Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/On4uv7WxxHuxWWeYJIr_TpHZg6g.roa
File: On4uv7WxxHuxWWeYJIr_TpHZg6g.roa (raw, json)
Hash identifier: wx5JToe21Ksth++e3FnRiw5BNPAP0idDUrRWU6/3Zq0=
Subject key identifier: 3A:7E:2E:BF:B5:B1:C4:7B:B1:59:67:98:24:8A:FF:4E:91:D9:83:A8
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01856C783AF37343373BDF788370448E59CB
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/On4uv7WxxHuxWWeYJIr_TpHZg6g.roa
Signing time: Sun 01 Jan 2023 08:34:56 +0000
ROA not before: Sun 01 Jan 2023 08:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 79.143.137.0/24 maxlen: 24
79.143.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3a:f3:73:43:37:3b:df:78:83:70:44:8e:59:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 08:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a7e2ebfb5b1c47bb1596798248aff4e91d983a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:de:a5:9b:02:9c:3e:c8:54:ba:cd:f2:5c:
73:10:63:27:37:44:93:f8:94:60:8d:ed:35:15:55:
85:b2:16:68:d5:a0:64:0f:0c:28:c9:0d:fd:d5:04:
ae:75:2e:73:07:95:f2:78:af:25:2d:9b:33:82:fa:
ac:d7:64:fd:77:ac:61:b3:67:49:3b:f0:49:73:8e:
b8:28:28:49:ab:2a:80:b2:5f:26:79:e9:a0:b0:22:
ad:a5:7c:0f:ec:0e:b2:a9:c2:ad:c7:65:2d:d1:e8:
bc:4a:ff:36:90:01:d3:b6:66:29:bd:44:f8:0b:0f:
3e:ea:3f:a3:d2:ff:94:87:78:66:55:b6:0a:5c:ed:
d6:de:f7:a2:c0:a7:b7:09:f0:fb:e1:61:69:00:b3:
b2:99:92:4c:4f:2d:18:3e:30:c4:b7:83:d3:f3:27:
ad:6c:a4:88:51:54:38:3c:d4:0c:f4:7d:fd:e4:46:
2c:9a:b7:93:1e:d7:16:90:20:a3:d4:56:2d:0c:a5:
43:75:4a:4e:f1:7e:bb:da:9b:79:3a:10:1a:0e:5e:
7e:7c:e7:db:ea:03:50:fd:da:81:25:1d:ed:e9:cb:
b6:45:5c:8f:34:78:e4:1a:34:d4:a0:7d:06:d9:06:
a4:e8:a2:94:a7:71:b8:aa:82:d6:a1:3f:6f:16:cb:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:2E:BF:B5:B1:C4:7B:B1:59:67:98:24:8A:FF:4E:91:D9:83:A8
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/On4uv7WxxHuxWWeYJIr_TpHZg6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.137.0/24
79.143.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4a:3e:f9:29:e1:30:9f:57:5a:ef:1e:3d:82:1c:17:8a:89:
ad:55:db:ec:af:d6:75:7e:18:b2:43:93:86:38:78:3f:bc:52:
94:ee:20:f1:ee:fb:72:ee:80:b6:79:b7:27:61:9b:f6:7c:6c:
ce:58:92:e0:0a:bb:46:fa:2e:9f:5a:e8:6e:b1:f4:5a:d1:5a:
e7:b1:db:1a:31:e8:a3:fc:6f:d9:5e:5c:9c:f2:26:06:21:4c:
09:7f:ae:ca:52:c4:66:e8:24:58:be:af:cb:81:c6:fe:9c:b0:
92:15:79:16:ec:74:74:a1:d6:64:8f:ce:3a:a8:bb:d0:82:fc:
55:89:c8:fc:06:57:ec:cf:c8:db:a9:49:c0:6e:36:2c:9a:22:
fc:84:1f:26:69:15:22:b8:03:90:c3:7c:6b:ad:0a:d3:a5:b3:
68:cd:9b:1a:d7:2d:76:f8:39:d0:57:72:f1:be:cf:d3:94:d0:
e5:21:ef:1a:22:45:b1:f2:8f:c7:6e:59:37:b0:7b:f4:37:6c:
f1:1a:d0:c6:9c:e9:c0:a4:78:74:90:4e:bd:fe:cc:e6:11:38:
44:6d:6a:9c:f6:e6:c4:8f:9d:c5:e8:f5:bc:0b:74:18:69:32:
61:e3:6b:78:aa:a4:a6:49:54:a2:c2:ca:8a:6f:96:a8:c2:f7:
87:4d:38:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVseDrzc0M3O994g3BEjlnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm
OWYwN2UwHhcNMjMwMTAxMDgzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTdlMmViZmI1YjFjNDdiYjE1OTY3OTgyNDhhZmY0ZTkxZDk4M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqbepZsCnD7IVLrN8lxzEGMnN0ST
+JRgje01FVWFshZo1aBkDwwoyQ391QSudS5zB5XyeK8lLZszgvqs12T9d6xhs2dJ
O/BJc464KChJqyqAsl8meemgsCKtpXwP7A6yqcKtx2Ut0ei8Sv82kAHTtmYpvUT4
Cw8+6j+j0v+Uh3hmVbYKXO3W3veiwKe3CfD74WFpALOymZJMTy0YPjDEt4PT8yet
bKSIUVQ4PNQM9H395EYsmreTHtcWkCCj1FYtDKVDdUpO8X672pt5OhAaDl5+fOfb
6gNQ/dqBJR3t6cu2RVyPNHjkGjTUoH0G2Qak6KKUp3G4qoLWoT9vFsvoJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDp+Lr+1scR7sVlnmCSK/06R2YOoMB8GA1UdIwQY
MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt
ZTY4ZjZjZjJjMGQyLzEvT240dXY3V3h4SHV4V1dlWUpJcl9UcEhaZzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy
LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4+JAwQA
T4+LMA0GCSqGSIb3DQEBCwUAA4IBAQCwSj75KeEwn1da7x49ghwXiomtVdvsr9Z1
fhiyQ5OGOHg/vFKU7iDx7vty7oC2ebcnYZv2fGzOWJLgCrtG+i6fWuhusfRa0Vrn
sdsaMeij/G/ZXlyc8iYGIUwJf67KUsRm6CRYvq/Lgcb+nLCSFXkW7HR0odZkj846
qLvQgvxVicj8Blfsz8jbqUnAbjYsmiL8hB8maRUiuAOQw3xrrQrTpbNozZsa1y12
+DnQV3Lxvs/TlNDlIe8aIkWx8o/Hblk3sHv0N2zxGtDGnOnApHh0kE69/szmEThE
bWqc9ubEj53F6PW8C3QYaTJh42t4qqSmSVSiwsqKb5aowveHTTjh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org