Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/c2bKWbaj-wjmlXzOzHGVSt9IRhY.roa
File: c2bKWbaj-wjmlXzOzHGVSt9IRhY.roa (raw, json)
Hash identifier: BkdHNwh64FjpyMlctsgXNMWitWB+cd1L4qu89J/802Y=
Subject key identifier: 73:66:CA:59:B6:A3:FB:08:E6:95:7C:CE:CC:71:95:4A:DF:48:46:16
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 01856D6F7009868A4C5EF2D118DE0B425B9E
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/c2bKWbaj-wjmlXzOzHGVSt9IRhY.roa
Signing time: Sun 01 Jan 2023 13:04:57 +0000
ROA not before: Sun 01 Jan 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44156
IP address blocks: 79.99.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:70:09:86:8a:4c:5e:f2:d1:18:de:0b:42:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Jan 1 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7366ca59b6a3fb08e6957ccecc71954adf484616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:e1:f2:00:69:b9:e1:ef:e5:eb:23:34:8a:
e2:f7:48:20:0e:9f:2d:08:40:24:80:41:41:e7:3c:
26:f7:8d:78:41:94:6f:ec:4a:ec:c4:32:b6:5e:f7:
88:3f:cc:d2:52:21:ae:b7:96:16:9a:97:29:e1:89:
68:62:d0:66:28:f9:33:43:0e:0f:f3:98:9f:a4:ed:
07:4c:fe:f4:9a:24:b0:46:ff:0e:c6:fc:eb:33:42:
3a:0a:59:4e:fe:c2:78:50:f9:9f:1b:c6:27:b8:97:
16:f1:8d:9c:b8:e1:50:6b:70:e4:4a:3e:a3:5a:99:
ce:26:a1:56:c1:1b:c3:c9:0a:7a:ce:43:33:f7:3e:
1a:61:b2:56:fc:a8:d0:9c:58:0a:3b:14:2d:2e:e4:
90:c8:ec:81:cb:96:3e:a1:4a:b9:7c:93:34:d4:4b:
79:2f:07:c5:47:57:ec:08:e2:2d:40:16:8b:7d:59:
12:4e:5c:f4:e2:82:00:90:7d:24:1a:1b:df:96:de:
73:27:af:c2:ea:97:42:4c:7a:5f:6f:07:25:e2:72:
3f:f6:bb:1b:58:e5:47:64:c3:dd:10:1f:a1:59:fb:
45:eb:c9:d2:33:3e:98:9a:fb:b3:c4:4e:5f:46:56:
49:c5:58:2f:25:b0:96:0a:06:7f:cc:18:f3:d8:35:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:CA:59:B6:A3:FB:08:E6:95:7C:CE:CC:71:95:4A:DF:48:46:16
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/c2bKWbaj-wjmlXzOzHGVSt9IRhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.96.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:ed:6d:ec:58:12:c3:59:dc:ef:9b:d7:3c:37:26:33:41:09:
86:79:14:c0:76:97:c4:55:09:e5:70:05:d4:a3:6c:15:24:b1:
99:a5:3a:aa:26:4e:f9:1c:01:41:c4:b3:08:8c:62:af:1f:ee:
c9:74:77:03:66:85:1d:9a:a6:6f:d1:2c:4a:83:f5:04:70:1e:
79:ad:3c:fc:97:ed:90:f7:3d:a1:bf:36:08:15:f8:ea:fd:c3:
f2:f6:b4:29:c3:fd:4e:66:40:19:4d:c9:fe:f9:0e:92:3d:0f:
a8:7a:8b:aa:bf:62:fb:04:57:3b:19:7b:57:69:2b:28:4c:56:
42:7a:4e:69:b0:6a:c9:f1:e4:68:c1:07:db:2e:27:d9:a5:0c:
84:b9:92:d6:e1:1e:41:75:de:b6:51:c0:89:c2:3a:cb:14:74:
71:e2:5b:0f:22:8f:f4:ab:18:6b:76:eb:d5:9f:19:18:16:48:
b9:e0:de:f6:44:5a:ee:47:86:a9:88:c7:e2:cd:09:ca:54:cd:
02:5d:b6:ed:6f:cf:25:c3:78:d7:16:08:a6:b2:2e:22:75:93:
bb:11:60:3a:b6:da:77:b1:cb:d0:8c:67:98:af:7b:e3:df:df:
ac:11:72:ae:c8:32:a1:b3:0e:eb:fb:52:21:d7:93:d5:96:f8:
ed:47:08:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtb3AJhopMXvLRGN4LQlueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTgxNWJlNzU0N2ViODcwZWI1ZjY0MWQzMGZlNjk2Mzc0
MWM4ZTAwHhcNMjMwMTAxMTMwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzY2Y2E1OWI2YTNmYjA4ZTY5NTdjY2VjYzcxOTU0YWRmNDg0NjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRXh8gBpueHv5esjNIri90ggDp8t
CEAkgEFB5zwm9414QZRv7ErsxDK2XveIP8zSUiGut5YWmpcp4YloYtBmKPkzQw4P
85ifpO0HTP70miSwRv8OxvzrM0I6CllO/sJ4UPmfG8YnuJcW8Y2cuOFQa3DkSj6j
WpnOJqFWwRvDyQp6zkMz9z4aYbJW/KjQnFgKOxQtLuSQyOyBy5Y+oUq5fJM01Et5
LwfFR1fsCOItQBaLfVkSTlz04oIAkH0kGhvflt5zJ6/C6pdCTHpfbwcl4nI/9rsb
WOVHZMPdEB+hWftF68nSMz6YmvuzxE5fRlZJxVgvJbCWCgZ/zBjz2DXi3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNmylm2o/sI5pV8zsxxlUrfSEYWMB8GA1UdIwQY
MBaAFKmoFb51R+uHDrX2QdMP5pY3QcjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEt
MjQzYzVmNGUyZTQwLzEvYzJiS1diYWotd2ptbFh6T3pIR1ZTdDlJUmhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEtMjQzYzVmNGUyZTQw
LzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT2NgMA0G
CSqGSIb3DQEBCwUAA4IBAQC87W3sWBLDWdzvm9c8NyYzQQmGeRTAdpfEVQnlcAXU
o2wVJLGZpTqqJk75HAFBxLMIjGKvH+7JdHcDZoUdmqZv0SxKg/UEcB55rTz8l+2Q
9z2hvzYIFfjq/cPy9rQpw/1OZkAZTcn++Q6SPQ+oeouqv2L7BFc7GXtXaSsoTFZC
ek5psGrJ8eRowQfbLifZpQyEuZLW4R5Bdd62UcCJwjrLFHRx4lsPIo/0qxhrduvV
nxkYFki54N72RFruR4apiMfizQnKVM0CXbbtb88lw3jXFgimsi4idZO7EWA6ttp3
scvQjGeYr3vj39+sEXKuyDKhsw7r+1Ih15PVlvjtRwiC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:03 2024 by rpki-client on console-fra.rpki-client.org