Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SlaibBNRL31calBILT5DWMPnhmk.roa
File: SlaibBNRL31calBILT5DWMPnhmk.roa (raw, json)
Hash identifier: 4ovYPRhpHJpqh5F27kMb2/hMBdvBSbeAEazxdqe8JLM=
Subject key identifier: 4A:56:A2:6C:13:51:2F:7D:5C:6A:50:48:2D:3E:43:58:C3:E7:86:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A243AB0ACFB0F2009FA94AA7C03BE4631
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SlaibBNRL31calBILT5DWMPnhmk.roa
Signing time: Wed 23 Aug 2023 21:09:00 +0000
ROA not before: Wed 23 Aug 2023 21:09:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216419
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:3a:b0:ac:fb:0f:20:09:fa:94:aa:7c:03:be:46:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 21:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a56a26c13512f7d5c6a50482d3e4358c3e78669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:80:39:55:7c:69:63:a3:20:13:e6:66:14:
5e:c2:47:83:31:9c:bc:d8:e2:e5:2a:ac:2e:27:dd:
6c:35:21:f8:cf:fd:bf:57:99:60:14:0f:40:60:80:
b0:97:bb:da:24:68:88:f0:3c:83:49:69:41:84:08:
e2:ff:e5:0b:89:6b:11:6f:5e:46:d9:89:32:77:d8:
ed:ab:a0:17:f4:cf:f7:07:84:af:5a:19:9b:05:87:
61:51:d7:ad:88:33:38:0a:2d:de:c9:51:7f:60:70:
91:d3:d8:a2:53:0d:69:25:cc:23:7a:b1:5e:53:cb:
a9:a2:b4:c9:fc:75:f4:6f:d9:5a:89:c0:19:60:58:
c2:03:70:ba:ba:a4:f9:cf:ba:8c:19:f5:9b:eb:c8:
fc:56:ef:85:17:5a:54:8c:e9:3c:f2:51:0a:ed:6a:
e7:92:96:34:da:e4:f0:4d:3e:8d:9d:40:3e:b1:b9:
d6:b7:af:89:2b:b7:8a:66:ab:1f:d4:2b:8f:d4:5a:
60:97:ab:ec:1c:10:78:cb:fd:4d:9a:aa:12:bb:0f:
88:bf:c5:a9:41:c2:e1:31:ab:98:25:71:9f:b2:26:
bb:57:29:1e:e2:5e:2d:4d:f4:36:dd:5a:52:b1:00:
62:8a:d0:bc:5b:6c:e8:13:98:3f:33:82:ca:fd:db:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:56:A2:6C:13:51:2F:7D:5C:6A:50:48:2D:3E:43:58:C3:E7:86:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SlaibBNRL31calBILT5DWMPnhmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f8:5b:60:51:8a:77:ee:ab:d8:3e:dd:f8:99:86:80:70:58:
da:6a:9d:57:e6:43:2e:12:a5:f6:50:3e:62:65:ff:63:a3:68:
c2:47:4a:90:18:3d:27:77:3d:a1:a7:dd:51:56:f0:f5:54:42:
80:15:cd:a8:55:b9:73:19:00:04:19:16:e4:5a:55:1a:02:a6:
45:fd:29:3a:89:c2:de:3e:16:6f:c1:cd:90:3c:5e:68:66:a2:
35:a8:4b:4c:6a:3c:c7:2e:24:83:f2:65:25:46:44:8c:c2:3a:
57:28:d9:b0:9a:7d:b5:b9:c0:c1:b2:e2:35:d9:2f:ef:58:74:
4c:c1:02:33:d2:bc:66:c9:12:05:e8:84:af:b8:b6:37:cc:64:
33:5f:37:29:a2:14:4d:82:f2:78:25:d9:05:56:39:7e:0b:01:
55:6b:61:40:c8:3a:76:77:e3:78:7f:ff:44:b3:2d:26:a1:5b:
d7:8f:64:92:a0:b4:a7:01:48:cc:ca:9d:54:3c:ac:6b:a5:0f:
cc:c6:b4:bd:cf:4d:a6:09:67:bf:24:fc:a4:ea:d6:a3:3a:96:
dc:a1:04:1a:c1:ae:3b:d6:67:8e:31:e1:b8:70:9c:90:a6:ac:
38:fb:8d:1d:c3:94:2e:b0:9d:73:dc:70:14:08:13:d4:74:88:
7b:c5:47:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYokOrCs+w8gCfqUqnwDvkYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODIzMjEwOTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTU2YTI2YzEzNTEyZjdkNWM2YTUwNDgyZDNlNDM1OGMzZTc4NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2KAOVV8aWOjIBPmZhRewkeDMZy8
2OLlKqwuJ91sNSH4z/2/V5lgFA9AYICwl7vaJGiI8DyDSWlBhAji/+ULiWsRb15G
2Ykyd9jtq6AX9M/3B4SvWhmbBYdhUdetiDM4Ci3eyVF/YHCR09iiUw1pJcwjerFe
U8uporTJ/HX0b9laicAZYFjCA3C6uqT5z7qMGfWb68j8Vu+FF1pUjOk88lEK7Wrn
kpY02uTwTT6NnUA+sbnWt6+JK7eKZqsf1CuP1Fpgl6vsHBB4y/1NmqoSuw+Iv8Wp
QcLhMauYJXGfsia7Vyke4l4tTfQ23VpSsQBiitC8W2zoE5g/M4LK/dusDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpWomwTUS99XGpQSC0+Q1jD54ZpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvU2xhaWJCTlJMMzFjYWxCSUxUNURXTVBuaG1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYcMA0G
CSqGSIb3DQEBCwUAA4IBAQBo+FtgUYp37qvYPt34mYaAcFjaap1X5kMuEqX2UD5i
Zf9jo2jCR0qQGD0ndz2hp91RVvD1VEKAFc2oVblzGQAEGRbkWlUaAqZF/Sk6icLe
PhZvwc2QPF5oZqI1qEtMajzHLiSD8mUlRkSMwjpXKNmwmn21ucDBsuI12S/vWHRM
wQIz0rxmyRIF6ISvuLY3zGQzXzcpohRNgvJ4JdkFVjl+CwFVa2FAyDp2d+N4f/9E
sy0moVvXj2SSoLSnAUjMyp1UPKxrpQ/MxrS9z02mCWe/JPyk6tajOpbcoQQawa47
1meOMeG4cJyQpqw4+40dw5QusJ1z3HAUCBPUdIh7xUcX
-----END CERTIFICATE-----
Generated at Sun Sep 10 08:09:38 2023 by rpki-client on console-ams.rpki-client.org