Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/IAta0fT0TX5D1iHBSJPEEEqEZOs.roa
File: IAta0fT0TX5D1iHBSJPEEEqEZOs.roa (raw, json)
Hash identifier: I10ni9Jo9zb3wAmefiKlj/+KMzk1ELlyZdYR8a7Uh5o=
Subject key identifier: 20:0B:5A:D1:F4:F4:4D:7E:43:D6:21:C1:48:93:C4:10:4A:84:64:EB
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 01856ED49E8DA5D5F4F92CE7946A3EC7F837
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/IAta0fT0TX5D1iHBSJPEEEqEZOs.roa
Signing time: Sun 01 Jan 2023 19:35:06 +0000
ROA not before: Sun 01 Jan 2023 19:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203526
IP address blocks: 194.76.122.0/23 maxlen: 24
2001:678:e28::/48 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:9e:8d:a5:d5:f4:f9:2c:e7:94:6a:3e:c7:f8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jan 1 19:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=200b5ad1f4f44d7e43d621c14893c4104a8464eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:39:df:e7:e2:a7:f2:7c:1e:c1:e3:e0:4e:
3e:69:8e:8d:b4:a4:cf:bc:30:42:bf:0c:ba:8a:5d:
89:5f:60:7c:1d:81:9a:d3:b6:6d:17:20:cd:bd:f2:
70:6a:12:af:c5:8d:ea:28:92:29:80:0c:c7:ae:d5:
82:fd:28:3d:54:10:a2:40:85:0e:61:20:86:be:21:
15:f4:61:c4:b0:10:c1:83:82:e6:7f:ec:95:b0:7c:
86:ee:a5:3b:a0:56:fe:a2:ec:71:f3:19:7f:97:85:
bb:93:73:92:f9:c6:88:fa:26:58:9c:e1:35:6e:7c:
9c:7c:c2:42:98:41:da:bd:a1:83:55:ba:94:06:1e:
6d:51:44:0e:1a:71:e2:ce:7f:37:a1:7e:48:f1:c0:
4c:f5:fb:f1:1b:2d:bd:14:ed:a1:1b:00:0c:5c:2f:
13:c0:43:4e:66:56:54:d2:b4:80:5c:ac:51:ec:ff:
24:0d:86:86:71:c8:2b:b2:d9:9c:9f:17:9e:de:63:
bc:cf:0f:e9:77:b9:bf:f0:27:80:3a:90:0b:bc:72:
cb:13:fc:3b:24:95:ff:eb:8e:80:d6:fc:ac:69:1f:
5a:30:3e:82:ed:4d:7e:32:75:e5:55:cd:00:9c:00:
ab:8c:62:63:69:75:19:f7:9c:2b:6f:f3:40:4a:89:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:5A:D1:F4:F4:4D:7E:43:D6:21:C1:48:93:C4:10:4A:84:64:EB
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/IAta0fT0TX5D1iHBSJPEEEqEZOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.122.0/23
IPv6:
2001:678:e28::/48
Signature Algorithm: sha256WithRSAEncryption
0e:ba:42:88:8b:49:7a:f3:c3:26:9b:e2:36:ea:14:c1:8e:64:
7b:37:9e:79:94:e8:f0:e9:ab:d9:70:15:06:19:fe:5d:6d:89:
5c:8b:d2:af:dd:65:41:c1:c3:40:e5:1e:9e:f7:86:af:4d:77:
30:ad:af:49:e2:7b:8b:8d:11:42:6c:2f:19:4c:9d:91:79:99:
9f:2f:95:a6:9d:e2:56:c8:58:53:c7:de:43:f9:96:eb:92:c7:
bd:8a:34:06:e6:1e:5e:4d:90:d1:04:a3:21:21:18:cf:76:35:
c8:62:bf:33:82:3c:35:b0:bd:5f:b1:ee:ea:84:bf:65:af:d4:
bd:bd:e6:90:f9:bb:4b:70:0d:6d:7d:d1:83:91:f1:8d:51:3f:
54:bd:52:ec:0d:c7:49:3b:cb:66:c2:f7:5f:85:26:e8:cf:3c:
ce:0f:fc:8d:af:6a:5c:84:d5:d0:65:cb:6e:88:99:2e:9f:5b:
f6:64:64:2b:b2:d2:e1:4a:98:46:78:49:73:d2:02:5e:9d:62:
5d:53:39:10:a7:ee:ad:eb:06:7e:b5:0d:b0:3e:77:5a:6f:f1:
e7:38:34:2b:60:80:c6:5b:9e:da:7c:d9:82:fa:92:d4:1c:42:
10:69:80:ec:35:34:45:eb:b5:8d:96:05:4b:de:b6:e7:2d:ef:
14:f6:31:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVu1J6NpdX0+SznlGo+x/g3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjMwMTAxMTkzNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDBiNWFkMWY0ZjQ0ZDdlNDNkNjIxYzE0ODkzYzQxMDRhODQ2NGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf453+fip/J8HsHj4E4+aY6NtKTP
vDBCvwy6il2JX2B8HYGa07ZtFyDNvfJwahKvxY3qKJIpgAzHrtWC/Sg9VBCiQIUO
YSCGviEV9GHEsBDBg4Lmf+yVsHyG7qU7oFb+ouxx8xl/l4W7k3OS+caI+iZYnOE1
bnycfMJCmEHavaGDVbqUBh5tUUQOGnHizn83oX5I8cBM9fvxGy29FO2hGwAMXC8T
wENOZlZU0rSAXKxR7P8kDYaGccgrstmcnxee3mO8zw/pd7m/8CeAOpALvHLLE/w7
JJX/646A1vysaR9aMD6C7U1+MnXlVc0AnACrjGJjaXUZ95wrb/NASom7QQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCALWtH09E1+Q9YhwUiTxBBKhGTrMB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvSUF0YTBmVDBUWDVEMWlIQlNKUEVFRXFFWk9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwkx6MA8E
AgACMAkDBwAgAQZ4DigwDQYJKoZIhvcNAQELBQADggEBAA66QoiLSXrzwyab4jbq
FMGOZHs3nnmU6PDpq9lwFQYZ/l1tiVyL0q/dZUHBw0DlHp73hq9NdzCtr0nie4uN
EUJsLxlMnZF5mZ8vlaad4lbIWFPH3kP5luuSx72KNAbmHl5NkNEEoyEhGM92Nchi
vzOCPDWwvV+x7uqEv2Wv1L295pD5u0twDW190YOR8Y1RP1S9UuwNx0k7y2bC91+F
JujPPM4P/I2valyE1dBly26ImS6fW/ZkZCuy0uFKmEZ4SXPSAl6dYl1TORCn7q3r
Bn61DbA+d1pv8ec4NCtggMZbntp82YL6ktQcQhBpgOw1NEXrtY2WBUvetuct7xT2
McA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org