Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8xkaFpgaYObr83VrmPwjBWMRQHw.roa
File: 8xkaFpgaYObr83VrmPwjBWMRQHw.roa (raw, json)
Hash identifier: gX5ndWrSsNoQ7lr4ZdDXjruRdJ9S6lXXs6vvEP/PQwQ=
Subject key identifier: F3:19:1A:16:98:1A:60:E6:EB:F3:75:6B:98:FC:23:05:63:11:40:7C
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246FE2A35B13B4FC35D53CE0AEA78D7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8xkaFpgaYObr83VrmPwjBWMRQHw.roa
Signing time: Mon 02 Jan 2023 11:38:53 +0000
ROA not before: Mon 02 Jan 2023 11:38:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35830
IP address blocks: 5.188.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fe:2a:35:b1:3b:4f:c3:5d:53:ce:0a:ea:78:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3191a16981a60e6ebf3756b98fc23056311407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:6f:f6:60:20:83:c8:ea:e6:b2:11:47:22:
fe:cd:93:41:c7:73:9a:01:f0:f1:03:b3:5c:31:0b:
ca:fd:ab:44:94:b2:aa:6d:0f:60:78:c8:ef:b9:40:
d5:fa:98:1d:67:b8:09:f5:82:b8:01:52:ec:4a:0b:
a4:5c:96:5f:61:f2:cd:09:cd:75:cb:1c:04:fe:8a:
80:42:5f:67:b2:0d:0b:05:53:a9:22:be:42:5d:8c:
f4:56:26:57:75:3d:bb:e8:4d:53:1a:ca:91:16:a4:
d6:5f:e7:a9:d2:ef:46:7f:32:e5:b1:58:bd:8f:bd:
38:ad:eb:fc:9f:9b:c1:16:95:8d:0c:7f:59:95:4f:
02:1e:a8:58:75:c2:1f:dc:a4:38:d6:a6:e5:8c:42:
6e:52:29:a4:28:18:e7:4a:38:74:80:ae:2a:43:1c:
b0:a6:11:3d:7a:11:5e:41:3c:25:45:2b:24:95:4f:
40:b5:4a:3b:d0:84:a8:f2:bf:b9:f5:4c:2a:7f:ca:
eb:41:19:66:59:bb:0b:53:09:20:cd:02:e3:b4:97:
ad:c7:41:a3:b9:62:93:07:dc:34:36:60:83:f1:f2:
2c:d5:5d:da:cd:36:7e:84:42:ae:8f:de:8e:87:2a:
40:fe:83:a8:77:a8:41:00:2d:0f:d4:c0:da:ae:02:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:1A:16:98:1A:60:E6:EB:F3:75:6B:98:FC:23:05:63:11:40:7C
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8xkaFpgaYObr83VrmPwjBWMRQHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:20:b9:8a:a0:31:38:7b:7a:09:5b:a1:36:3e:cb:02:3d:68:
ac:00:bf:3f:93:1d:20:dc:ba:1e:5c:b4:d1:25:bf:04:df:c8:
df:b0:3c:81:d7:66:0e:59:fe:68:f3:d9:97:f1:3b:2c:f1:fc:
d2:60:46:1f:a1:ae:83:77:80:5d:7a:13:79:e1:fa:4c:ca:e6:
2c:33:5c:30:18:72:a8:5b:e2:b0:ec:b2:db:5f:59:9d:bd:81:
5c:56:54:6f:98:63:f8:0d:82:da:a1:b8:1f:75:2e:03:72:8c:
3a:bd:85:69:de:26:48:90:37:d9:48:c3:3e:f1:87:8c:2a:e7:
b3:42:95:5e:95:f8:14:bf:93:72:6d:13:36:7c:0b:de:19:b0:
59:53:bc:e9:c5:a0:05:f5:b7:d5:b8:bf:b6:42:e3:65:e3:01:
db:7d:79:a8:b2:fa:e4:1b:cd:b6:9b:48:9f:62:06:a5:3e:da:
61:ea:f1:e3:cc:4a:c8:8b:4c:4d:31:55:69:07:c3:02:42:59:
58:9d:66:d0:f9:c0:7e:6c:c7:ea:93:49:da:1c:77:06:99:3e:
1b:4f:14:3e:19:a0:d5:c9:47:7f:89:84:67:77:0d:a4:a6:5a:
a2:a0:d5:a8:ec:09:bc:d4:fc:b7:b9:0e:dc:1f:84:93:7c:51:
2a:82:58:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRv4qNbE7T8NdU84K6njXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwMTAyMTEzODUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzE5MWExNjk4MWE2MGU2ZWJmMzc1NmI5OGZjMjMwNTYzMTE0MDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRv9mAgg8jq5rIRRyL+zZNBx3Oa
AfDxA7NcMQvK/atElLKqbQ9geMjvuUDV+pgdZ7gJ9YK4AVLsSgukXJZfYfLNCc11
yxwE/oqAQl9nsg0LBVOpIr5CXYz0ViZXdT276E1TGsqRFqTWX+ep0u9GfzLlsVi9
j704rev8n5vBFpWNDH9ZlU8CHqhYdcIf3KQ41qbljEJuUimkKBjnSjh0gK4qQxyw
phE9ehFeQTwlRSsklU9AtUo70ISo8r+59Uwqf8rrQRlmWbsLUwkgzQLjtJetx0Gj
uWKTB9w0NmCD8fIs1V3azTZ+hEKuj96OhypA/oOod6hBAC0P1MDargJG+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMZGhaYGmDm6/N1a5j8IwVjEUB8MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvOHhrYUZwZ2FZT2JyODNWcm1Qd2pCV01SUUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbzZMA0G
CSqGSIb3DQEBCwUAA4IBAQB+ILmKoDE4e3oJW6E2PssCPWisAL8/kx0g3LoeXLTR
Jb8E38jfsDyB12YOWf5o89mX8Tss8fzSYEYfoa6Dd4BdehN54fpMyuYsM1wwGHKo
W+Kw7LLbX1mdvYFcVlRvmGP4DYLaobgfdS4Dcow6vYVp3iZIkDfZSMM+8YeMKuez
QpVelfgUv5NybRM2fAveGbBZU7zpxaAF9bfVuL+2QuNl4wHbfXmosvrkG822m0if
YgalPtph6vHjzErIi0xNMVVpB8MCQllYnWbQ+cB+bMfqk0naHHcGmT4bTxQ+GaDV
yUd/iYRndw2kplqioNWo7Am81Py3uQ7cH4STfFEqglj/
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org