Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/dRmCXLvtfCuPBwjOa0FmvYzuvEQ.roa
File: dRmCXLvtfCuPBwjOa0FmvYzuvEQ.roa (raw, json)
Hash identifier: otAZl6kFbB9vhaBtTSlLjuefbbQziz+Osn0UE2Otiro=
Subject key identifier: 75:19:82:5C:BB:ED:7C:2B:8F:07:08:CE:6B:41:66:BD:8C:EE:BC:44
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42ABFB4899F62917BD208CD373FDEF
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/dRmCXLvtfCuPBwjOa0FmvYzuvEQ.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400746
IP address blocks: 188.121.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ab:fb:48:99:f6:29:17:bd:20:8c:d3:73:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7519825cbbed7c2b8f0708ce6b4166bd8ceebc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:bb:d0:49:e9:52:f5:19:0c:93:29:30:48:
dd:aa:c8:11:16:8c:d3:55:ab:a9:7c:af:cd:2b:4f:
34:05:ca:9d:73:3f:4c:1c:47:e8:df:d8:c2:42:42:
a2:f0:65:82:6a:92:5e:10:15:52:b9:c5:ec:cc:83:
51:98:51:7e:8f:5b:63:e1:4e:30:99:14:11:09:50:
7d:6b:b3:e3:53:ee:f3:b1:b4:a2:00:dc:8b:e9:82:
04:ed:06:2d:95:ab:1a:72:d8:b9:1d:27:0a:73:6a:
c8:cf:d6:49:6e:84:83:bd:2c:a8:6b:14:05:a9:71:
77:57:3f:ea:33:f8:18:b9:c4:a4:22:e3:7e:ea:fa:
41:7d:f9:ec:ac:61:df:09:ca:3a:87:b2:f1:be:74:
73:9b:00:2f:3c:84:e1:ac:4d:cf:1a:5b:03:ee:d0:
55:1d:6d:59:07:9a:26:44:2a:71:b7:fe:41:d8:0d:
f2:ec:c7:db:07:ac:b0:af:fc:15:07:71:a7:7c:e8:
79:cb:6d:8e:f5:8d:56:d8:5f:6e:45:42:3f:a3:0c:
6e:3a:92:da:3e:87:7e:54:14:af:f6:44:c2:73:e9:
9f:08:05:92:0c:e6:c5:05:0f:12:f1:f2:9d:62:4a:
da:f8:4e:72:b2:63:66:fe:0a:c0:9c:4d:e5:43:91:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:82:5C:BB:ED:7C:2B:8F:07:08:CE:6B:41:66:BD:8C:EE:BC:44
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/dRmCXLvtfCuPBwjOa0FmvYzuvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.121.60.0/22
Signature Algorithm: sha256WithRSAEncryption
42:50:43:4e:c1:27:21:31:c5:e9:a1:db:f7:30:eb:37:7c:c6:
ca:0c:d2:9e:a0:47:17:f1:78:ca:53:76:23:33:b2:69:06:63:
ec:75:18:68:d8:48:d1:8f:af:c8:8e:36:3e:97:b9:34:6d:79:
5a:86:bf:84:67:5b:e0:f9:62:66:7f:af:2b:67:63:29:76:81:
4d:84:fa:26:3d:87:5b:d2:dc:93:1d:02:29:29:72:32:0b:42:
aa:ac:9e:4f:8f:23:ea:e8:20:39:bd:39:74:c0:1e:1c:5d:bd:
f9:ee:18:b7:34:1c:49:76:42:2f:ee:57:01:b9:c0:3f:3e:47:
fc:1e:05:61:35:c0:05:8c:a7:b8:c0:4c:e2:77:79:bb:a7:45:
ea:08:e8:22:ea:4b:98:d8:9a:e2:fc:f3:84:d4:61:1d:29:62:
92:c5:e0:d2:17:0d:10:1c:a6:5d:4b:2e:fd:84:73:bb:9c:85:
15:8e:bd:48:d9:40:48:98:b8:5f:6d:90:46:a5:d4:5c:0d:d5:
e0:1c:ea:e6:54:7f:6e:42:5d:40:9e:bb:7b:c1:17:b3:ee:34:
a0:d3:db:15:f8:af:c0:da:ab:0b:80:82:9f:8c:5e:5e:a0:f1:
c9:8f:af:04:3b:fe:fc:b5:29:2d:74:3c:86:9e:ff:33:7b:ea:
27:83:17:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQqv7SJn2KRe9IIzTc/3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjMwMTAxMjEzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTE5ODI1Y2JiZWQ3YzJiOGYwNzA4Y2U2YjQxNjZiZDhjZWViYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ+70EnpUvUZDJMpMEjdqsgRFozT
VaupfK/NK080Bcqdcz9MHEfo39jCQkKi8GWCapJeEBVSucXszINRmFF+j1tj4U4w
mRQRCVB9a7PjU+7zsbSiANyL6YIE7QYtlasacti5HScKc2rIz9ZJboSDvSyoaxQF
qXF3Vz/qM/gYucSkIuN+6vpBffnsrGHfCco6h7LxvnRzmwAvPIThrE3PGlsD7tBV
HW1ZB5omRCpxt/5B2A3y7MfbB6ywr/wVB3GnfOh5y22O9Y1W2F9uRUI/owxuOpLa
Pod+VBSv9kTCc+mfCAWSDObFBQ8S8fKdYkra+E5ysmNm/grAnE3lQ5HXQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUZgly77XwrjwcIzmtBZr2M7rxEMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvZFJtQ1hMdnRmQ3VQQndqT2EwRm12WXp1dkVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvHk8MA0G
CSqGSIb3DQEBCwUAA4IBAQBCUENOwSchMcXpodv3MOs3fMbKDNKeoEcX8XjKU3Yj
M7JpBmPsdRho2EjRj6/IjjY+l7k0bXlahr+EZ1vg+WJmf68rZ2MpdoFNhPomPYdb
0tyTHQIpKXIyC0KqrJ5PjyPq6CA5vTl0wB4cXb357hi3NBxJdkIv7lcBucA/Pkf8
HgVhNcAFjKe4wEzid3m7p0XqCOgi6kuY2Jri/POE1GEdKWKSxeDSFw0QHKZdSy79
hHO7nIUVjr1I2UBImLhfbZBGpdRcDdXgHOrmVH9uQl1Anrt7wRez7jSg09sV+K/A
2qsLgIKfjF5eoPHJj68EO/78tSktdDyGnv8ze+ongxc1
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org