Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gu5MLfEwY0kitlZUTcQvWL9w_ps.roa
File: gu5MLfEwY0kitlZUTcQvWL9w_ps.roa (raw, json)
Hash identifier: +aATEAX8/ymTOSHYE/Wq9es75ESc9lnbEm3tDg/u1ow=
Subject key identifier: 82:EE:4C:2D:F1:30:63:49:22:B6:56:54:4D:C4:2F:58:BF:70:FE:9B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0188AF3EF3EB2BC4593D7362B848672E7688
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gu5MLfEwY0kitlZUTcQvWL9w_ps.roa
Signing time: Mon 12 Jun 2023 10:55:18 +0000
ROA not before: Mon 12 Jun 2023 10:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199429
IP address blocks: 217.156.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:3e:f3:eb:2b:c4:59:3d:73:62:b8:48:67:2e:76:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 12 10:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ee4c2df130634922b656544dc42f58bf70fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:53:a6:2c:08:89:63:7d:db:0b:9a:b8:eb:
ed:03:e8:16:53:6d:88:8d:1e:5e:bc:6a:e7:96:7a:
54:06:27:4d:fe:15:12:0d:be:19:e0:1b:b7:c1:a2:
7c:a1:e8:44:b4:d1:c8:b2:97:23:01:74:cd:ff:6d:
fa:b0:dc:5b:69:d1:d9:ce:20:87:9d:67:0a:51:1a:
7f:f9:57:16:ad:b1:3f:89:66:53:90:6c:a4:c4:ae:
f9:02:c2:7a:e9:21:ca:17:36:62:79:cc:17:82:b1:
2d:37:56:36:21:3f:b3:1d:01:3d:b2:17:04:30:a5:
9d:d0:ca:78:49:3e:f4:67:e4:25:56:ed:bb:33:21:
bf:13:06:84:5a:41:56:94:db:50:30:3f:d5:e0:63:
95:e3:e0:84:c3:19:42:af:15:6b:85:7d:b9:2c:4e:
b7:31:e4:97:c5:3d:f4:47:8a:2f:5d:b2:aa:c0:85:
b0:27:34:b4:08:23:90:33:23:ac:95:9f:ec:77:d9:
77:95:7e:4b:42:c0:28:c0:94:51:cb:6d:9b:dc:61:
61:21:0b:20:2f:9e:7c:d2:36:41:f9:1c:5d:15:73:
14:1b:13:58:06:2c:3d:86:62:ee:b8:1c:ac:dc:e4:
66:53:dd:3f:32:6c:aa:3c:f7:4f:8c:70:71:76:df:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:4C:2D:F1:30:63:49:22:B6:56:54:4D:C4:2F:58:BF:70:FE:9B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gu5MLfEwY0kitlZUTcQvWL9w_ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:09:8e:5d:f5:e2:b4:7c:8b:90:c3:01:47:95:91:32:2f:00:
93:d9:9b:8a:eb:90:eb:2f:01:f3:e4:7f:77:d5:be:63:43:be:
be:19:ce:2d:d4:91:52:ef:fa:b4:a2:77:f7:b1:ff:c8:87:7c:
47:66:b2:87:1e:e1:ea:c1:db:1a:94:a2:25:ed:4f:15:0e:b4:
55:44:ba:86:db:04:42:9e:95:7e:2f:8a:f9:16:c3:1c:97:93:
86:7c:6c:ce:a4:6e:29:46:04:c3:99:e5:f1:5b:8f:0b:a3:12:
8f:6f:68:e7:b2:53:6b:11:4b:bd:ef:11:b0:bf:4c:25:64:a6:
68:bd:c6:e7:ac:18:a4:5a:8e:9a:e1:b3:27:82:7e:d1:82:d2:
bf:fd:2c:49:be:ce:7c:29:5d:78:1d:26:97:e6:91:65:04:9e:
33:b4:18:84:73:2c:b0:4b:fb:fb:98:00:10:60:87:2f:a3:15:
82:ca:f7:62:15:37:63:fa:2f:fe:0d:cb:b8:e0:3a:68:d2:0c:
ac:22:35:ef:6a:4a:b6:84:74:c6:4c:5c:f2:00:55:5b:70:bd:
64:13:c6:60:2b:a2:56:c5:2f:d4:f4:ac:80:0b:80:ec:27:06:
db:af:73:1a:0a:92:c4:54:44:cb:37:6a:93:f0:95:05:2d:aa:
ea:da:6b:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYivPvPrK8RZPXNiuEhnLnaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwNjEyMTA1NTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmVlNGMyZGYxMzA2MzQ5MjJiNjU2NTQ0ZGM0MmY1OGJmNzBmZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt31TpiwIiWN92wuauOvtA+gWU22I
jR5evGrnlnpUBidN/hUSDb4Z4Bu3waJ8oehEtNHIspcjAXTN/236sNxbadHZziCH
nWcKURp/+VcWrbE/iWZTkGykxK75AsJ66SHKFzZiecwXgrEtN1Y2IT+zHQE9shcE
MKWd0Mp4ST70Z+QlVu27MyG/EwaEWkFWlNtQMD/V4GOV4+CEwxlCrxVrhX25LE63
MeSXxT30R4ovXbKqwIWwJzS0CCOQMyOslZ/sd9l3lX5LQsAowJRRy22b3GFhIQsg
L5580jZB+RxdFXMUGxNYBiw9hmLuuBys3ORmU90/MmyqPPdPjHBxdt/rJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILuTC3xMGNJIrZWVE3EL1i/cP6bMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZ3U1TUxmRXdZMGtpdGxaVVRjUXZXTDl3X3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZxaMA0G
CSqGSIb3DQEBCwUAA4IBAQCsCY5d9eK0fIuQwwFHlZEyLwCT2ZuK65DrLwHz5H93
1b5jQ76+Gc4t1JFS7/q0onf3sf/Ih3xHZrKHHuHqwdsalKIl7U8VDrRVRLqG2wRC
npV+L4r5FsMcl5OGfGzOpG4pRgTDmeXxW48LoxKPb2jnslNrEUu97xGwv0wlZKZo
vcbnrBikWo6a4bMngn7RgtK//SxJvs58KV14HSaX5pFlBJ4ztBiEcyywS/v7mAAQ
YIcvoxWCyvdiFTdj+i/+Dcu44Dpo0gysIjXvakq2hHTGTFzyAFVbcL1kE8ZgK6JW
xS/U9KyAC4DsJwbbr3MaCpLEVETLN2qT8JUFLarq2mt9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org