Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/xv4CL3Xri_27Od-La_fRuMD1vo8.roa
File: xv4CL3Xri_27Od-La_fRuMD1vo8.roa (raw, json)
Hash identifier: 77qMumP50Rm1CGSw81xWZzCAavEnsYcEeX7JsZlLz/I=
Subject key identifier: C6:FE:02:2F:75:EB:8B:FD:BB:39:DF:8B:6B:F7:D1:B8:C0:F5:BE:8F
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 01856DC1E3FB0B02D7D9DD9C4A4E61BD98EE
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/xv4CL3Xri_27Od-La_fRuMD1vo8.roa
Signing time: Sun 01 Jan 2023 14:35:01 +0000
ROA not before: Sun 01 Jan 2023 14:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29203
IP address blocks: 192.162.76.0/22 maxlen: 22
2001:67c:1370::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:e3:fb:0b:02:d7:d9:dd:9c:4a:4e:61:bd:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Jan 1 14:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6fe022f75eb8bfdbb39df8b6bf7d1b8c0f5be8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:6b:61:89:c9:24:75:77:cb:75:35:99:12:
da:5d:3c:ba:ec:9f:2c:3d:00:c0:c1:76:57:ed:db:
f8:51:9e:e6:d0:9e:3f:e2:43:2b:ca:9d:4e:26:80:
44:cf:30:fe:83:b0:e8:e5:1d:c7:b0:10:24:f9:4e:
0c:1f:62:c3:cd:dd:d3:fe:33:5d:a1:18:d3:08:eb:
ec:28:de:e7:68:28:ac:85:f7:e0:4f:06:23:d7:12:
a7:9e:56:65:5a:36:fa:5f:40:2a:d3:11:d0:08:61:
4d:2f:96:73:07:13:dc:64:ce:c5:be:75:ce:f7:aa:
6f:6d:f8:92:31:8f:21:68:18:bf:f2:1b:d1:b0:db:
a3:75:20:d3:b8:2d:68:13:88:e9:27:fc:31:3e:b1:
0d:d0:b3:8c:af:23:75:ad:4a:fe:6e:67:9b:cb:62:
dd:b8:74:03:1a:83:0d:d3:62:14:75:e3:ad:3f:5e:
b7:e2:64:97:5d:fa:15:6b:52:10:ae:ad:2a:1b:4f:
25:ae:5c:63:55:d8:97:28:3f:c9:1b:4b:5a:fe:a6:
3a:54:af:2d:d3:60:b1:27:d4:a3:3b:ef:90:13:10:
cb:99:8c:83:83:4f:db:3a:a1:fc:84:e8:5d:db:26:
6d:ac:ee:9c:a0:64:b0:ca:d6:1e:3a:b0:83:92:4e:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:02:2F:75:EB:8B:FD:BB:39:DF:8B:6B:F7:D1:B8:C0:F5:BE:8F
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/xv4CL3Xri_27Od-La_fRuMD1vo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.76.0/22
IPv6:
2001:67c:1370::/48
Signature Algorithm: sha256WithRSAEncryption
5c:3e:d2:fb:6f:32:01:0c:fa:3e:c7:58:0c:9a:34:ff:25:1c:
93:36:1d:63:c5:44:f8:8b:33:d4:3a:b2:81:b6:ab:30:98:e2:
28:0e:64:b1:6a:b1:f3:92:87:01:75:b2:83:04:dd:72:6f:47:
c6:a7:2b:34:a4:05:1e:8c:3d:60:83:61:25:56:8b:0b:a4:31:
cf:aa:4e:40:bd:fa:3c:62:c2:3b:84:ae:3d:76:2d:e0:44:7a:
ef:32:b1:1b:9e:c3:dc:da:3b:fe:95:f6:68:7d:d9:85:60:d0:
b8:42:ff:b4:56:d6:66:62:3d:dd:5b:8e:2e:6a:8f:3b:e4:3e:
cc:57:33:eb:f0:fa:61:b4:65:51:66:5b:40:95:41:bc:c1:79:
20:75:2d:55:a6:dc:ea:5c:f2:61:e4:b3:51:49:4b:63:5e:0f:
7c:8c:f9:71:c8:49:71:cf:ea:44:36:af:87:71:6d:28:c7:22:
45:92:fa:2e:f4:14:f8:b1:f4:bd:26:ad:ea:52:2f:16:32:02:
31:da:eb:53:15:33:ef:b8:3f:55:b9:aa:77:34:53:97:0e:de:
54:36:5d:17:79:a9:79:eb:17:7d:5d:d6:7b:2e:2f:a2:ff:f6:
c8:b2:84:e0:cb:84:2c:59:3c:08:ad:69:c3:a3:0f:4c:f6:87:
ae:3e:f1:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtweP7CwLX2d2cSk5hvZjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz
MTMzNGQwHhcNMjMwMTAxMTQzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmZlMDIyZjc1ZWI4YmZkYmIzOWRmOGI2YmY3ZDFiOGMwZjViZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5drYYnJJHV3y3U1mRLaXTy67J8s
PQDAwXZX7dv4UZ7m0J4/4kMryp1OJoBEzzD+g7Do5R3HsBAk+U4MH2LDzd3T/jNd
oRjTCOvsKN7naCishffgTwYj1xKnnlZlWjb6X0Aq0xHQCGFNL5ZzBxPcZM7FvnXO
96pvbfiSMY8haBi/8hvRsNujdSDTuC1oE4jpJ/wxPrEN0LOMryN1rUr+bmeby2Ld
uHQDGoMN02IUdeOtP1634mSXXfoVa1IQrq0qG08lrlxjVdiXKD/JG0ta/qY6VK8t
02CxJ9SjO++QExDLmYyDg0/bOqH8hOhd2yZtrO6coGSwytYeOrCDkk7HTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMb+Ai9164v9uznfi2v30bjA9b6PMB8GA1UdIwQY
MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt
ZGZhMWM5YjNmZDFmLzEveHY0Q0wzWHJpXzI3T2QtTGFfZlJ1TUQxdm84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm
LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwKJMMA8E
AgACMAkDBwAgAQZ8E3AwDQYJKoZIhvcNAQELBQADggEBAFw+0vtvMgEM+j7HWAya
NP8lHJM2HWPFRPiLM9Q6soG2qzCY4igOZLFqsfOShwF1soME3XJvR8anKzSkBR6M
PWCDYSVWiwukMc+qTkC9+jxiwjuErj12LeBEeu8ysRuew9zaO/6V9mh92YVg0LhC
/7RW1mZiPd1bji5qjzvkPsxXM+vw+mG0ZVFmW0CVQbzBeSB1LVWm3Opc8mHks1FJ
S2NeD3yM+XHISXHP6kQ2r4dxbSjHIkWS+i70FPix9L0mrepSLxYyAjHa61MVM++4
P1W5qnc0U5cO3lQ2XRd5qXnrF31d1nsuL6L/9siyhODLhCxZPAitacOjD0z2h64+
8Qo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:56 2024 by rpki-client on console-fra.rpki-client.org