Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/9yVzdFH_B_BG1gJb5-NIawbI3Rs.roa
File: 9yVzdFH_B_BG1gJb5-NIawbI3Rs.roa (raw, json)
Hash identifier: 6dPnKxlKNCg56pjzy6zndNQNhrdAONYvaMerDVw9+Hs=
Subject key identifier: F7:25:73:74:51:FF:07:F0:46:D6:02:5B:E7:E3:48:6B:06:C8:DD:1B
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 0185708291739F5B1A15F6405DFFFA179B42
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/9yVzdFH_B_BG1gJb5-NIawbI3Rs.roa
Signing time: Mon 02 Jan 2023 03:24:43 +0000
ROA not before: Mon 02 Jan 2023 03:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209948
IP address blocks: 212.81.52.0/24 maxlen: 24
212.81.55.0/24 maxlen: 24
212.81.53.0/24 maxlen: 24
212.81.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:91:73:9f:5b:1a:15:f6:40:5d:ff:fa:17:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Jan 2 03:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f725737451ff07f046d6025be7e3486b06c8dd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:85:da:6a:f4:4f:17:07:85:a0:60:1b:90:
57:73:b9:e6:e5:c9:b3:7c:5e:5c:06:7f:f9:ad:30:
b1:e6:8e:bc:f8:c0:df:8b:cf:9b:57:fa:f2:be:eb:
c8:a7:d1:d5:39:a9:88:76:ba:1e:1f:cb:20:9b:79:
99:91:9c:93:ab:43:1b:ce:85:07:e1:e7:ab:63:e3:
e8:03:76:2b:3d:55:0c:d8:de:9d:4c:15:e6:52:a0:
d1:ef:9f:71:84:eb:c7:e7:f1:9d:c9:17:a7:8b:41:
19:e2:67:7b:76:25:d1:f9:1a:ed:93:9a:46:12:ca:
59:4e:3b:0a:84:3f:89:71:29:06:8b:45:57:67:38:
5f:e1:97:89:21:ff:9f:34:2f:56:bc:15:8f:26:45:
d3:97:0c:20:dd:50:18:56:38:fa:b7:73:e9:fb:76:
1d:26:23:4f:f9:2c:ea:07:fe:7a:be:6c:8e:bf:8e:
fa:e1:15:db:2c:c5:7c:4a:7a:5e:e8:02:f8:81:6f:
6b:2a:2b:8d:9a:e5:6d:f2:0f:91:69:0a:17:73:65:
b3:a5:46:c1:e6:a7:43:07:24:f7:e8:8e:63:b4:79:
5f:8c:74:49:81:3a:74:90:18:8b:4c:76:46:b0:26:
64:90:0d:de:c8:bd:07:7e:6d:1e:06:30:67:db:10:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:73:74:51:FF:07:F0:46:D6:02:5B:E7:E3:48:6B:06:C8:DD:1B
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/9yVzdFH_B_BG1gJb5-NIawbI3Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
28:38:3e:60:36:79:fe:ab:f4:7e:69:3f:f3:54:18:f3:c3:de:
40:26:b0:c6:7e:01:b8:c8:15:ad:12:98:fb:11:16:de:ac:b1:
fd:b1:31:f3:28:ae:7e:b5:19:19:01:6b:74:98:86:ca:99:0d:
14:2a:86:e5:a1:44:9c:30:79:46:f3:81:d3:09:9b:de:c2:ba:
5a:7b:91:d5:88:0b:a0:6a:a3:7d:d8:91:4c:9d:5b:e0:dd:29:
2c:7d:0c:da:51:fb:a5:c2:85:e5:5b:86:01:9b:90:8b:a7:f7:
fd:47:7f:99:59:07:19:6b:e2:3a:bb:34:6d:c8:5a:01:3a:a5:
58:ba:1c:79:f6:18:81:a8:01:7d:69:5a:15:0d:e8:5b:5c:94:
bc:68:1d:d1:92:2f:40:ff:bf:3b:17:e1:9a:6d:93:dd:d0:17:
f9:d1:c2:e6:17:4b:26:2e:8d:10:39:c6:72:5c:05:3e:80:a1:
b6:2e:40:24:c8:a7:d3:9d:e9:a1:32:47:cc:19:c2:9c:6c:fd:
27:d8:ec:9c:bd:67:da:10:6f:f7:8a:08:07:5c:88:18:61:b6:
a1:69:28:b3:fe:6e:39:80:3c:0e:32:83:bc:7b:9a:68:ef:b5:
60:98:0e:2e:03:3a:8f:72:20:b6:e8:df:91:6c:0c:9f:12:2d:
18:8d:e9:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgpFzn1saFfZAXf/6F5tCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDg4OTEyMGM0ZTBiZmY0ZWNlOWEyYWJiODYyZDRjMGNk
OGEzMWYwHhcNMjMwMTAyMDMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzI1NzM3NDUxZmYwN2YwNDZkNjAyNWJlN2UzNDg2YjA2YzhkZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweSF2mr0TxcHhaBgG5BXc7nm5cmz
fF5cBn/5rTCx5o68+MDfi8+bV/ryvuvIp9HVOamIdroeH8sgm3mZkZyTq0MbzoUH
4eerY+PoA3YrPVUM2N6dTBXmUqDR759xhOvH5/GdyReni0EZ4md7diXR+Rrtk5pG
EspZTjsKhD+JcSkGi0VXZzhf4ZeJIf+fNC9WvBWPJkXTlwwg3VAYVjj6t3Pp+3Yd
JiNP+SzqB/56vmyOv4764RXbLMV8Snpe6AL4gW9rKiuNmuVt8g+RaQoXc2WzpUbB
5qdDByT36I5jtHlfjHRJgTp0kBiLTHZGsCZkkA3eyL0Hfm0eBjBn2xDukQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPclc3RR/wfwRtYCW+fjSGsGyN0bMB8GA1UdIwQY
MBaAFLlIiRIMTgv/Ts6aKruGLUwM2KMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kZjU2NzAtOTZhYi00ZWVlLWIwZDIt
ODVkMzMyNjA0YWFmLzEvOXlWemRGSF9CX0JHMWdKYjUtTklhd2JJM1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kZjU2NzAtOTZhYi00ZWVlLWIwZDItODVkMzMyNjA0YWFm
LzEvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1FE0MA0G
CSqGSIb3DQEBCwUAA4IBAQAoOD5gNnn+q/R+aT/zVBjzw95AJrDGfgG4yBWtEpj7
ERberLH9sTHzKK5+tRkZAWt0mIbKmQ0UKobloUScMHlG84HTCZvewrpae5HViAug
aqN92JFMnVvg3SksfQzaUfulwoXlW4YBm5CLp/f9R3+ZWQcZa+I6uzRtyFoBOqVY
uhx59hiBqAF9aVoVDehbXJS8aB3Rki9A/787F+GabZPd0Bf50cLmF0smLo0QOcZy
XAU+gKG2LkAkyKfTnemhMkfMGcKcbP0n2OycvWfaEG/3iggHXIgYYbahaSiz/m45
gDwOMoO8e5po77VgmA4uAzqPciC26N+RbAyfEi0Yjem9
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:53 2024 by rpki-client on console.sobornost.net