Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/vWNOcu2_EZ61O06ZCnOXoqu3FXo.roa
File: vWNOcu2_EZ61O06ZCnOXoqu3FXo.roa (raw, json)
Hash identifier: gvIcLj5G6miG12l17z6mBx8crOzrskJo/2NJ3lFyFfI=
Subject key identifier: BD:63:4E:72:ED:BF:11:9E:B5:3B:4E:99:0A:73:97:A2:AB:B7:15:7A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE628648C1C665CBEE51D2034938148
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/vWNOcu2_EZ61O06ZCnOXoqu3FXo.roa
Signing time: Sun 01 Jan 2023 10:35:01 +0000
ROA not before: Sun 01 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212508
IP address blocks: 152.89.254.0/24 maxlen: 24
152.89.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:28:64:8c:1c:66:5c:be:e5:1d:20:34:93:81:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd634e72edbf119eb53b4e990a7397a2abb7157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:24:66:cf:a8:39:fa:a6:9d:45:ee:fd:b3:
93:bf:66:71:14:10:17:33:63:a9:71:2c:df:b6:40:
fc:f7:6e:1c:d2:93:89:f2:29:3d:c5:5e:fa:c9:6b:
0f:22:17:c7:3c:44:ae:55:8e:31:b8:a6:5f:a0:5b:
27:11:8d:c4:0a:1c:55:15:0a:6d:63:b7:ac:2e:ad:
f3:45:fa:a9:d6:5d:9c:72:2c:46:5e:b5:1b:e4:6d:
29:59:55:5c:79:2a:20:ae:1f:ee:e0:1e:d5:14:8c:
93:c9:fb:ca:c6:6d:b7:24:37:22:f5:af:2b:48:4b:
4a:0c:11:3e:14:df:9b:1d:3d:1c:9f:4e:4b:40:18:
72:e1:62:6f:6d:1e:72:c0:85:e2:17:7c:6d:30:7c:
0d:c1:75:b5:c6:ff:27:a5:9c:bf:67:b9:6a:bf:41:
df:f9:12:5a:4b:dc:09:7e:92:01:37:11:f1:68:11:
fe:92:4a:23:cb:9b:8e:3f:a3:14:09:fe:5c:66:77:
8d:7d:b7:08:fb:b3:f9:f8:43:6b:97:a0:91:4e:3c:
d1:81:05:2a:60:ad:1e:f4:51:a7:c0:5c:50:71:a1:
46:14:8f:73:ef:30:5f:af:cb:ae:ac:8c:05:f2:d6:
97:7c:23:8d:6c:fa:73:f8:6e:5b:3e:a2:12:e8:07:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:4E:72:ED:BF:11:9E:B5:3B:4E:99:0A:73:97:A2:AB:B7:15:7A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/vWNOcu2_EZ61O06ZCnOXoqu3FXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.254.0/23
Signature Algorithm: sha256WithRSAEncryption
81:37:7d:8c:d1:4a:91:2f:38:26:7e:99:83:25:5d:f3:ec:54:
c5:97:78:5e:93:f5:f6:00:65:b1:f8:d1:61:96:b7:8d:2d:a6:
3d:83:c3:92:0f:61:df:a1:3b:c8:04:7f:31:e3:ea:55:b8:49:
41:8f:cb:8e:16:18:50:26:db:31:19:1d:1d:2a:46:2e:ec:0e:
d5:10:df:e1:38:38:15:bd:30:21:7d:dc:83:8b:e3:47:a8:09:
4e:0c:34:64:b8:05:4b:e5:5d:bf:18:37:f6:a1:5f:76:f8:f8:
09:ee:11:97:d1:9d:26:e1:5d:64:eb:17:93:b7:d4:c0:28:c1:
74:98:33:ef:2b:88:56:a2:f1:92:53:ea:e6:67:02:4b:1d:66:
66:03:c6:cd:5e:41:7f:36:e9:91:79:c6:59:e3:b3:3f:b4:8b:
9b:7b:89:9e:5b:5b:57:27:33:5a:1e:96:ef:e8:18:df:54:b8:
05:c0:07:77:cd:f6:c6:a6:70:f3:78:2d:fb:a6:1f:db:b2:6b:
ee:c9:84:b0:d8:80:d6:1a:f1:50:eb:62:e4:da:18:81:f9:bd:
d1:11:d8:fe:e3:7f:fa:ed:02:4d:cd:42:59:b2:45:ec:7d:51:
b4:26:59:73:69:50:83:95:5c:1a:75:69:1e:b7:3a:d2:f4:c2:
be:b7:db:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5ihkjBxmXL7lHSA0k4FIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwMTAxMTAzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDYzNGU3MmVkYmYxMTllYjUzYjRlOTkwYTczOTdhMmFiYjcxNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6MkZs+oOfqmnUXu/bOTv2ZxFBAX
M2OpcSzftkD8924c0pOJ8ik9xV76yWsPIhfHPESuVY4xuKZfoFsnEY3EChxVFQpt
Y7esLq3zRfqp1l2ccixGXrUb5G0pWVVceSogrh/u4B7VFIyTyfvKxm23JDci9a8r
SEtKDBE+FN+bHT0cn05LQBhy4WJvbR5ywIXiF3xtMHwNwXW1xv8npZy/Z7lqv0Hf
+RJaS9wJfpIBNxHxaBH+kkojy5uOP6MUCf5cZneNfbcI+7P5+ENrl6CRTjzRgQUq
YK0e9FGnwFxQcaFGFI9z7zBfr8uurIwF8taXfCONbPpz+G5bPqIS6AffewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1jTnLtvxGetTtOmQpzl6KrtxV6MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvdldOT2N1Ml9FWjYxTzA2WkNuT1hvcXUzRlhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmFn+MA0G
CSqGSIb3DQEBCwUAA4IBAQCBN32M0UqRLzgmfpmDJV3z7FTFl3hek/X2AGWx+NFh
lreNLaY9g8OSD2HfoTvIBH8x4+pVuElBj8uOFhhQJtsxGR0dKkYu7A7VEN/hODgV
vTAhfdyDi+NHqAlODDRkuAVL5V2/GDf2oV92+PgJ7hGX0Z0m4V1k6xeTt9TAKMF0
mDPvK4hWovGSU+rmZwJLHWZmA8bNXkF/NumRecZZ47M/tIube4meW1tXJzNaHpbv
6BjfVLgFwAd3zfbGpnDzeC37ph/bsmvuyYSw2IDWGvFQ62Lk2hiB+b3REdj+43/6
7QJNzUJZskXsfVG0JllzaVCDlVwadWketzrS9MK+t9vg
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org