Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/M4xU8D8aM7geOb3u0HlGvl1Ghqw.roa
File: M4xU8D8aM7geOb3u0HlGvl1Ghqw.roa (raw, json)
Hash identifier: NvV3r6RFkU0ifx63Mb3DClkOkP85OHf9BNcfR7gDzAU=
Subject key identifier: 33:8C:54:F0:3F:1A:33:B8:1E:39:BD:EE:D0:79:46:BE:5D:46:86:AC
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 01856EF42BB5A61CA0E39679B340424E46CA
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/M4xU8D8aM7geOb3u0HlGvl1Ghqw.roa
Signing time: Sun 01 Jan 2023 20:09:33 +0000
ROA not before: Sun 01 Jan 2023 20:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212788
IP address blocks: 213.170.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:2b:b5:a6:1c:a0:e3:96:79:b3:40:42:4e:46:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jan 1 20:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=338c54f03f1a33b81e39bdeed07946be5d4686ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:c9:83:01:a5:ab:92:50:49:92:8b:02:4c:
fd:92:7c:12:e6:0f:57:dd:41:cd:b0:c1:b4:d2:a8:
92:ff:9c:f7:d8:a2:58:c9:28:1f:73:38:77:a5:1a:
90:eb:6f:c6:e7:1c:50:e7:46:26:8d:c4:a0:dd:0a:
55:5a:8f:82:dc:33:44:77:85:52:ca:ea:9e:54:ae:
d5:ad:af:77:1e:5c:dc:8a:d5:17:f0:d1:4f:e4:e7:
e2:41:f8:f1:60:5a:77:75:b3:94:b5:bb:c4:1f:12:
b6:06:a7:4d:d3:d0:85:04:1f:33:db:08:da:85:a2:
81:53:88:8a:48:fa:ae:cb:b2:bb:8c:8d:00:b1:6c:
72:56:c6:d5:e0:bf:3e:fe:4a:0c:e1:12:19:fb:a3:
b1:db:05:4c:ee:33:ba:5a:3a:34:05:45:20:c0:75:
10:16:df:df:7a:03:6f:d4:72:e5:dd:c3:55:5f:1f:
2a:bf:7a:70:34:1a:20:43:6e:ef:f7:4e:b8:dd:a6:
8e:24:d5:e6:05:2e:e8:e6:48:cd:2a:19:21:33:81:
42:5e:fa:a1:ed:fd:b7:86:aa:06:15:46:ec:15:dd:
4e:15:d4:84:cd:07:2f:d0:3a:15:51:8b:1a:ce:9f:
c4:4a:7f:2b:19:21:0e:e6:80:2c:03:0d:8a:3d:49:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8C:54:F0:3F:1A:33:B8:1E:39:BD:EE:D0:79:46:BE:5D:46:86:AC
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/M4xU8D8aM7geOb3u0HlGvl1Ghqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:5c:b2:67:02:e7:4d:77:dd:bc:d0:f0:69:cd:7f:18:0f:e0:
14:40:b5:18:fa:b8:19:ed:7d:b5:61:a9:30:23:47:71:94:d5:
6f:5d:60:54:39:f2:cd:d1:17:a5:42:14:a8:95:3d:55:a0:1e:
7b:4a:dc:5a:b7:47:ce:ba:e7:e1:da:20:7e:30:66:f1:eb:56:
f2:b8:73:9a:be:f8:5b:98:26:d8:e8:35:b0:34:3c:e7:c5:2d:
24:2b:b9:72:24:35:88:8f:1d:c0:79:1c:03:98:64:77:20:c0:
12:76:99:e5:c0:10:e4:b1:3d:7f:a7:89:70:d1:dc:79:7a:6b:
97:9b:de:6a:b6:f8:43:75:4e:54:aa:0b:8a:08:69:fc:cd:fa:
16:19:8e:9c:26:6a:03:4b:8e:c1:3c:61:55:93:d1:f2:c8:c5:
f9:6a:fa:79:1a:aa:da:8d:f8:a1:c2:74:87:11:8f:30:b5:ac:
14:b5:38:67:de:13:5d:84:22:2d:3e:47:00:94:c1:b2:6a:25:
09:55:22:c0:61:64:2f:4b:55:a9:a5:83:a5:d8:dc:67:b0:c3:
c8:f6:26:e9:94:64:3a:61:25:e3:f4:f2:12:10:ae:cc:ba:7f:
fc:88:77:ba:7e:8f:c4:7f:6d:84:b2:05:ba:2a:2f:00:9f:5a:
ed:f1:dd:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu9Cu1phyg45Z5s0BCTkbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4
MGZhMjYwHhcNMjMwMTAxMjAwOTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzhjNTRmMDNmMWEzM2I4MWUzOWJkZWVkMDc5NDZiZTVkNDY4NmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsefJgwGlq5JQSZKLAkz9knwS5g9X
3UHNsMG00qiS/5z32KJYySgfczh3pRqQ62/G5xxQ50YmjcSg3QpVWo+C3DNEd4VS
yuqeVK7Vra93HlzcitUX8NFP5OfiQfjxYFp3dbOUtbvEHxK2BqdN09CFBB8z2wja
haKBU4iKSPquy7K7jI0AsWxyVsbV4L8+/koM4RIZ+6Ox2wVM7jO6Wjo0BUUgwHUQ
Ft/fegNv1HLl3cNVXx8qv3pwNBogQ27v90643aaOJNXmBS7o5kjNKhkhM4FCXvqh
7f23hqoGFUbsFd1OFdSEzQcv0DoVUYsazp/ESn8rGSEO5oAsAw2KPUnMOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOMVPA/GjO4Hjm97tB5Rr5dRoasMB8GA1UdIwQY
MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt
YzAyMzM0YmUxMjhjLzEvTTR4VThEOGFNN2dlT2IzdTBIbEd2bDFHaHF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj
LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aqNMA0G
CSqGSIb3DQEBCwUAA4IBAQDIXLJnAudNd9280PBpzX8YD+AUQLUY+rgZ7X21Yakw
I0dxlNVvXWBUOfLN0RelQhSolT1VoB57Stxat0fOuufh2iB+MGbx61byuHOavvhb
mCbY6DWwNDznxS0kK7lyJDWIjx3AeRwDmGR3IMASdpnlwBDksT1/p4lw0dx5emuX
m95qtvhDdU5UqguKCGn8zfoWGY6cJmoDS47BPGFVk9HyyMX5avp5GqrajfihwnSH
EY8wtawUtThn3hNdhCItPkcAlMGyaiUJVSLAYWQvS1WppYOl2NxnsMPI9ibplGQ6
YSXj9PISEK7Mun/8iHe6fo/Ef22EsgW6Ki8An1rt8d1U
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:06 2024 by rpki-client on console.sobornost.net