Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/JvvJLAbzl0im3csSPEoHcQBASvo.roa
File: JvvJLAbzl0im3csSPEoHcQBASvo.roa (raw, json)
Hash identifier: vICjuhlYzg3It3+WWDKsUph7Lwu06mCmBsSg541A0EE=
Subject key identifier: 26:FB:C9:2C:06:F3:97:48:A6:DD:CB:12:3C:4A:07:71:00:40:4A:FA
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 0191E1CA7BF33B63490B927DFB47427C2E03
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/JvvJLAbzl0im3csSPEoHcQBASvo.roa
Signing time: Wed 11 Sep 2024 15:53:49 +0000
ROA not before: Wed 11 Sep 2024 15:53:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 212.64.201.0/24 maxlen: 24
212.64.202.0/24 maxlen: 24
212.64.210.0/24 maxlen: 32
212.64.211.0/24 maxlen: 32
212.64.216.0/24 maxlen: 32
212.64.217.0/24 maxlen: 32
212.64.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 15:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:ca:7b:f3:3b:63:49:0b:92:7d:fb:47:42:7c:2e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Sep 11 15:53:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26fbc92c06f39748a6ddcb123c4a077100404afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:c1:42:bd:f1:5c:ac:c9:c5:fe:73:bf:a4:
e0:df:f8:47:40:af:64:03:24:1f:86:71:e0:07:b0:
5b:7f:ed:77:1e:a6:2a:c1:5a:84:0f:29:cc:a6:c0:
38:eb:8b:0f:79:f0:25:bb:7c:fb:fb:db:1d:44:97:
bb:98:37:91:12:d6:1d:13:94:32:2d:14:22:6b:00:
da:70:c4:a6:c7:fe:67:70:04:0d:5b:78:d9:95:96:
4d:cf:0d:04:b1:b5:2a:48:2b:cb:25:62:4b:bd:8b:
37:a1:3f:a6:7f:21:b1:42:3e:01:4f:31:cf:41:9c:
3f:e8:63:ff:be:63:07:a8:e1:5c:00:55:a5:7d:30:
4c:95:ba:f6:0b:3c:21:1b:85:fc:f3:f8:09:dc:f4:
48:70:02:f4:01:1c:91:04:6e:d6:7b:3f:b1:e3:88:
b9:41:3d:43:93:f1:41:cf:ad:84:4a:22:b6:f5:87:
ab:f8:63:3f:21:43:17:7f:d1:34:db:97:0a:cf:ac:
da:da:07:79:31:8d:3e:45:2b:64:f5:a5:e0:f8:8f:
49:8d:79:82:e1:f5:f5:cf:c5:5c:7c:92:8a:c8:14:
86:21:f2:40:a9:23:2a:50:3a:4f:ee:f4:b0:83:52:
28:da:f0:35:02:24:ca:e7:19:47:3d:79:63:da:03:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:C9:2C:06:F3:97:48:A6:DD:CB:12:3C:4A:07:71:00:40:4A:FA
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/JvvJLAbzl0im3csSPEoHcQBASvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.201.0-212.64.202.255
212.64.210.0/23
212.64.216.0-212.64.218.255
Signature Algorithm: sha256WithRSAEncryption
08:11:87:1d:35:8d:0b:a8:68:51:88:31:b7:0d:77:01:91:d4:
eb:8c:8b:75:20:b5:62:ff:a1:82:be:49:b0:e4:9d:08:48:07:
23:ea:85:6c:2c:ca:aa:bf:52:bf:42:cd:f3:8d:be:55:1b:a6:
94:ad:d6:57:da:a1:03:c5:a7:20:4c:42:ee:45:a5:e4:4b:03:
96:b3:b7:bc:3d:2c:11:97:0e:2c:e9:5f:9c:74:74:9e:02:89:
02:ea:af:25:ef:85:6d:40:7b:23:e8:e7:15:00:aa:bf:13:cd:
b0:b3:8e:61:bd:dd:57:9b:f3:1f:a8:4c:b9:f4:fa:49:47:7a:
82:fc:97:46:bf:f8:24:d2:02:8f:ef:30:6d:78:7e:c5:f1:73:
8c:1b:76:e1:9d:53:38:a4:b4:a8:15:02:62:43:91:c0:9f:93:
67:bf:47:f1:14:bb:76:9c:f4:c2:28:ec:d6:07:98:60:62:3a:
33:0f:8e:eb:0a:e3:46:ea:d7:b3:b9:87:3f:50:15:21:ff:34:
c6:7a:d7:0d:73:95:60:ca:4a:99:2a:29:c3:6e:15:7a:22:e2:
bd:27:38:83:68:30:ac:b7:6c:b1:18:f7:2b:5c:18:8a:6c:ae:
44:c5:43:58:1f:fc:85:91:54:e1:4e:46:61:4f:e4:c8:47:a5:
74:28:c4:2b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZHhynvzO2NJC5J9+0dCfC4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjQwOTExMTU1MzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmZiYzkyYzA2ZjM5NzQ4YTZkZGNiMTIzYzRhMDc3MTAwNDA0YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+fBQr3xXKzJxf5zv6Tg3/hHQK9k
AyQfhnHgB7Bbf+13HqYqwVqEDynMpsA464sPefAlu3z7+9sdRJe7mDeREtYdE5Qy
LRQiawDacMSmx/5ncAQNW3jZlZZNzw0EsbUqSCvLJWJLvYs3oT+mfyGxQj4BTzHP
QZw/6GP/vmMHqOFcAFWlfTBMlbr2CzwhG4X88/gJ3PRIcAL0ARyRBG7Wez+x44i5
QT1Dk/FBz62ESiK29Yer+GM/IUMXf9E025cKz6za2gd5MY0+RStk9aXg+I9JjXmC
4fX1z8VcfJKKyBSGIfJAqSMqUDpP7vSwg1Io2vA1AiTK5xlHPXlj2gMJmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCb7ySwG85dIpt3LEjxKB3EAQEr6MB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvSnZ2SkxBYnpsMGltM2NzU1BFb0hjUUJBU3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADUQMkD
BADUQMoDBAHUQNIwDAMEA9RA2AMEANRA2jANBgkqhkiG9w0BAQsFAAOCAQEACBGH
HTWNC6hoUYgxtw13AZHU64yLdSC1Yv+hgr5JsOSdCEgHI+qFbCzKqr9Sv0LN842+
VRumlK3WV9qhA8WnIExC7kWl5EsDlrO3vD0sEZcOLOlfnHR0ngKJAuqvJe+FbUB7
I+jnFQCqvxPNsLOOYb3dV5vzH6hMufT6SUd6gvyXRr/4JNICj+8wbXh+xfFzjBt2
4Z1TOKS0qBUCYkORwJ+TZ79H8RS7dpz0wijs1geYYGI6Mw+O6wrjRurXs7mHP1AV
If80xnrXDXOVYMpKmSopw24VeiLivSc4g2gwrLdssRj3K1wYimyuRMVDWB/8hZFU
4U5GYU/kyEeldCjEKw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:59 2025 by rpki-client