:fe:8d:c3:09:2d:d6:fb:3c:75:aa:
98:c4:46:6c:e0:5b:d1:a5:f0:2b:8e:c5:2c:fd:09:
cb:4f:ca:98:cf:6e:21:81:48:7b:88:4d:8f:d8:7a:
de:32:bc:b9:ce:e7:23:da:29:33:52:16:9f:d8:21:
8c:5e:a2:22:4a:56:dc:74:1d:79:b7:4f:45:ee:de:
3f:4d:3c:1c:99:de:e6:bd:40:84:2c:67:59:0c:74:
06:e1:44:f6:42:df:fd:a2:2a:e0:eb:e9:ca:b8:a1:
07:82:b1:27:97:9e:47:9f:48:5d:1f:df:75:aa:60:
b5:ee:68:e8:c2:a2:21:d1:01:ac:59:f2:c3:0e:74:
5c:91:33:ef:fe:73:b5:11:c8:30:b1:60:4b:8b:6e:
a4:6f:39:ec:52:51:0b:64:99:ad:33:98:1b:f9:ca:
1c:ff:73:dd:10:22:dd:8f:2c:f2:61:a7:4e:ee:6a:
88:91:1a:cf:b1:bd:70:f3:0d:9d:af:dc:2b:83:39:
11:23:7b:5c:79:01:20:70:28:b2:da:f5:13:96:24:
80:84:8e:55:7c:20:31:1a:81:79:ae:70:45:16:af:
fc:96:3c:f3:e8:12:55:41:3e:ec:d5:fb:56:7b:e3:
64:7e:fb:99:4f:8f:5d:bf:09:ea:ad:b6:ae:62:09:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0B:45:85:C1:CC:17:5A:EF:37:44:17:07:E3:E6:37:73:2A:D4:80
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/2gtFhcHMF1rvN0QXB-PmN3Mq1IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.219.0/24
212.64.221.0/24
Signature Algorithm: sha256WithRSAEncryption
41:93:62:87:1c:d2:81:da:79:a3:33:f7:d2:b2:62:7c:2c:5b:
57:48:9d:8f:eb:b7:6f:ba:91:03:8d:0c:b7:b1:d2:3d:45:59:
c6:b6:13:81:f4:9e:79:9d:e3:09:07:e7:90:f1:e8:b0:21:8e:
63:a7:7b:fc:d1:58:1b:11:db:7c:15:f1:51:10:e3:ea:e4:a4:
ca:a1:69:6f:17:50:0d:6a:42:2e:95:35:39:33:dc:d6:61:14:
d9:87:93:2f:f9:ea:03:5a:c2:fa:05:bc:4b:5d:e3:3e:4c:27:
b5:fc:52:cb:ab:b3:84:74:58:7f:48:e5:2f:67:68:44:b3:1e:
35:00:59:aa:8e:97:80:65:66:34:69:4b:1d:93:b0:52:48:94:
2b:99:c2:fd:de:15:82:b6:49:f3:9a:10:23:4c:02:89:22:0b:
e3:18:f4:de:81:8b:31:c1:cb:b4:e9:b8:bf:6d:3f:9f:af:5a:
07:52:78:0a:c6:af:40:47:ef:ba:95:2b:30:14:c2:a4:47:cc:
0d:ae:f0:73:4b:48:4a:60:cd:c0:8a:34:65:22:e0:39:8c:5c:
56:53:3a:f7:5b:ae:fe:b3:b3:0c:03:cc:9a:b5:37:e6:46:dd:
6e:9e:b6:10:fd:c9:43:68:1d:d7:80:ac:33:2d:d9:a7:c5:56:
1b:68:52:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsrwwc9ZOqBMxR7h/+3Nk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjMwMTAxMDkzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTBiNDU4NWMxY2MxNzVhZWYzNzQ0MTcwN2UzZTYzNzczMmFkNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+TBXv6Nwwkt1vs8daqYxEZs4FvR
pfArjsUs/QnLT8qYz24hgUh7iE2P2HreMry5zucj2ikzUhaf2CGMXqIiSlbcdB15
t09F7t4/TTwcmd7mvUCELGdZDHQG4UT2Qt/9oirg6+nKuKEHgrEnl55Hn0hdH991
qmC17mjowqIh0QGsWfLDDnRckTPv/nO1EcgwsWBLi26kbznsUlELZJmtM5gb+coc
/3PdECLdjyzyYadO7mqIkRrPsb1w8w2dr9wrgzkRI3tceQEgcCiy2vUTliSAhI5V
fCAxGoF5rnBFFq/8ljzz6BJVQT7s1ftWe+NkfvuZT49dvwnqrbauYgmCIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNoLRYXBzBda7zdEFwfj5jdzKtSAMB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvMmd0RmhjSE1GMXJ2TjBRWEItUG1OM01xMUlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1EDbAwQA
1EDdMA0GCSqGSIb3DQEBCwUAA4IBAQBBk2KHHNKB2nmjM/fSsmJ8LFtXSJ2P67dv
upEDjQy3sdI9RVnGthOB9J55neMJB+eQ8eiwIY5jp3v80VgbEdt8FfFREOPq5KTK
oWlvF1ANakIulTU5M9zWYRTZh5Mv+eoDWsL6BbxLXeM+TCe1/FLLq7OEdFh/SOUv
Z2hEsx41AFmqjpeAZWY0aUsdk7BSSJQrmcL93hWCtknzmhAjTAKJIgvjGPTegYsx
wcu06bi/bT+fr1oHUngKxq9AR++6lSswFMKkR8wNrvBzS0hKYM3AijRlIuA5jFxW
Uzr3W67+s7MMA8yatTfmRt1unrYQ/clDaB3XgKwzLdmnxVYbaFJt
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:31 2024 by rpki-client on console-fra.rpki-client.org