Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/o_Jo5_2nQJWnWLc6CCD10TBWizQ.roa
File: o_Jo5_2nQJWnWLc6CCD10TBWizQ.roa (raw, json)
Hash identifier: 8gm0jM8kpIFM4bd0XHhYV51ZEypNr6R06qvT4VqsoFw=
Subject key identifier: A3:F2:68:E7:FD:A7:40:95:A7:58:B7:3A:08:20:F5:D1:30:56:8B:34
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01856F798FE643FDB843EA719461B042928B
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/o_Jo5_2nQJWnWLc6CCD10TBWizQ.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65725
IP address blocks: 160.218.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8f:e6:43:fd:b8:43:ea:71:94:61:b0:42:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f268e7fda74095a758b73a0820f5d130568b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:b8:c3:18:57:25:76:5c:86:41:44:f3:29:
f7:cc:dc:79:d6:3b:90:7f:fd:b6:57:17:b5:f4:8e:
89:2c:23:12:9f:01:6b:ad:2e:56:65:3d:67:a4:c0:
8f:13:14:1c:74:cd:17:1b:3d:de:a2:7e:41:d6:bd:
f8:4f:16:8a:61:09:d3:d4:ec:92:5f:50:7e:5d:7b:
b2:5f:8e:d2:ff:1c:e9:44:38:32:42:20:e4:46:1e:
0c:de:84:fb:07:7c:88:4e:ee:27:6d:3e:a0:8f:cc:
3e:3e:85:a8:fa:0c:c5:83:be:35:d7:de:fe:b5:8e:
59:73:0b:59:cf:0c:f3:27:05:50:3e:66:af:73:91:
11:f5:4c:b0:ae:b9:0c:98:a2:aa:09:65:da:2f:d5:
17:ee:88:aa:16:1e:b4:9d:f9:42:e7:3f:ca:8e:f6:
5a:d6:35:16:80:11:6c:60:a3:59:f0:35:a0:45:ad:
9a:d4:17:da:3a:98:e5:c1:5a:f5:6e:42:d7:2e:83:
74:3a:85:2d:b4:8c:92:a5:de:e3:af:9e:a9:4a:d1:
33:9a:57:58:5a:d4:cf:10:56:21:cc:7b:1c:07:f0:
dc:63:10:f6:6f:6a:d9:05:a0:33:1b:f4:8b:64:cf:
27:15:05:45:5c:22:cf:93:82:15:1d:e8:e8:60:ac:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:68:E7:FD:A7:40:95:A7:58:B7:3A:08:20:F5:D1:30:56:8B:34
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/o_Jo5_2nQJWnWLc6CCD10TBWizQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.218.212.0/22
Signature Algorithm: sha256WithRSAEncryption
67:f9:9e:61:d0:ce:82:41:eb:03:a8:6a:a2:9a:6a:f3:25:9b:
78:10:fa:17:98:2f:99:d1:01:9c:15:1a:bd:4b:43:1f:41:07:
54:80:61:70:79:18:36:8b:99:12:5d:16:68:5d:f0:ce:53:eb:
5e:33:17:44:f4:ca:45:29:49:79:a6:13:89:82:54:9e:5a:73:
5d:e3:cf:b6:b8:8a:1d:59:7a:54:1e:36:06:dd:43:43:0f:60:
30:99:56:83:dd:af:87:e9:e2:0c:54:5b:4c:97:a1:e9:5e:45:
bb:fb:57:91:0f:41:36:8c:06:24:35:a3:bc:43:f1:b2:4d:f9:
ea:8b:56:75:96:17:a6:43:38:dc:03:b7:cb:5a:23:08:0c:db:
21:b6:39:e5:4d:22:86:f3:ab:59:b1:0f:48:a1:53:46:54:97:
68:c5:e0:9d:78:22:7a:d6:0d:42:ce:4a:e6:af:98:a2:ed:29:
78:89:71:e0:5c:14:86:b2:2e:fd:c5:67:82:f3:51:57:7b:7a:
be:e3:12:29:19:39:e9:ad:6e:c4:20:cc:e2:c6:f8:89:6e:80:
93:fb:73:79:4a:64:dd:5f:2d:88:6c:d2:f6:4b:f7:c6:57:55:
a1:16:ba:9a:84:19:49:89:94:28:fb:8f:ce:ca:ef:25:61:37:
33:25:1d:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveY/mQ/24Q+pxlGGwQpKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjMwMTAxMjIzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2YyNjhlN2ZkYTc0MDk1YTc1OGI3M2EwODIwZjVkMTMwNTY4YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1y4wxhXJXZchkFE8yn3zNx51juQ
f/22Vxe19I6JLCMSnwFrrS5WZT1npMCPExQcdM0XGz3eon5B1r34TxaKYQnT1OyS
X1B+XXuyX47S/xzpRDgyQiDkRh4M3oT7B3yITu4nbT6gj8w+PoWo+gzFg741197+
tY5ZcwtZzwzzJwVQPmavc5ER9UywrrkMmKKqCWXaL9UX7oiqFh60nflC5z/KjvZa
1jUWgBFsYKNZ8DWgRa2a1BfaOpjlwVr1bkLXLoN0OoUttIySpd7jr56pStEzmldY
WtTPEFYhzHscB/DcYxD2b2rZBaAzG/SLZM8nFQVFXCLPk4IVHejoYKzaSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPyaOf9p0CVp1i3Oggg9dEwVos0MB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvb19KbzVfMm5RSlduV0xjNkNDRDEwVEJXaXpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoNrUMA0G
CSqGSIb3DQEBCwUAA4IBAQBn+Z5h0M6CQesDqGqimmrzJZt4EPoXmC+Z0QGcFRq9
S0MfQQdUgGFweRg2i5kSXRZoXfDOU+teMxdE9MpFKUl5phOJglSeWnNd48+2uIod
WXpUHjYG3UNDD2AwmVaD3a+H6eIMVFtMl6HpXkW7+1eRD0E2jAYkNaO8Q/GyTfnq
i1Z1lhemQzjcA7fLWiMIDNshtjnlTSKG86tZsQ9IoVNGVJdoxeCdeCJ61g1Czkrm
r5ii7Sl4iXHgXBSGsi79xWeC81FXe3q+4xIpGTnprW7EIMzixviJboCT+3N5SmTd
Xy2IbNL2S/fGV1WhFrqahBlJiZQo+4/Oyu8lYTczJR2a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:22 2024 by rpki-client on console-ams.rpki-client.org