Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/o5uADRRLmz_YmypAqok1sUuI_J0.roa
File: o5uADRRLmz_YmypAqok1sUuI_J0.roa (raw, json)
Hash identifier: XtpapX2d9mKbaRxKXjFes7Rg4DdRU/SN9Ho9+3JnjK4=
Subject key identifier: A3:9B:80:0D:14:4B:9B:3F:D8:9B:2A:40:AA:89:35:B1:4B:88:FC:9D
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A0274109110AF3E79E4AD26546ED9E5DE
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/o5uADRRLmz_YmypAqok1sUuI_J0.roa
Signing time: Thu 17 Aug 2023 07:44:35 +0000
ROA not before: Thu 17 Aug 2023 07:44:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 81.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 07:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:74:10:91:10:af:3e:79:e4:ad:26:54:6e:d9:e5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 17 07:44:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a39b800d144b9b3fd89b2a40aa8935b14b88fc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:a6:9f:2f:46:30:6b:46:09:59:e9:72:92:
43:4d:56:34:29:27:9e:b3:2c:2f:82:77:60:81:cd:
6d:0b:32:cd:93:e9:d6:69:09:94:7e:de:dc:67:a0:
25:c4:68:3d:4f:cb:43:ca:f1:c4:fc:89:de:26:20:
b8:75:dd:18:4f:e3:34:6d:ee:bb:6b:c4:e7:34:e9:
a5:63:10:52:e0:9e:d6:c6:b6:fa:1e:ba:90:91:b4:
04:08:4a:c3:37:4b:bf:c8:7a:65:a9:22:82:53:b3:
a3:7c:6a:9e:dd:9d:76:91:01:6e:72:23:f3:99:7e:
74:66:a4:94:0a:36:75:87:53:d8:4e:6f:98:4c:29:
38:c7:99:db:3b:33:c2:95:4d:2b:05:51:0f:fe:06:
24:25:35:0f:28:bd:e4:ae:cb:94:8b:20:1c:97:5c:
bf:ec:91:10:b9:7d:f0:8a:80:33:4a:c0:bd:46:4e:
0f:d1:8b:47:b3:ae:01:85:f1:70:51:c9:79:ae:77:
3b:e5:8a:7c:e1:17:1b:73:d2:f0:71:76:af:76:79:
91:72:e0:bf:06:22:34:de:a4:39:1b:8f:54:58:e5:
92:d1:a8:6b:54:a8:a7:08:01:65:2e:ff:98:50:98:
ae:6f:91:a6:1b:6d:e1:a2:9c:84:bb:44:dd:9c:96:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:80:0D:14:4B:9B:3F:D8:9B:2A:40:AA:89:35:B1:4B:88:FC:9D
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/o5uADRRLmz_YmypAqok1sUuI_J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
58:03:89:2f:04:18:d3:ef:52:0a:c8:68:ec:6a:f1:b1:7a:9d:
ad:30:64:1a:bd:5c:7e:f0:dc:b6:23:86:ef:29:93:b2:2b:50:
1b:2a:06:91:1c:d5:5d:b5:a6:9b:41:d1:59:9e:9f:4b:e2:1c:
e2:93:5e:98:ff:61:74:2f:dd:09:00:04:75:65:43:e1:4c:6b:
de:07:26:fb:aa:9b:6c:cb:de:3c:b0:58:dc:cf:43:b2:9b:c7:
91:fb:ab:74:6e:ce:86:42:7f:c0:39:a3:b9:39:5b:bb:b0:27:
89:64:2c:e6:ce:ba:10:2d:77:0a:e3:c9:65:4f:d6:99:f3:27:
09:b7:56:51:44:48:05:35:a4:1c:dd:05:bf:56:22:c1:05:37:
b5:bc:b3:82:70:04:c1:65:af:64:bd:2f:34:50:54:7d:4a:61:
b5:a1:d8:d0:17:d3:6c:78:1b:5b:45:7f:f1:3a:51:5b:42:90:
fa:29:15:28:de:a6:31:23:eb:28:83:1c:51:43:90:cf:3d:54:
bb:10:2b:5b:d2:d2:13:d4:2a:20:44:d4:37:de:0a:26:30:91:
09:7c:2c:7f:50:d7:77:2f:09:ee:6f:05:1d:fe:14:52:ca:62:
1f:80:1c:fb:58:90:12:79:a3:55:b1:6e:50:30:ad:6e:7d:bb:
e5:e1:12:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoCdBCREK8+eeStJlRu2eXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwODE3MDc0NDM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzliODAwZDE0NGI5YjNmZDg5YjJhNDBhYTg5MzViMTRiODhmYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp56mny9GMGtGCVnpcpJDTVY0KSee
sywvgndggc1tCzLNk+nWaQmUft7cZ6AlxGg9T8tDyvHE/IneJiC4dd0YT+M0be67
a8TnNOmlYxBS4J7Wxrb6HrqQkbQECErDN0u/yHplqSKCU7OjfGqe3Z12kQFuciPz
mX50ZqSUCjZ1h1PYTm+YTCk4x5nbOzPClU0rBVEP/gYkJTUPKL3krsuUiyAcl1y/
7JEQuX3wioAzSsC9Rk4P0YtHs64BhfFwUcl5rnc75Yp84Rcbc9LwcXavdnmRcuC/
BiI03qQ5G49UWOWS0ahrVKinCAFlLv+YUJiub5GmG23hopyEu0TdnJZZKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKObgA0US5s/2JsqQKqJNbFLiPydMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvbzV1QURSUkxtel9ZbXlwQXFvazFzVXVJX0owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaBMA0G
CSqGSIb3DQEBCwUAA4IBAQBYA4kvBBjT71IKyGjsavGxep2tMGQavVx+8Ny2I4bv
KZOyK1AbKgaRHNVdtaabQdFZnp9L4hzik16Y/2F0L90JAAR1ZUPhTGveByb7qpts
y948sFjcz0Oym8eR+6t0bs6GQn/AOaO5OVu7sCeJZCzmzroQLXcK48llT9aZ8ycJ
t1ZRREgFNaQc3QW/ViLBBTe1vLOCcATBZa9kvS80UFR9SmG1odjQF9NseBtbRX/x
OlFbQpD6KRUo3qYxI+sogxxRQ5DPPVS7ECtb0tIT1CogRNQ33gomMJEJfCx/UNd3
LwnubwUd/hRSymIfgBz7WJASeaNVsW5QMK1ufbvl4RJN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org