Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Meacx79GrsYu4sUkxlHGHrYrzyE.roa
File: Meacx79GrsYu4sUkxlHGHrYrzyE.roa (raw, json)
Hash identifier: UWVVMrTLKEAGvwiht4gcOgRtz2TmQgbtm1xf5yFrmZ8=
Subject key identifier: 31:E6:9C:C7:BF:46:AE:C6:2E:E2:C5:24:C6:51:C6:1E:B6:2B:CF:21
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01856E2FBB87CE8F3BA8542CCB76968D136B
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Meacx79GrsYu4sUkxlHGHrYrzyE.roa
Signing time: Sun 01 Jan 2023 16:35:00 +0000
ROA not before: Sun 01 Jan 2023 16:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 212.60.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:bb:87:ce:8f:3b:a8:54:2c:cb:76:96:8d:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 16:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31e69cc7bf46aec62ee2c524c651c61eb62bcf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:a8:05:8d:f5:b0:b5:04:0f:61:62:62:36:
42:6d:fd:69:51:9b:ae:9b:6e:2c:17:9a:0b:c1:12:
bc:0e:fd:97:ae:1d:96:f1:76:46:b5:bf:57:62:9e:
a3:02:5a:ec:99:52:45:5f:3c:7d:aa:b3:0c:f5:a5:
f7:fa:8b:04:02:47:a6:63:47:28:63:40:44:4d:8f:
6f:c2:26:74:c8:bb:5c:54:f6:97:78:3d:cb:7a:66:
ce:47:e2:12:cd:50:25:36:d1:14:93:80:aa:c0:69:
53:21:3f:ef:3f:c6:ee:59:75:ba:ae:c3:b0:90:1c:
a3:0c:b5:cf:3b:2e:20:7e:5b:87:85:2a:db:91:01:
d9:ef:3c:89:51:f6:11:7f:a4:8a:6c:c6:81:41:1c:
6b:b0:2f:32:fd:a5:d8:00:de:71:3f:9a:c7:25:24:
2a:64:e9:bd:9e:2d:32:74:e8:7c:99:1c:fb:c8:6e:
c3:99:8e:c5:9f:ea:41:70:aa:4c:3d:e8:02:da:06:
d0:5f:98:39:43:3f:e5:0f:50:00:bc:ac:ba:ba:71:
fa:ff:af:65:72:09:04:d0:83:26:ee:03:89:9f:f7:
52:bb:43:1a:25:17:bd:65:39:29:c3:c0:06:61:3a:
1c:af:79:a8:b8:0d:00:23:b3:90:7c:fb:59:b5:98:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E6:9C:C7:BF:46:AE:C6:2E:E2:C5:24:C6:51:C6:1E:B6:2B:CF:21
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Meacx79GrsYu4sUkxlHGHrYrzyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:87:19:62:36:a3:84:6b:28:a0:3e:72:5c:64:1b:20:25:84:
9a:85:8c:51:4b:d9:71:7f:4f:6f:cf:8c:66:99:17:28:72:2d:
98:49:ec:33:d0:3f:10:8c:f7:8b:31:a3:f3:3f:5a:3f:73:b3:
d8:cd:ca:8c:fe:e5:b2:36:90:b2:17:c7:cf:b2:7c:41:29:56:
28:df:7b:ab:0d:a0:14:89:c5:13:18:d6:e0:b2:08:4d:cc:00:
3e:ef:3d:d6:0b:a7:ed:5d:49:74:b3:1e:7a:1b:a4:59:78:ac:
28:39:d4:d4:dd:18:79:6c:b2:1d:db:72:a7:f0:92:c1:ba:80:
df:7d:e5:1b:16:c8:a3:4d:ac:b9:01:1a:46:d5:88:86:fb:16:
02:a2:f4:80:a1:18:df:86:9e:a0:73:42:1c:a4:f2:54:77:3e:
46:a6:20:6e:69:9e:4b:df:39:94:f8:6b:6b:c3:2f:5a:5e:00:
1a:24:20:2f:13:6c:cb:12:7e:86:21:ca:57:37:85:93:5e:a2:
8a:af:71:b8:f5:6d:68:fd:39:b0:95:fa:b2:3e:e5:76:16:92:
ca:6d:40:00:30:77:5d:3d:47:c5:bb:94:34:c8:9b:1c:34:b1:
6f:3a:26:80:35:ff:6e:7c:09:8e:a0:11:2c:b8:ec:ab:3d:71:
af:6c:75:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL7uHzo87qFQsy3aWjRNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjMwMTAxMTYzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWU2OWNjN2JmNDZhZWM2MmVlMmM1MjRjNjUxYzYxZWI2MmJjZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnSoBY31sLUED2FiYjZCbf1pUZuu
m24sF5oLwRK8Dv2Xrh2W8XZGtb9XYp6jAlrsmVJFXzx9qrMM9aX3+osEAkemY0co
Y0BETY9vwiZ0yLtcVPaXeD3LembOR+ISzVAlNtEUk4CqwGlTIT/vP8buWXW6rsOw
kByjDLXPOy4gfluHhSrbkQHZ7zyJUfYRf6SKbMaBQRxrsC8y/aXYAN5xP5rHJSQq
ZOm9ni0ydOh8mRz7yG7DmY7Fn+pBcKpMPegC2gbQX5g5Qz/lD1AAvKy6unH6/69l
cgkE0IMm7gOJn/dSu0MaJRe9ZTkpw8AGYTocr3mouA0AI7OQfPtZtZinOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDHmnMe/Rq7GLuLFJMZRxh62K88hMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvTWVhY3g3OUdyc1l1NHNVa3hsSEdIcllyenlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DwXMA0G
CSqGSIb3DQEBCwUAA4IBAQAchxliNqOEayigPnJcZBsgJYSahYxRS9lxf09vz4xm
mRcoci2YSewz0D8QjPeLMaPzP1o/c7PYzcqM/uWyNpCyF8fPsnxBKVYo33urDaAU
icUTGNbgsghNzAA+7z3WC6ftXUl0sx56G6RZeKwoOdTU3Rh5bLId23Kn8JLBuoDf
feUbFsijTay5ARpG1YiG+xYCovSAoRjfhp6gc0IcpPJUdz5GpiBuaZ5L3zmU+Gtr
wy9aXgAaJCAvE2zLEn6GIcpXN4WTXqKKr3G49W1o/TmwlfqyPuV2FpLKbUAAMHdd
PUfFu5Q0yJscNLFvOiaANf9ufAmOoBEsuOyrPXGvbHWs
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org