Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/KN_b36Mhc4diprnw1N91GwX7AcM.roa
File: KN_b36Mhc4diprnw1N91GwX7AcM.roa (raw, json)
Hash identifier: Uxw20RUQzTdMy9W6Fq2GFdnF2Jj2qo/S0SNGzysXj70=
Subject key identifier: 28:DF:DB:DF:A3:21:73:87:62:A6:B9:F0:D4:DF:75:1B:05:FB:01:C3
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 018572281112FD110F9ABCFD46BD8554D1CB
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/KN_b36Mhc4diprnw1N91GwX7AcM.roa
Signing time: Mon 02 Jan 2023 11:05:06 +0000
ROA not before: Mon 02 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35762
IP address blocks: 5.252.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:11:12:fd:11:0f:9a:bc:fd:46:bd:85:54:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Jan 2 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28dfdbdfa321738762a6b9f0d4df751b05fb01c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:d7:77:cc:1a:cc:3b:97:47:d9:38:c9:aa:
f4:31:4e:ac:13:80:d3:5d:87:a4:26:49:ae:16:28:
1d:94:0b:3a:1b:ae:c0:61:75:6e:75:64:16:ee:bd:
77:18:aa:e0:c1:ee:3b:f2:1e:e9:52:ce:3a:6b:8a:
5d:dd:d9:ee:28:46:5c:a1:62:32:8b:e8:59:6c:5f:
ea:9d:87:d7:44:55:40:43:10:77:de:18:5c:bc:e1:
23:a3:c6:ec:cd:49:0e:4c:37:96:f0:ff:48:91:50:
af:66:aa:11:e2:af:d0:83:39:ad:36:c3:3a:01:c7:
31:c6:53:a6:20:12:02:6d:de:a9:de:40:28:b7:60:
d6:d3:5c:b2:27:39:68:98:3a:de:19:50:1b:7e:b2:
cf:6e:88:de:7f:cd:7b:cd:b5:94:4a:2e:52:7e:18:
a2:6d:e3:08:ab:99:e7:b3:38:45:68:24:44:2f:18:
06:f0:cb:c3:b0:af:70:75:f8:19:37:3b:02:af:e6:
5b:f2:d4:7d:2d:e4:5e:5f:2b:77:ec:9e:c7:f1:10:
16:70:68:a3:80:bb:3b:29:af:0b:a4:7f:4b:71:a1:
5a:9e:55:56:e4:7e:80:07:e1:e5:b5:de:ad:7b:38:
2e:49:aa:2f:cb:ef:13:c3:ea:d2:4d:bb:a3:05:94:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:DB:DF:A3:21:73:87:62:A6:B9:F0:D4:DF:75:1B:05:FB:01:C3
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/KN_b36Mhc4diprnw1N91GwX7AcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.44.0/22
Signature Algorithm: sha256WithRSAEncryption
58:6e:34:46:a8:83:52:9e:36:ad:b8:ae:2c:b8:ec:9b:07:dc:
c6:b5:ab:f3:85:a4:83:bc:e7:04:8f:ea:82:6d:10:e1:f7:1c:
ee:95:21:76:f5:da:c0:87:02:a1:85:dd:16:e3:b8:3d:02:20:
48:f8:d8:3b:c0:88:86:a0:de:d8:25:4a:f3:c1:bd:8c:3f:fc:
f7:01:87:aa:ad:59:9c:3f:b4:a1:48:e6:7a:b2:45:4d:8f:ed:
25:ec:9d:c2:bb:ce:e0:89:ed:54:fc:52:7f:ee:96:8a:ef:9e:
ee:0b:70:63:27:12:c2:80:9c:c2:7b:e1:4b:b6:5a:cc:bf:24:
bd:44:2c:f0:86:4d:5a:bb:02:d5:60:b2:fa:c0:b0:28:77:c5:
4b:71:a0:f9:fd:c2:96:fd:34:52:3c:d4:59:67:3c:f3:27:57:
fe:c3:e2:1b:ac:bd:a4:a1:b0:a7:68:b7:88:7e:f7:95:62:f3:
73:9a:5d:50:45:e5:b6:6b:30:76:5c:ff:2c:7e:45:da:5f:68:
d6:c6:38:03:03:63:bb:6c:89:b3:2e:9a:09:d5:fa:b2:09:43:
b5:39:2b:b0:d9:7e:89:95:6c:a4:6c:7c:b5:77:8e:c4:0a:d3:
5e:87:4b:67:75:63:b7:0b:4f:bf:bf:90:83:bd:b5:31:15:2b:
e2:1a:85:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyKBES/REPmrz9Rr2FVNHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl
NjAzMDYwHhcNMjMwMTAyMTEwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGRmZGJkZmEzMjE3Mzg3NjJhNmI5ZjBkNGRmNzUxYjA1ZmIwMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHnXd8wazDuXR9k4yar0MU6sE4DT
XYekJkmuFigdlAs6G67AYXVudWQW7r13GKrgwe478h7pUs46a4pd3dnuKEZcoWIy
i+hZbF/qnYfXRFVAQxB33hhcvOEjo8bszUkOTDeW8P9IkVCvZqoR4q/QgzmtNsM6
AccxxlOmIBICbd6p3kAot2DW01yyJzlomDreGVAbfrLPbojef817zbWUSi5Sfhii
beMIq5nnszhFaCRELxgG8MvDsK9wdfgZNzsCr+Zb8tR9LeReXyt37J7H8RAWcGij
gLs7Ka8LpH9LcaFanlVW5H6AB+Hltd6tezguSaovy+8Tw+rSTbujBZRilwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCjf29+jIXOHYqa58NTfdRsF+wHDMB8GA1UdIwQY
MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt
NDc2MzJjYjViODU0LzEvS05fYjM2TWhjNGRpcHJudzFOOTFHd1g3QWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0
LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfwsMA0G
CSqGSIb3DQEBCwUAA4IBAQBYbjRGqINSnjatuK4suOybB9zGtavzhaSDvOcEj+qC
bRDh9xzulSF29drAhwKhhd0W47g9AiBI+Ng7wIiGoN7YJUrzwb2MP/z3AYeqrVmc
P7ShSOZ6skVNj+0l7J3Cu87gie1U/FJ/7paK757uC3BjJxLCgJzCe+FLtlrMvyS9
RCzwhk1auwLVYLL6wLAod8VLcaD5/cKW/TRSPNRZZzzzJ1f+w+IbrL2kobCnaLeI
fveVYvNzml1QReW2azB2XP8sfkXaX2jWxjgDA2O7bImzLpoJ1fqyCUO1OSuw2X6J
lWykbHy1d47ECtNeh0tndWO3C0+/v5CDvbUxFSviGoUP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org