Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JiUfI0CcL5sH7gDiwOu4t8jr5Z8.roa
File: JiUfI0CcL5sH7gDiwOu4t8jr5Z8.roa (raw, json)
Hash identifier: /ahB0PqnO+L31dWwbKNN54RHTSYlrsM4RS+ypEBb6pE=
Subject key identifier: 26:25:1F:23:40:9C:2F:9B:07:EE:00:E2:C0:EB:B8:B7:C8:EB:E5:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018754B052EB6A24622D7D1BF87DEC0A654C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JiUfI0CcL5sH7gDiwOu4t8jr5Z8.roa
Signing time: Thu 06 Apr 2023 03:50:54 +0000
ROA not before: Thu 06 Apr 2023 03:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.172.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:54:b0:52:eb:6a:24:62:2d:7d:1b:f8:7d:ec:0a:65:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 03:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26251f23409c2f9b07ee00e2c0ebb8b7c8ebe59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:2a:19:4d:d1:00:4e:4e:90:0d:59:f6:68:
70:e6:16:ee:9e:4a:b0:a2:56:9a:f4:25:98:24:6e:
b6:94:6e:d1:54:1d:0c:d2:ba:5e:ec:89:b6:a2:c6:
d9:c7:fa:4b:d5:5b:e4:dc:90:2a:45:74:ca:09:03:
51:4a:1a:bc:e5:bd:b6:9e:7f:6e:c3:f4:57:ec:43:
dc:fd:4e:88:15:21:ff:70:35:ae:af:6a:d7:c7:32:
e0:92:9b:5d:58:0b:75:55:78:2d:40:73:10:3a:6b:
48:70:0e:5d:75:ae:89:62:62:bb:2e:86:c0:ab:f6:
e4:01:27:e3:6d:c4:9a:c5:36:12:a8:92:fd:80:6b:
a0:3e:63:d4:c3:de:a4:00:64:ad:07:df:93:31:6a:
64:34:0d:68:76:79:b0:71:14:2f:ae:16:e0:83:bb:
fb:3a:9c:16:e9:c2:04:c9:d6:ca:c9:93:8b:80:e3:
a4:3b:c5:52:bc:67:db:63:4d:a7:41:b9:67:ec:48:
72:28:f8:e6:c0:5a:cc:42:bd:cf:0b:8e:26:e5:92:
e9:8a:75:57:6a:e9:35:33:54:50:1f:69:42:ec:5f:
d4:e2:51:a4:f9:d2:ab:b9:e4:dc:21:da:f0:4e:66:
95:cb:5b:18:ac:ae:8d:f7:13:11:5c:f1:0c:57:08:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:1F:23:40:9C:2F:9B:07:EE:00:E2:C0:EB:B8:B7:C8:EB:E5:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JiUfI0CcL5sH7gDiwOu4t8jr5Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.183.0/24
Signature Algorithm: sha256WithRSAEncryption
01:28:2f:aa:6e:eb:f0:81:f0:dc:94:4c:6d:0b:23:f9:9e:1f:
f0:91:84:ec:d3:27:57:9d:c3:29:31:4f:49:8e:58:a9:d4:1e:
60:c1:9f:db:dd:a2:28:61:01:44:f0:75:86:e4:f2:1a:c9:59:
d7:d9:db:b4:d8:dd:60:3e:59:2f:d3:6c:68:4c:da:7f:85:58:
4c:c6:1b:dc:2c:66:ed:d3:07:b8:c6:ef:1b:d1:60:eb:d4:df:
8b:f2:b6:0a:8a:27:2c:ac:f0:9a:ce:c3:d0:24:6e:85:01:d7:
fb:83:5d:f4:0a:e1:58:91:ba:4b:b4:3e:c2:c4:b8:0a:36:a6:
6d:2c:9e:05:ff:83:35:5b:1d:75:db:b4:b8:0b:fd:db:86:d4:
ef:20:1b:1e:b8:f5:a7:2a:bd:65:8d:09:cc:55:93:12:5d:5f:
37:d1:b0:af:92:cd:e7:9c:7e:13:c9:8d:03:c4:91:1f:89:be:
5a:36:6a:99:38:39:e1:c8:b0:dc:db:bc:dc:e2:7b:4f:73:2f:
7c:75:d7:30:cf:f3:39:65:a5:4f:ad:78:78:a6:df:d0:21:9a:
97:84:d4:91:3b:b3:78:95:42:ba:07:f3:7c:b5:c7:1a:51:8c:
09:e7:a6:ab:b8:c1:b2:9e:7a:df:64:44:6a:19:7c:05:f5:c1:
0c:ad:d4:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdUsFLraiRiLX0b+H3sCmVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA2MDM1MDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjI1MWYyMzQwOWMyZjliMDdlZTAwZTJjMGViYjhiN2M4ZWJlNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7kqGU3RAE5OkA1Z9mhw5hbunkqw
olaa9CWYJG62lG7RVB0M0rpe7Im2osbZx/pL1Vvk3JAqRXTKCQNRShq85b22nn9u
w/RX7EPc/U6IFSH/cDWur2rXxzLgkptdWAt1VXgtQHMQOmtIcA5dda6JYmK7LobA
q/bkASfjbcSaxTYSqJL9gGugPmPUw96kAGStB9+TMWpkNA1odnmwcRQvrhbgg7v7
OpwW6cIEydbKyZOLgOOkO8VSvGfbY02nQbln7EhyKPjmwFrMQr3PC44m5ZLpinVX
auk1M1RQH2lC7F/U4lGk+dKrueTcIdrwTmaVy1sYrK6N9xMRXPEMVwjsGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCYlHyNAnC+bB+4A4sDruLfI6+WfMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSmlVZkkwQ2NMNXNIN2dEaXdPdTR0OGpyNVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHysAwQA
wHy3MA0GCSqGSIb3DQEBCwUAA4IBAQABKC+qbuvwgfDclExtCyP5nh/wkYTs0ydX
ncMpMU9Jjlip1B5gwZ/b3aIoYQFE8HWG5PIayVnX2du02N1gPlkv02xoTNp/hVhM
xhvcLGbt0we4xu8b0WDr1N+L8rYKiicsrPCazsPQJG6FAdf7g130CuFYkbpLtD7C
xLgKNqZtLJ4F/4M1Wx1127S4C/3bhtTvIBseuPWnKr1ljQnMVZMSXV830bCvks3n
nH4TyY0DxJEfib5aNmqZODnhyLDc27zc4ntPcy98ddcwz/M5ZaVPrXh4pt/QIZqX
hNSRO7N4lUK6B/N8tccaUYwJ56aruMGynnrfZERqGXwF9cEMrdSX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org