Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/tVW4SehucKMlSmxfPzUKpIpEf3U.roa
File: tVW4SehucKMlSmxfPzUKpIpEf3U.roa (raw, json)
Hash identifier: pH/ZYCT0jPdAnTg+fYjz+ivjGI+ICV1iU64xtWlgD0U=
Subject key identifier: B5:55:B8:49:E8:6E:70:A3:25:4A:6C:5F:3F:35:0A:A4:8A:44:7F:75
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01856DDD3BA720A1CC412361B847E73D632B
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/tVW4SehucKMlSmxfPzUKpIpEf3U.roa
Signing time: Sun 01 Jan 2023 15:04:53 +0000
ROA not before: Sun 01 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56716
IP address blocks: 31.129.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Apr 2023 20:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:3b:a7:20:a1:cc:41:23:61:b8:47:e7:3d:63:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 1 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b555b849e86e70a3254a6c5f3f350aa48a447f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:8b:92:fc:44:ce:ca:a5:26:b9:75:a5:35:
84:89:8a:8b:51:1c:27:0b:ee:e1:c4:ed:b8:0d:d9:
83:3d:ac:ab:cc:82:3f:97:6d:59:79:73:cc:c4:7c:
84:82:57:ea:54:30:a5:19:20:05:38:cf:e2:9d:1a:
ae:42:05:77:03:9b:14:2e:45:10:57:7d:a2:d0:4d:
e1:b0:6f:11:a1:93:a4:fe:35:6f:eb:15:ba:48:a5:
c6:ad:75:6a:e8:47:00:be:20:b3:b3:93:df:6d:fb:
ac:a5:f0:40:1b:3f:54:b6:2a:17:d8:1b:6d:2c:e0:
39:62:00:7a:ff:6c:be:a9:63:91:b7:2d:83:0d:e9:
2d:16:74:9a:45:41:3f:95:f5:69:00:96:7b:b7:b4:
9d:1f:0e:f5:6f:0a:70:f1:09:8c:fe:0f:5a:04:a6:
c4:8e:91:e8:67:c3:e7:20:f2:21:2b:eb:be:fd:dc:
2a:c8:3a:8f:64:24:8e:95:38:07:1d:aa:7b:f4:9c:
4f:2c:d1:f6:e1:80:6d:15:34:ae:86:35:cc:6c:90:
33:78:9a:5f:3f:f6:df:31:53:3b:81:3e:6e:4d:41:
9b:74:4d:6d:23:43:94:e0:46:3f:a2:fc:38:26:55:
0e:09:7c:19:3e:ad:42:6f:10:bc:be:9c:59:17:31:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:55:B8:49:E8:6E:70:A3:25:4A:6C:5F:3F:35:0A:A4:8A:44:7F:75
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/tVW4SehucKMlSmxfPzUKpIpEf3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.236.0/22
Signature Algorithm: sha256WithRSAEncryption
13:0b:85:09:db:59:a6:e1:3b:4a:16:32:92:54:c5:c3:c2:e8:
d1:62:7c:b2:3b:a2:6c:a4:f3:4a:a7:75:dd:0e:e0:55:1b:03:
ba:b3:68:b1:be:39:29:09:d1:6f:57:1d:6e:3f:81:a5:08:3e:
e3:18:da:31:17:f9:fd:2b:59:40:0f:ae:ca:5d:70:bc:56:89:
e6:37:aa:0f:a9:70:e9:92:5c:fa:40:e5:bc:69:d7:5a:f9:7f:
88:c2:a2:cf:85:11:fa:3a:9c:b5:90:95:cd:b8:17:c6:c0:fd:
95:51:20:e8:b5:43:03:da:eb:2c:7b:6e:d7:6d:a2:7d:a6:f0:
4d:2c:83:02:01:d6:45:5c:a8:66:f5:d0:67:f2:4c:0d:b0:eb:
e6:ed:f2:18:e8:e6:8a:4b:9f:cb:ae:59:2f:fd:e2:1f:dc:ee:
aa:3b:44:40:d2:26:01:57:51:7a:cd:55:10:9d:cc:9d:df:2d:
d4:87:fd:f1:8f:57:80:c2:d0:4b:84:83:23:a8:67:6b:ec:a4:
86:f8:b9:0b:5a:4f:cd:59:26:24:60:71:76:f7:25:31:34:b4:
7f:42:52:73:1c:68:10:c7:7c:00:36:c2:a6:4b:a0:ea:7e:81:
62:77:d6:cc:fb:32:6e:b8:f2:07:5d:9a:4c:0f:5c:91:70:ac:
34:5f:95:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt3TunIKHMQSNhuEfnPWMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjMwMTAxMTUwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTU1Yjg0OWU4NmU3MGEzMjU0YTZjNWYzZjM1MGFhNDhhNDQ3Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/6LkvxEzsqlJrl1pTWEiYqLURwn
C+7hxO24DdmDPayrzII/l21ZeXPMxHyEglfqVDClGSAFOM/inRquQgV3A5sULkUQ
V32i0E3hsG8RoZOk/jVv6xW6SKXGrXVq6EcAviCzs5PfbfuspfBAGz9UtioX2Btt
LOA5YgB6/2y+qWORty2DDektFnSaRUE/lfVpAJZ7t7SdHw71bwpw8QmM/g9aBKbE
jpHoZ8PnIPIhK+u+/dwqyDqPZCSOlTgHHap79JxPLNH24YBtFTSuhjXMbJAzeJpf
P/bfMVM7gT5uTUGbdE1tI0OU4EY/ovw4JlUOCXwZPq1CbxC8vpxZFzF3iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVVuEnobnCjJUpsXz81CqSKRH91MB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvdFZXNFNlaHVjS01sU214ZlB6VUtwSXBFZjNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH4HsMA0G
CSqGSIb3DQEBCwUAA4IBAQATC4UJ21mm4TtKFjKSVMXDwujRYnyyO6JspPNKp3Xd
DuBVGwO6s2ixvjkpCdFvVx1uP4GlCD7jGNoxF/n9K1lAD67KXXC8VonmN6oPqXDp
klz6QOW8adda+X+IwqLPhRH6Opy1kJXNuBfGwP2VUSDotUMD2usse27XbaJ9pvBN
LIMCAdZFXKhm9dBn8kwNsOvm7fIY6OaKS5/Lrlkv/eIf3O6qO0RA0iYBV1F6zVUQ
ncyd3y3Uh/3xj1eAwtBLhIMjqGdr7KSG+LkLWk/NWSYkYHF29yUxNLR/QlJzHGgQ
x3wANsKmS6DqfoFid9bM+zJuuPIHXZpMD1yRcKw0X5Vi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org