Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_pW_QLAqTaVeMkRsIYoR28OXtcM.roa
File: _pW_QLAqTaVeMkRsIYoR28OXtcM.roa (raw, json)
Hash identifier: BIbbOiduZk430wRTxRSK0IeUmMOeKiftAgg3nQeRVw8=
Subject key identifier: FE:95:BF:40:B0:2A:4D:A5:5E:32:44:6C:21:8A:11:DB:C3:97:B5:C3
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028B8215E42722971D7EA188C4ECDC
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_pW_QLAqTaVeMkRsIYoR28OXtcM.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65550
IP address blocks: 81.8.35.0/24 maxlen: 24
81.8.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8b:82:15:e4:27:22:97:1d:7e:a1:88:c4:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe95bf40b02a4da55e32446c218a11dbc397b5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:1e:dc:ae:7c:bf:0a:12:7a:a1:4a:23:82:
20:af:d9:8a:a4:a5:f9:df:70:cf:e9:02:ac:96:2b:
ba:bf:e5:b4:21:8e:59:55:25:29:eb:49:87:d6:18:
f3:76:43:a3:31:87:fb:96:38:e5:a1:3c:9c:bb:f9:
4c:41:60:a8:1a:ea:6b:68:52:45:bb:77:d4:4b:4e:
66:cc:34:ce:44:46:b8:b8:6e:58:6d:07:ca:e6:70:
ff:da:db:e7:df:ec:62:f8:80:df:92:e1:61:e2:50:
e9:b7:71:46:70:ad:a7:5d:14:81:d7:c6:35:45:0a:
e0:4e:5f:c3:ff:ef:77:ce:e5:96:cb:c1:8a:f7:e9:
8e:2c:16:6f:58:bd:c2:84:27:8b:d4:36:3e:04:5c:
f0:f5:d3:72:20:31:a8:52:f5:62:31:3b:10:7c:29:
78:24:37:8d:1b:51:87:11:7b:22:0b:35:1c:c6:1d:
ca:68:8b:19:1e:a9:8e:b4:90:79:4c:94:38:64:24:
d1:c6:33:b3:d7:07:3e:6c:ab:56:00:d7:0c:32:a0:
6c:21:47:0b:77:be:87:79:2d:2a:1e:1a:e8:94:20:
71:59:06:d2:73:ec:ca:50:2b:9f:72:6f:dc:22:52:
37:66:d3:8e:bd:ac:39:c4:45:6c:da:4e:1e:90:4f:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:BF:40:B0:2A:4D:A5:5E:32:44:6C:21:8A:11:DB:C3:97:B5:C3
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_pW_QLAqTaVeMkRsIYoR28OXtcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.34.0/23
Signature Algorithm: sha256WithRSAEncryption
66:47:e2:82:c3:3a:96:f7:99:16:3b:81:e2:48:6e:91:30:53:
51:52:ec:a3:a7:16:da:65:c6:97:d3:a7:10:b6:99:f0:9f:79:
17:09:f4:87:cc:2f:a7:b7:fe:4e:29:2b:51:e0:9c:ee:1c:6b:
a4:94:41:e3:4e:01:e2:55:39:b4:74:c9:15:25:4d:c1:b1:f4:
b1:10:b9:34:91:3d:9f:72:cd:75:f9:e3:3a:ff:c2:73:3d:25:
90:d5:81:70:c0:0d:86:9c:68:ab:64:df:d1:38:10:c4:b9:d1:
95:c1:33:ec:0d:f5:4c:d1:51:cc:1d:51:b0:52:66:ba:c6:9b:
32:15:a3:a1:dc:54:f2:f9:ca:62:c8:51:ec:9f:54:4f:15:10:
bf:4d:90:f8:e7:08:23:43:41:52:aa:b3:c6:b1:59:5d:4e:09:
ad:f6:98:6f:10:3a:e3:27:19:f8:58:fe:40:39:17:a8:96:77:
8f:f5:35:75:31:98:26:46:ba:a6:9b:78:d4:61:52:59:0c:5a:
9c:4d:ab:5c:62:bf:9f:71:f0:49:e5:43:3e:67:0c:14:2c:68:
7d:ca:4c:77:7e:e4:c1:3d:64:cb:24:f0:55:c6:8c:b9:58:d1:
8c:87:ef:ae:a8:26:92:d5:5e:c8:56:f4:d8:12:9b:b6:fe:92:
af:fa:ea:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAouCFeQnIpcdfqGIxOzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjMwMTAyMDEwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTk1YmY0MGIwMmE0ZGE1NWUzMjQ0NmMyMThhMTFkYmMzOTdiNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hce3K58vwoSeqFKI4Igr9mKpKX5
33DP6QKsliu6v+W0IY5ZVSUp60mH1hjzdkOjMYf7ljjloTycu/lMQWCoGupraFJF
u3fUS05mzDTOREa4uG5YbQfK5nD/2tvn3+xi+IDfkuFh4lDpt3FGcK2nXRSB18Y1
RQrgTl/D/+93zuWWy8GK9+mOLBZvWL3ChCeL1DY+BFzw9dNyIDGoUvViMTsQfCl4
JDeNG1GHEXsiCzUcxh3KaIsZHqmOtJB5TJQ4ZCTRxjOz1wc+bKtWANcMMqBsIUcL
d76HeS0qHhrolCBxWQbSc+zKUCufcm/cIlI3ZtOOvaw5xEVs2k4ekE+Z0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6Vv0CwKk2lXjJEbCGKEdvDl7XDMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvX3BXX1FMQXFUYVZlTWtSc0lZb1IyOE9YdGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQgiMA0G
CSqGSIb3DQEBCwUAA4IBAQBmR+KCwzqW95kWO4HiSG6RMFNRUuyjpxbaZcaX06cQ
tpnwn3kXCfSHzC+nt/5OKStR4JzuHGuklEHjTgHiVTm0dMkVJU3BsfSxELk0kT2f
cs11+eM6/8JzPSWQ1YFwwA2GnGirZN/ROBDEudGVwTPsDfVM0VHMHVGwUma6xpsy
FaOh3FTy+cpiyFHsn1RPFRC/TZD45wgjQ0FSqrPGsVldTgmt9phvEDrjJxn4WP5A
OReolneP9TV1MZgmRrqmm3jUYVJZDFqcTatcYr+fcfBJ5UM+ZwwULGh9ykx3fuTB
PWTLJPBVxoy5WNGMh++uqCaS1V7IVvTYEpu2/pKv+uqz
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org