Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aIxkPGxNDwktfyLRq0wOZgAozlM.roa
File: aIxkPGxNDwktfyLRq0wOZgAozlM.roa (raw, json)
Hash identifier: 8ODvmM8+MYBa1xlwr3r4zYjgoiNkM5KQfzWMFwffYd4=
Subject key identifier: 68:8C:64:3C:6C:4D:0F:09:2D:7F:22:D1:AB:4C:0E:66:00:28:CE:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018ADF84D909CB6FD1DEDC4A50A8B117B43D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aIxkPGxNDwktfyLRq0wOZgAozlM.roa
Signing time: Fri 29 Sep 2023 05:59:00 +0000
ROA not before: Fri 29 Sep 2023 05:59:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 192.124.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:84:d9:09:cb:6f:d1:de:dc:4a:50:a8:b1:17:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 29 05:59:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=688c643c6c4d0f092d7f22d1ab4c0e660028ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:b9:18:24:f5:03:4c:9f:da:ce:e6:21:4a:
c1:fe:b8:cd:77:a5:32:17:e6:e0:e1:6a:7e:7c:09:
33:8e:fb:d9:a2:f2:16:54:22:bc:30:ba:79:73:be:
18:25:43:df:84:ee:bc:9b:ff:d8:24:4d:c5:b4:92:
97:9f:8e:4e:72:7f:bf:be:bb:c1:d5:0b:32:5a:15:
81:0d:df:e6:59:df:5d:8f:3b:d0:e6:37:cd:a2:c5:
fa:d5:82:09:ca:c5:d0:61:c3:8a:93:ec:6a:64:5d:
6b:96:34:69:39:cc:ef:d9:02:41:92:a7:42:9e:11:
a4:6f:56:9e:40:b9:fb:57:48:33:27:94:61:1a:f8:
38:d9:19:b2:6b:8e:ef:a1:ff:6f:02:2f:23:b9:47:
b3:34:56:3d:00:c8:5b:04:f5:df:64:55:f0:a4:5b:
22:d4:4b:fc:a3:dd:d5:ab:3f:11:c6:b9:19:33:41:
f1:b0:82:66:47:03:bf:55:71:be:e3:e5:b0:80:bb:
b1:72:e5:9c:07:a3:2e:cc:9a:a7:3e:84:dd:43:14:
38:82:dd:3b:45:ac:9f:01:09:7d:2d:cd:53:78:b3:
3e:d2:9f:7b:fa:ad:2b:48:60:6d:7c:a2:3a:cd:22:
b1:da:e6:57:08:90:86:f7:15:50:9c:41:d9:5a:a0:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:64:3C:6C:4D:0F:09:2D:7F:22:D1:AB:4C:0E:66:00:28:CE:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aIxkPGxNDwktfyLRq0wOZgAozlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:57:42:f4:6d:80:a5:81:6d:b1:44:75:86:c1:b0:4b:04:31:
c2:f3:37:d3:30:8e:25:ca:7e:3e:34:a1:3a:d0:39:dd:6a:4c:
84:9b:00:de:09:d8:56:9c:11:4f:49:dd:13:18:94:91:8b:4a:
92:46:8d:55:21:61:43:8e:11:ef:37:e9:f7:33:c8:51:fd:17:
35:14:eb:7d:a8:3f:91:8d:bb:3c:5d:4e:41:2c:2b:4c:01:9c:
b9:0e:22:a7:ee:51:9d:c9:ad:c9:43:60:ab:3f:31:25:b4:3b:
18:9c:c9:73:45:cb:b2:bf:a4:0a:bb:51:c1:38:78:8c:3d:94:
66:19:e2:22:6a:8b:3d:9d:cb:72:3c:d4:64:17:9e:60:c4:64:
ff:5b:f6:05:44:1a:1e:6b:d7:13:5f:66:7a:1b:44:b9:82:4f:
46:70:84:a2:04:82:49:93:f6:63:99:37:43:94:7f:72:ac:84:
9f:7c:d1:50:3d:3e:93:5b:c5:65:6e:97:bb:c7:c0:b3:35:70:
04:7f:b1:3a:ba:89:94:c4:86:62:82:ca:4c:df:4d:43:8a:54:
c5:ad:9c:8c:bf:39:eb:c6:d2:7a:67:84:73:1a:da:39:a3:c8:
76:04:90:82:eb:90:96:e8:21:53:52:0b:53:ea:01:83:53:6b:
a7:eb:01:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrfhNkJy2/R3txKUKixF7Q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTI5MDU1OTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODhjNjQzYzZjNGQwZjA5MmQ3ZjIyZDFhYjRjMGU2NjAwMjhjZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk65GCT1A0yf2s7mIUrB/rjNd6Uy
F+bg4Wp+fAkzjvvZovIWVCK8MLp5c74YJUPfhO68m//YJE3FtJKXn45Ocn+/vrvB
1QsyWhWBDd/mWd9djzvQ5jfNosX61YIJysXQYcOKk+xqZF1rljRpOczv2QJBkqdC
nhGkb1aeQLn7V0gzJ5RhGvg42Rmya47vof9vAi8juUezNFY9AMhbBPXfZFXwpFsi
1Ev8o93Vqz8RxrkZM0HxsIJmRwO/VXG+4+WwgLuxcuWcB6MuzJqnPoTdQxQ4gt07
RayfAQl9Lc1TeLM+0p97+q0rSGBtfKI6zSKx2uZXCJCG9xVQnEHZWqCl4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGiMZDxsTQ8JLX8i0atMDmYAKM5TMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYUl4a1BHeE5Ed2t0ZnlMUnEwd09aZ0FvemxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHy1MA0G
CSqGSIb3DQEBCwUAA4IBAQAcV0L0bYClgW2xRHWGwbBLBDHC8zfTMI4lyn4+NKE6
0DndakyEmwDeCdhWnBFPSd0TGJSRi0qSRo1VIWFDjhHvN+n3M8hR/Rc1FOt9qD+R
jbs8XU5BLCtMAZy5DiKn7lGdya3JQ2CrPzEltDsYnMlzRcuyv6QKu1HBOHiMPZRm
GeIiaos9nctyPNRkF55gxGT/W/YFRBoea9cTX2Z6G0S5gk9GcISiBIJJk/ZjmTdD
lH9yrISffNFQPT6TW8Vlbpe7x8CzNXAEf7E6uomUxIZigspM301DilTFrZyMvznr
xtJ6Z4RzGto5o8h2BJCC65CW6CFTUgtT6gGDU2un6wFu
-----END CERTIFICATE-----
Generated at Wed Oct 11 09:11:42 2023 by rpki-client on console-ams.rpki-client.org