Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B7JyNTbYOATlAqVZgSHdXDLhmDw.roa
File: B7JyNTbYOATlAqVZgSHdXDLhmDw.roa (raw, json)
Hash identifier: RJQK4shXo1FPvhLJjSYmcWX5j2G5w4T+gK5cnkDHXaw=
Subject key identifier: 07:B2:72:35:36:D8:38:04:E5:02:A5:59:81:21:DD:5C:32:E1:98:3C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A701B031FFF361F28D13A2BF08E9A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B7JyNTbYOATlAqVZgSHdXDLhmDw.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.170.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 13:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:70:1b:03:1f:ff:36:1f:28:d1:3a:2b:f0:8e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07b2723536d83804e502a5598121dd5c32e1983c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:31:ce:a1:52:b1:74:2e:9e:68:f1:7e:54:5a:
fb:47:7c:36:ab:f1:b7:2e:bb:02:a4:b3:54:cd:85:
42:40:f8:d4:15:8b:72:c0:9c:ce:63:eb:a1:f2:ae:
c8:61:4e:4e:82:6a:fb:fd:07:8f:67:cc:75:f8:76:
8b:38:b6:c5:ba:18:bf:93:ef:fc:94:03:e0:af:63:
47:11:4b:62:5e:d8:d4:d2:6c:3a:90:db:44:94:95:
1f:81:f1:84:77:b5:0c:8b:ef:df:7d:90:c4:3d:c0:
0b:e2:bb:7f:4a:43:83:0d:1a:58:aa:b9:db:cc:78:
26:98:80:ca:44:be:3f:46:94:de:84:13:b6:6e:c4:
48:a8:f2:7f:9a:fa:72:00:9b:d4:83:43:06:14:f6:
2d:cd:59:e5:3a:a6:57:ef:f4:81:9e:70:29:b4:5c:
ca:c1:1b:46:da:d3:1e:1e:fe:8c:82:35:45:e3:82:
1d:16:77:7e:3c:ba:63:ab:34:af:cd:5e:e9:be:a0:
4c:7a:14:0b:a0:88:60:74:4d:1d:d2:31:20:80:4f:
ab:11:b8:e0:75:92:5d:4c:91:5a:a6:a3:08:29:b7:
6a:30:b9:bb:63:0d:18:e5:18:94:73:a2:26:49:3e:
78:45:28:f5:a1:b6:ad:c0:25:65:5c:74:ea:aa:17:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:72:35:36:D8:38:04:E5:02:A5:59:81:21:DD:5C:32:E1:98:3C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B7JyNTbYOATlAqVZgSHdXDLhmDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.170.0/24
192.124.172.0/24
212.192.253.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c5:04:37:62:ea:3c:3d:ed:0c:32:56:1b:1a:e2:78:68:ad:
96:1c:1b:26:75:49:ff:58:73:49:e8:8c:58:bf:fe:c9:e8:3f:
15:7e:c9:4b:d8:55:30:d1:09:cc:bc:70:02:18:f5:d7:e1:e6:
bd:b0:a9:7b:ae:65:cb:a7:fe:58:f5:51:17:a4:55:63:cd:9a:
c5:0f:80:52:39:f1:94:6b:7e:d0:02:0e:8e:9a:66:bc:fc:13:
c5:15:23:9d:60:e4:e4:d4:9f:65:5f:3c:bc:75:50:be:71:43:
5e:fd:e1:79:98:1f:e6:7d:98:52:2b:72:97:c4:a7:d5:59:1b:
e3:f7:3d:7b:b2:c2:e0:c3:59:e9:31:13:37:af:57:7b:b2:f5:
6e:0c:33:0c:1b:a1:bf:c1:8f:5d:5a:84:71:bd:ad:98:e5:68:
9b:15:eb:d3:d0:1e:88:85:6b:19:05:c7:73:55:10:b9:8b:dc:
3e:f0:40:a4:fd:75:e5:ef:10:0f:e3:6a:6a:25:62:28:b2:07:
c3:63:90:7b:35:71:d1:ea:51:64:04:83:22:09:df:33:d4:ca:
b7:f3:ec:58:aa:cd:4e:5d:96:97:00:d0:17:8d:9a:ca:bb:7a:
ab:d2:03:b9:57:3c:3f:1e:8f:d1:27:0f:7b:0f:b9:6c:10:46:
5d:78:a4:34
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKnAbAx//Nh8o0Tor8I6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2IyNzIzNTM2ZDgzODA0ZTUwMmE1NTk4MTIxZGQ1YzMyZTE5ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTHOoVKxdC6eaPF+VFr7R3w2q/G3
LrsCpLNUzYVCQPjUFYtywJzOY+uh8q7IYU5Ogmr7/QePZ8x1+HaLOLbFuhi/k+/8
lAPgr2NHEUtiXtjU0mw6kNtElJUfgfGEd7UMi+/ffZDEPcAL4rt/SkODDRpYqrnb
zHgmmIDKRL4/RpTehBO2bsRIqPJ/mvpyAJvUg0MGFPYtzVnlOqZX7/SBnnAptFzK
wRtG2tMeHv6MgjVF44IdFnd+PLpjqzSvzV7pvqBMehQLoIhgdE0d0jEggE+rEbjg
dZJdTJFapqMIKbdqMLm7Yw0Y5RiUc6ImST54RSj1obatwCVlXHTqqhdbjwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAeycjU22DgE5QKlWYEh3Vwy4Zg8MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQjdKeU5UYllPQVRsQXFWWmdTSGRYRExobUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHyqAwQA
wHysAwQA1MD9MA0GCSqGSIb3DQEBCwUAA4IBAQCQxQQ3Yuo8Pe0MMlYbGuJ4aK2W
HBsmdUn/WHNJ6IxYv/7J6D8VfslL2FUw0QnMvHACGPXX4ea9sKl7rmXLp/5Y9VEX
pFVjzZrFD4BSOfGUa37QAg6Omma8/BPFFSOdYOTk1J9lXzy8dVC+cUNe/eF5mB/m
fZhSK3KXxKfVWRvj9z17ssLgw1npMRM3r1d7svVuDDMMG6G/wY9dWoRxva2Y5Wib
FevT0B6IhWsZBcdzVRC5i9w+8ECk/XXl7xAP42pqJWIosgfDY5B7NXHR6lFkBIMi
Cd8z1Mq38+xYqs1OXZaXANAXjZrKu3qr0gO5Vzw/Ho/RJw97D7lsEEZdeKQ0
-----END CERTIFICATE-----
Generated at Thu Mar 7 17:08:10 2024 by rpki-client on console-ams.rpki-client.org