Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FCeR0Ww6raDsaAPWRm4sc71Hz3I.roa
File: FCeR0Ww6raDsaAPWRm4sc71Hz3I.roa (raw, json)
Hash identifier: nqLVYTj/4u70DJiQI6D+tfLypsxYg6UdxWNo3fPBd7s=
Subject key identifier: 14:27:91:D1:6C:3A:AD:A0:EC:68:03:D6:46:6E:2C:73:BD:47:CF:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185E4A36C61B9B23E87CCBBDDFCADE6EA2B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FCeR0Ww6raDsaAPWRm4sc71Hz3I.roa
Signing time: Tue 24 Jan 2023 16:36:33 +0000
ROA not before: Tue 24 Jan 2023 16:36:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:a3:6c:61:b9:b2:3e:87:cc:bb:dd:fc:ad:e6:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 24 16:36:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=142791d16c3aada0ec6803d6466e2c73bd47cf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:d4:bd:ab:3e:c0:aa:83:e4:ae:52:2b:73:
81:ff:48:eb:86:8c:49:85:e3:8f:a5:6d:dc:4a:4c:
72:d9:e6:01:cf:75:74:40:05:0a:f0:a0:51:1c:93:
00:fc:1c:f9:a2:9c:46:51:41:a0:86:86:9a:9a:a0:
4a:74:81:c6:2a:da:f2:73:b8:ed:3b:2f:0b:9e:12:
63:cb:a3:15:33:52:a9:a6:6d:fa:18:c5:66:aa:11:
4b:f1:7b:c8:0f:b2:f1:73:1d:b8:bb:23:67:40:2e:
cf:4d:f6:1e:07:33:45:40:06:2b:d9:56:48:6d:ef:
01:12:18:1c:ee:dd:03:54:cc:8f:96:dc:06:59:98:
5a:17:3a:3c:37:98:d2:82:af:dc:52:34:1e:6b:13:
95:9c:f9:da:84:47:7e:fe:21:18:69:f3:60:e6:40:
97:dd:ce:02:82:58:c3:d4:5a:49:1e:f4:86:7f:b0:
0e:e7:ad:46:2a:b2:db:13:af:d2:11:6c:59:05:4a:
3d:64:f1:f8:c7:11:53:9d:3f:01:a6:79:24:04:89:
8c:5c:21:ca:22:56:58:ec:ed:f3:7a:e2:21:40:3b:
ee:5b:e0:cc:78:14:c4:96:21:b6:8d:3d:51:ca:d2:
13:28:36:a7:38:69:3e:aa:3e:f8:7c:ff:3a:94:2e:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:27:91:D1:6C:3A:AD:A0:EC:68:03:D6:46:6E:2C:73:BD:47:CF:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FCeR0Ww6raDsaAPWRm4sc71Hz3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a8:ff:67:11:9c:39:40:02:c3:a4:06:91:d0:ae:94:e9:c1:
1a:1b:9d:d0:32:f3:f9:cf:01:7d:63:a5:3c:25:d8:0e:8b:5e:
78:cc:3a:47:39:d3:7c:d7:80:f4:ed:6e:a0:ab:d1:15:b1:bb:
7f:b7:94:51:59:f5:0b:dc:58:85:5d:0d:d8:73:0a:96:ed:fc:
48:69:b8:1e:37:24:47:a7:7f:0d:1b:b8:b0:16:02:22:24:5c:
11:7a:bb:31:9a:71:18:59:a8:58:47:60:da:eb:90:56:54:18:
fe:5d:3a:69:93:07:0c:25:d9:20:1d:c7:8f:8c:da:ca:e0:2e:
7d:39:a4:27:58:8a:44:28:9f:65:fb:5d:ef:37:49:96:7c:6f:
7b:c2:46:22:1a:97:8d:9a:11:cc:b6:04:81:a2:ef:46:4b:12:
22:0f:cc:7c:47:d4:c3:fb:0b:c9:58:93:66:0a:a3:24:18:22:
d7:6e:44:ec:cd:83:3a:09:91:fe:0f:59:a1:b9:fa:ab:72:96:
d7:47:0c:6f:14:71:80:88:a9:e5:a6:af:ef:e6:07:8c:da:ad:
97:28:52:07:e4:09:21:59:4c:b9:87:c1:d3:8d:4b:80:5b:e8:
de:87:3d:c4:74:19:f7:47:18:3b:94:3e:b9:34:68:02:aa:60:
62:b1:4b:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXko2xhubI+h8y73fyt5uorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTI0MTYzNjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDI3OTFkMTZjM2FhZGEwZWM2ODAzZDY0NjZlMmM3M2JkNDdjZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdHUvas+wKqD5K5SK3OB/0jrhoxJ
heOPpW3cSkxy2eYBz3V0QAUK8KBRHJMA/Bz5opxGUUGghoaamqBKdIHGKtryc7jt
Oy8LnhJjy6MVM1Kppm36GMVmqhFL8XvID7Lxcx24uyNnQC7PTfYeBzNFQAYr2VZI
be8BEhgc7t0DVMyPltwGWZhaFzo8N5jSgq/cUjQeaxOVnPnahEd+/iEYafNg5kCX
3c4CgljD1FpJHvSGf7AO561GKrLbE6/SEWxZBUo9ZPH4xxFTnT8BpnkkBImMXCHK
IlZY7O3zeuIhQDvuW+DMeBTEliG2jT1RytITKDanOGk+qj74fP86lC4F5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQnkdFsOq2g7GgD1kZuLHO9R89yMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRkNlUjBXdzZyYURzYUFQV1JtNHNjNzFIejNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYcMA0G
CSqGSIb3DQEBCwUAA4IBAQA/qP9nEZw5QALDpAaR0K6U6cEaG53QMvP5zwF9Y6U8
JdgOi154zDpHOdN814D07W6gq9EVsbt/t5RRWfUL3FiFXQ3YcwqW7fxIabgeNyRH
p38NG7iwFgIiJFwRersxmnEYWahYR2Da65BWVBj+XTppkwcMJdkgHcePjNrK4C59
OaQnWIpEKJ9l+13vN0mWfG97wkYiGpeNmhHMtgSBou9GSxIiD8x8R9TD+wvJWJNm
CqMkGCLXbkTszYM6CZH+D1mhufqrcpbXRwxvFHGAiKnlpq/v5geM2q2XKFIH5Akh
WUy5h8HTjUuAW+jehz3EdBn3Rxg7lD65NGgCqmBisUtG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org