Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1SMcTfOOn46JE3r5qAmWSgoqiZ0.roa
File: 1SMcTfOOn46JE3r5qAmWSgoqiZ0.roa (raw, json)
Hash identifier: 7Nk+5DQPhFjhbOsVoC3gUxJET8VEluOJY4bxvmAgsMM=
Subject key identifier: D5:23:1C:4D:F3:8E:9F:8E:89:13:7A:F9:A8:09:96:4A:0A:2A:89:9D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0189F28791958989FE9CBED489AE5D66E0D0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1SMcTfOOn46JE3r5qAmWSgoqiZ0.roa
Signing time: Mon 14 Aug 2023 05:31:58 +0000
ROA not before: Mon 14 Aug 2023 05:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:87:91:95:89:89:fe:9c:be:d4:89:ae:5d:66:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 14 05:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5231c4df38e9f8e89137af9a809964a0a2a899d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:83:dd:48:34:e2:34:48:32:4c:59:13:dd:
f3:b6:b7:b1:d8:30:07:da:38:a0:13:88:a5:a7:2e:
29:01:70:87:70:e1:2d:8b:4e:ae:60:33:81:2d:15:
5e:cf:ed:33:c2:5e:3b:19:0d:9d:78:e6:c9:b8:99:
b4:73:a9:98:5d:48:3c:ef:1a:c9:13:de:23:e5:ea:
04:b4:63:8b:97:b5:7e:17:8e:8a:c0:a6:d5:af:e4:
4e:62:6b:6a:8f:f7:93:e2:45:d1:c1:00:a6:67:86:
f8:71:91:a1:e2:06:74:4c:8e:8a:ab:34:f3:2e:31:
b6:1a:34:08:40:db:eb:89:ee:9a:9a:b0:4a:8a:90:
0d:3d:86:62:87:9e:34:cd:fc:18:a8:42:bc:1b:7a:
80:29:91:59:bf:f5:88:f8:46:fc:d1:e5:bf:6f:76:
75:7a:63:88:56:9e:63:5c:42:d8:03:e5:b8:4c:a9:
05:f2:12:61:8d:9c:97:cf:0a:53:bc:b3:60:b0:07:
6f:87:66:1d:a5:75:b4:8c:92:bf:02:b2:9e:bf:ea:
db:f5:ad:4e:22:df:b4:9b:44:0e:ee:2e:93:61:d3:
d8:ed:9b:4e:41:16:80:ce:56:1d:11:0e:57:19:f2:
7c:3e:0a:95:30:dd:84:e3:b4:82:41:d2:b7:e0:a4:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:1C:4D:F3:8E:9F:8E:89:13:7A:F9:A8:09:96:4A:0A:2A:89:9D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1SMcTfOOn46JE3r5qAmWSgoqiZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.194.0/23
5.188.204.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:24:39:80:ce:b4:9a:47:21:4f:1d:07:fe:76:5a:cf:7e:0d:
e9:1f:c0:01:5a:2e:ff:1f:81:fe:9a:6a:ed:ff:86:d6:fc:81:
57:6a:0d:82:46:6e:85:65:e6:d3:14:43:85:43:a2:4b:68:77:
3f:ea:53:a5:39:3d:59:a1:77:20:2d:d8:aa:32:25:14:c4:60:
18:6a:97:2f:12:8f:06:49:7e:c9:a6:91:db:7d:a4:95:e9:24:
67:24:e5:ac:24:ec:34:97:fa:9a:64:d6:5c:2b:a7:81:87:48:
27:7d:ea:e9:40:2f:cf:0a:59:92:67:06:d5:32:7a:2f:10:f1:
20:79:fb:ae:42:fe:cb:da:26:f1:66:6f:35:5c:b4:6f:85:1c:
51:61:56:10:f1:bc:01:00:5d:48:53:7b:c7:85:5a:e9:1b:14:
f7:45:1c:77:25:40:a3:07:59:d1:ed:db:42:6c:8e:4d:7d:db:
63:6d:c1:f6:55:40:e0:e9:69:3f:a0:b9:c9:38:63:b1:9d:bc:
db:3e:e8:b6:46:b9:5c:83:91:a9:e0:e5:fb:d8:f4:4e:e0:9b:
ab:9b:85:93:90:db:51:6a:61:4a:ae:cc:07:6b:9a:42:b1:9c:
0e:f4:6a:24:c3:1f:51:9e:15:c9:5a:bc:97:7d:ea:9c:12:c5:
12:38:db:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnyh5GViYn+nL7Uia5dZuDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwODE0MDUzMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTIzMWM0ZGYzOGU5ZjhlODkxMzdhZjlhODA5OTY0YTBhMmE4OTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlGD3Ug04jRIMkxZE93ztrex2DAH
2jigE4ilpy4pAXCHcOEti06uYDOBLRVez+0zwl47GQ2deObJuJm0c6mYXUg87xrJ
E94j5eoEtGOLl7V+F46KwKbVr+ROYmtqj/eT4kXRwQCmZ4b4cZGh4gZ0TI6KqzTz
LjG2GjQIQNvrie6amrBKipANPYZih540zfwYqEK8G3qAKZFZv/WI+Eb80eW/b3Z1
emOIVp5jXELYA+W4TKkF8hJhjZyXzwpTvLNgsAdvh2YdpXW0jJK/ArKev+rb9a1O
It+0m0QO7i6TYdPY7ZtOQRaAzlYdEQ5XGfJ8PgqVMN2E47SCQdK34KTEiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNUjHE3zjp+OiRN6+agJlkoKKomdMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMVNNY1RmT09uNDZKRTNyNXFBbVdTZ29xaVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBbzCAwQB
BbzMMA0GCSqGSIb3DQEBCwUAA4IBAQA6JDmAzrSaRyFPHQf+dlrPfg3pH8ABWi7/
H4H+mmrt/4bW/IFXag2CRm6FZebTFEOFQ6JLaHc/6lOlOT1ZoXcgLdiqMiUUxGAY
apcvEo8GSX7JppHbfaSV6SRnJOWsJOw0l/qaZNZcK6eBh0gnferpQC/PClmSZwbV
MnovEPEgefuuQv7L2ibxZm81XLRvhRxRYVYQ8bwBAF1IU3vHhVrpGxT3RRx3JUCj
B1nR7dtCbI5NfdtjbcH2VUDg6Wk/oLnJOGOxnbzbPui2Rrlcg5Gp4OX72PRO4Jur
m4WTkNtRamFKrswHa5pCsZwO9Gokwx9RnhXJWryXfeqcEsUSONtl
-----END CERTIFICATE-----
Generated at Wed Aug 16 14:05:31 2023 by rpki-client on console-ams.rpki-client.org