Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/qALSxv49MPa0e4iZg0udFcahZ2w.roa
File: qALSxv49MPa0e4iZg0udFcahZ2w.roa (raw, json)
Hash identifier: 07SnLVJGYvyjA1PtUVjJ/f2RAQqq9//1B/fSyAdl5xY=
Subject key identifier: A8:02:D2:C6:FE:3D:30:F6:B4:7B:88:99:83:4B:9D:15:C6:A1:67:6C
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 01857042928566D69CA6C37A43A153A230CF
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/qALSxv49MPa0e4iZg0udFcahZ2w.roa
Signing time: Mon 02 Jan 2023 02:14:49 +0000
ROA not before: Mon 02 Jan 2023 02:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56410
IP address blocks: 217.115.124.0/24 maxlen: 24
217.115.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:92:85:66:d6:9c:a6:c3:7a:43:a1:53:a2:30:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jan 2 02:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a802d2c6fe3d30f6b47b8899834b9d15c6a1676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:46:55:f3:78:b5:95:21:b6:b0:7b:61:84:
2a:06:73:54:53:f8:fc:f2:56:ee:f4:dd:88:68:ef:
7d:e3:ac:47:e0:0a:d1:6a:d9:0e:0b:be:e8:ca:dc:
7e:b2:b8:07:bb:dd:b4:6b:67:b0:8f:45:a6:20:03:
e2:27:e6:56:f4:c3:98:d3:3a:d2:36:46:52:a3:23:
c6:6d:35:05:1b:10:c3:e0:cd:f3:a0:88:4f:9e:2d:
46:44:45:31:75:b8:39:63:c9:13:c3:f7:ec:d6:12:
9f:bd:c6:68:2f:91:12:08:36:96:88:64:20:01:37:
cc:44:01:86:60:cb:ac:c6:a5:c3:38:2c:23:8d:59:
8f:82:0e:5b:19:4e:69:67:f2:3a:7e:af:26:0e:26:
c5:67:00:fa:af:00:1c:63:ba:bb:e4:ec:ed:64:ec:
c0:b7:31:37:bb:c6:d1:cd:7b:36:99:5a:ca:fa:89:
a7:dd:e7:99:91:16:71:e2:d2:ce:6b:02:dd:ff:8b:
4b:8a:83:49:98:c4:05:b1:7f:88:4e:ea:e1:ab:19:
d2:1f:79:7e:12:c1:65:73:7f:8f:7e:7b:5b:27:09:
f5:68:b2:44:f2:ed:67:04:a5:55:03:2e:06:03:86:
c9:02:b0:c5:27:df:95:39:87:d6:15:fd:a8:99:a6:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:D2:C6:FE:3D:30:F6:B4:7B:88:99:83:4B:9D:15:C6:A1:67:6C
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/qALSxv49MPa0e4iZg0udFcahZ2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.115.121.0/24
217.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:49:53:1f:3c:49:83:43:16:39:90:8c:bc:35:fe:f8:81:2b:
2b:a7:99:4e:50:4e:a7:3b:05:e3:31:f9:31:e5:26:e1:ae:e4:
94:e5:1e:c4:12:05:63:9b:f6:2e:0e:09:0f:7a:cd:bd:e6:48:
1f:8f:94:56:3c:02:cd:5e:42:70:4f:53:b1:38:a1:f6:fe:6a:
6a:a4:e9:85:4a:ef:2e:68:4d:ee:c9:ff:21:08:fa:38:3b:48:
a3:60:8f:51:93:d8:ac:69:97:0c:2e:c2:8a:5c:5a:94:e2:03:
90:d4:13:8b:75:1d:cb:2d:10:90:7e:55:9a:b4:2b:f7:34:f1:
9d:25:e9:df:88:8c:4f:20:d7:35:df:b4:1d:ba:97:5b:b7:fe:
3c:ef:78:0f:11:3b:ff:dc:94:89:04:c4:c1:49:5c:c1:ff:59:
60:f5:40:f6:54:ce:a8:79:20:69:14:95:b9:2e:48:41:53:a7:
84:85:89:48:5a:b3:f5:68:03:43:2e:c2:5b:c2:ed:6f:67:7b:
73:1f:13:9f:17:c2:73:36:89:b3:e6:84:60:24:9b:fc:87:1c:
01:85:56:a6:ea:ec:79:f3:12:58:64:8c:56:aa:be:fc:4a:85:
88:42:8b:aa:eb:78:0d:8d:ab:e4:f2:04:0b:c8:fe:5a:26:23:
a4:dd:c2:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwQpKFZtacpsN6Q6FTojDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx
YzdmNzUwHhcNMjMwMTAyMDIxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODAyZDJjNmZlM2QzMGY2YjQ3Yjg4OTk4MzRiOWQxNWM2YTE2NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe5GVfN4tZUhtrB7YYQqBnNUU/j8
8lbu9N2IaO9946xH4ArRatkOC77oytx+srgHu920a2ewj0WmIAPiJ+ZW9MOY0zrS
NkZSoyPGbTUFGxDD4M3zoIhPni1GREUxdbg5Y8kTw/fs1hKfvcZoL5ESCDaWiGQg
ATfMRAGGYMusxqXDOCwjjVmPgg5bGU5pZ/I6fq8mDibFZwD6rwAcY7q75OztZOzA
tzE3u8bRzXs2mVrK+omn3eeZkRZx4tLOawLd/4tLioNJmMQFsX+ITurhqxnSH3l+
EsFlc3+PfntbJwn1aLJE8u1nBKVVAy4GA4bJArDFJ9+VOYfWFf2omab5LwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKgC0sb+PTD2tHuImYNLnRXGoWdsMB8GA1UdIwQY
MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt
YTM4ZTFlY2E0ZmQ0LzEvcUFMU3h2NDlNUGEwZTRpWmcwdWRGY2FoWjJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0
LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2XN5AwQA
2XN8MA0GCSqGSIb3DQEBCwUAA4IBAQAuSVMfPEmDQxY5kIy8Nf74gSsrp5lOUE6n
OwXjMfkx5SbhruSU5R7EEgVjm/YuDgkPes295kgfj5RWPALNXkJwT1OxOKH2/mpq
pOmFSu8uaE3uyf8hCPo4O0ijYI9Rk9isaZcMLsKKXFqU4gOQ1BOLdR3LLRCQflWa
tCv3NPGdJenfiIxPINc137Qdupdbt/4873gPETv/3JSJBMTBSVzB/1lg9UD2VM6o
eSBpFJW5LkhBU6eEhYlIWrP1aANDLsJbwu1vZ3tzHxOfF8JzNomz5oRgJJv8hxwB
hVam6ux58xJYZIxWqr78SoWIQouq63gNjavk8gQLyP5aJiOk3cLz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:27 2024 by rpki-client on console-ams.rpki-client.org