Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rVINDJ9zgtpE647X7rri8LKoNBw.roa
File: rVINDJ9zgtpE647X7rri8LKoNBw.roa (raw, json)
Hash identifier: xKIs4H6sPANYpK1ammogYMlKyJ0grrs38Z4dpm1su2g=
Subject key identifier: AD:52:0D:0C:9F:73:82:DA:44:EB:8E:D7:EE:BA:E2:F0:B2:A8:34:1C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018573283BD7EDE5B0E679FEFE3B2AC8BDAC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rVINDJ9zgtpE647X7rri8LKoNBw.roa
Signing time: Mon 02 Jan 2023 15:44:54 +0000
ROA not before: Mon 02 Jan 2023 15:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12360
IP address blocks: 5.231.128.0/18 maxlen: 32
5.231.128.0/19 maxlen: 32
5.231.160.0/20 maxlen: 32
5.231.176.0/21 maxlen: 32
5.231.184.0/21 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:3b:d7:ed:e5:b0:e6:79:fe:fe:3b:2a:c8:bd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad520d0c9f7382da44eb8ed7eebae2f0b2a8341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:69:38:3b:b1:6d:ed:35:f0:41:9f:1b:db:
38:22:7c:ee:90:8b:2a:92:d0:43:be:2e:36:43:80:
ed:ff:e2:98:e6:e8:92:b0:e4:74:d5:06:d0:be:fd:
7d:77:3f:bd:c0:45:e8:b9:f4:b1:95:c7:09:de:a7:
de:73:54:cc:e9:fe:3d:43:03:9e:34:09:4b:dc:1a:
80:fa:96:eb:e4:7a:63:44:cc:8c:36:e7:7c:ed:b5:
f7:53:90:19:68:c0:66:84:4b:e8:d2:06:0b:76:22:
b9:68:f7:3b:61:73:10:de:cb:57:fb:ca:ec:7f:3b:
df:4f:4c:3a:42:24:d5:cf:8b:c6:2d:3f:9b:d8:ba:
e7:5e:fb:d3:af:bc:06:6f:36:64:53:82:64:15:b2:
1d:35:5b:5d:f4:8c:97:5d:0e:15:b1:7a:36:9a:33:
94:35:48:41:ff:43:b5:2d:57:e4:a0:ad:b8:27:9d:
6d:64:74:d0:ab:26:74:37:b8:22:29:89:4f:62:c5:
49:ef:98:43:f0:31:9e:d8:ba:c2:a4:37:a7:4c:42:
6e:7b:84:f0:03:70:30:b2:61:ae:99:41:a8:30:6c:
d2:8c:1a:1d:ca:7a:c5:23:b6:e7:02:c4:2a:0b:8d:
96:76:1c:1c:5e:f4:91:10:fe:43:26:17:fc:90:d7:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:0D:0C:9F:73:82:DA:44:EB:8E:D7:EE:BA:E2:F0:B2:A8:34:1C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rVINDJ9zgtpE647X7rri8LKoNBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:bc:fb:f3:25:17:23:93:6a:ea:9b:a1:82:28:38:43:2a:ef:
1a:02:9a:b4:60:ce:ea:cd:b3:75:1b:fe:0f:78:10:99:ee:da:
e4:9e:c7:6d:e4:53:07:89:40:c0:66:6d:ca:be:e2:b2:6e:00:
81:1c:f2:94:8e:ea:67:ba:6d:d2:f1:c8:be:ca:50:13:e0:be:
f0:a9:ef:db:0a:96:24:57:c4:b2:ea:26:e3:25:66:3f:f9:63:
5a:bf:ad:ee:65:9a:d8:91:57:5a:7f:ea:bf:00:3a:cc:a7:73:
a6:3d:32:9b:f9:97:c4:4d:40:af:de:90:c3:f7:dd:55:be:3c:
83:fb:be:99:30:c0:44:29:62:25:54:48:0a:32:f9:9e:56:aa:
34:9f:fc:e5:8f:5b:bc:c7:78:e3:db:15:a4:d7:9e:d3:e5:da:
4e:9f:60:f2:cd:08:c4:de:b8:e0:fc:a3:b6:cb:2b:07:2a:36:
df:60:b2:9d:dd:e3:c0:92:96:4e:52:95:6c:28:01:80:c7:0f:
27:b1:62:28:53:f8:83:a2:dd:c8:47:fa:b1:98:51:40:a5:11:
bf:00:c3:2a:b1:93:69:bd:14:71:82:6f:1d:36:23:8f:94:b3:
fb:9c:bb:db:6b:25:24:a8:75:75:75:6c:f9:6c:c8:9e:5a:b8:
59:6d:9c:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzKDvX7eWw5nn+/jsqyL2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjMwMTAyMTU0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDUyMGQwYzlmNzM4MmRhNDRlYjhlZDdlZWJhZTJmMGIyYTgzNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVppODuxbe018EGfG9s4InzukIsq
ktBDvi42Q4Dt/+KY5uiSsOR01QbQvv19dz+9wEXoufSxlccJ3qfec1TM6f49QwOe
NAlL3BqA+pbr5HpjRMyMNud87bX3U5AZaMBmhEvo0gYLdiK5aPc7YXMQ3stX+8rs
fzvfT0w6QiTVz4vGLT+b2LrnXvvTr7wGbzZkU4JkFbIdNVtd9IyXXQ4VsXo2mjOU
NUhB/0O1LVfkoK24J51tZHTQqyZ0N7giKYlPYsVJ75hD8DGe2LrCpDenTEJue4Tw
A3AwsmGumUGoMGzSjBodynrFI7bnAsQqC42WdhwcXvSREP5DJhf8kNe+kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1SDQyfc4LaROuO1+664vCyqDQcMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvclZJTkRKOXpndHBFNjQ3WDdycmk4TEtvTkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGBeeAMA0G
CSqGSIb3DQEBCwUAA4IBAQC6vPvzJRcjk2rqm6GCKDhDKu8aApq0YM7qzbN1G/4P
eBCZ7trknsdt5FMHiUDAZm3KvuKybgCBHPKUjupnum3S8ci+ylAT4L7wqe/bCpYk
V8Sy6ibjJWY/+WNav63uZZrYkVdaf+q/ADrMp3OmPTKb+ZfETUCv3pDD991VvjyD
+76ZMMBEKWIlVEgKMvmeVqo0n/zlj1u8x3jj2xWk157T5dpOn2DyzQjE3rjg/KO2
yysHKjbfYLKd3ePAkpZOUpVsKAGAxw8nsWIoU/iDot3IR/qxmFFApRG/AMMqsZNp
vRRxgm8dNiOPlLP7nLvbayUkqHV1dWz5bMieWrhZbZxw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org