Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/A5pUdiQ6pFIZCPrct0oq9WUCGC8.roa
File: A5pUdiQ6pFIZCPrct0oq9WUCGC8.roa (raw, json)
Hash identifier: gtNNPl+gg3ILRsDjpV3msJbn4yOdi/KFJmZUHv+HNb8=
Subject key identifier: 03:9A:54:76:24:3A:A4:52:19:08:FA:DC:B7:4A:2A:F5:65:02:18:2F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857247184F662B4DC95A337900DFE3E54C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/A5pUdiQ6pFIZCPrct0oq9WUCGC8.roa
Signing time: Mon 02 Jan 2023 11:39:00 +0000
ROA not before: Mon 02 Jan 2023 11:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 5.8.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:18:4f:66:2b:4d:c9:5a:33:79:00:df:e3:e5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=039a5476243aa4521908fadcb74a2af56502182f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:dd:7f:19:04:07:ab:d3:cd:7b:53:74:e5:
92:8d:60:93:30:47:1a:65:f7:4d:a3:76:83:26:18:
11:ca:1f:2f:66:2a:7f:fd:88:5b:d1:8a:65:ce:33:
3f:1a:49:12:48:ac:14:5f:82:67:6b:f8:14:d5:e9:
f4:de:93:9b:81:7e:2f:b9:56:0a:e3:6b:0c:4f:22:
89:f2:8a:98:20:37:40:c5:0f:56:ce:31:e0:ca:93:
56:c1:b1:f6:12:44:2f:51:df:ca:62:71:7d:7d:79:
30:26:39:1a:3c:37:28:e6:80:31:5d:a8:fc:7d:f1:
8e:8e:b4:9a:5b:9a:44:47:6f:e6:0a:f8:3c:7f:96:
11:78:4c:fe:99:04:a7:1a:f3:50:71:45:de:fd:79:
04:35:da:e4:69:e6:62:d7:c6:1f:ea:87:d5:9a:9e:
85:c8:14:a6:77:20:1b:63:8b:5d:4f:6d:1b:c4:1d:
a8:3b:8f:d5:19:ac:7e:79:4a:49:99:e3:ba:c4:6e:
01:0c:a5:ed:ed:e6:c2:48:9c:4a:0f:c5:7c:2c:3a:
fa:15:65:91:d4:ea:8b:ff:0c:17:d6:38:4c:3f:24:
8d:85:c5:d6:fc:35:a1:bf:f0:58:6c:48:c7:47:fd:
72:fa:25:7b:87:cf:76:7a:d1:3c:f8:e5:d9:ee:18:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:54:76:24:3A:A4:52:19:08:FA:DC:B7:4A:2A:F5:65:02:18:2F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/A5pUdiQ6pFIZCPrct0oq9WUCGC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.16.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6b:cc:39:2f:6f:5b:15:a8:cd:04:6a:f8:6b:c2:05:dc:1a:
63:bd:9a:30:2b:e7:a8:d4:a0:cc:18:44:97:7a:50:dd:d3:1d:
05:a5:44:4a:76:d5:02:15:29:b0:01:7e:82:08:a3:16:db:ac:
97:e9:e0:72:6d:56:d2:d9:a7:9b:82:20:f0:ac:b5:d9:65:2e:
fc:4c:e0:41:75:90:48:82:25:dd:ed:cc:7b:d2:98:86:10:0b:
19:70:44:33:34:47:b3:6d:d1:57:4e:47:38:87:1a:5a:07:90:
5c:42:c7:d1:9e:23:6f:ab:20:97:e4:5f:16:e7:6b:e7:42:d9:
7a:de:2b:e6:0a:d3:33:0b:b8:0a:fa:dc:4b:44:b1:b2:49:a3:
4d:2c:2b:94:8d:26:20:43:d6:f1:7e:e4:08:f4:9e:cf:d4:ca:
5d:7a:bb:3c:8e:76:c9:85:89:90:38:df:83:84:52:28:5b:09:
f6:93:85:b9:3f:bb:a0:3c:d4:99:9b:a7:36:e2:14:f5:98:2d:
0f:39:c6:69:0f:8b:84:63:22:78:af:98:65:d4:bc:6d:cb:56:
41:7b:bc:42:ae:1d:58:7d:52:b8:ed:47:8d:f6:e8:7c:5b:ae:
2f:81:26:38:8b:97:12:1b:43:1d:16:a4:4c:b3:ea:d3:b2:7b:
3b:63:33:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRxhPZitNyVozeQDf4+VMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwMTAyMTEzOTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzlhNTQ3NjI0M2FhNDUyMTkwOGZhZGNiNzRhMmFmNTY1MDIxODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmefdfxkEB6vTzXtTdOWSjWCTMEca
ZfdNo3aDJhgRyh8vZip//Yhb0YplzjM/GkkSSKwUX4Jna/gU1en03pObgX4vuVYK
42sMTyKJ8oqYIDdAxQ9WzjHgypNWwbH2EkQvUd/KYnF9fXkwJjkaPDco5oAxXaj8
ffGOjrSaW5pER2/mCvg8f5YReEz+mQSnGvNQcUXe/XkENdrkaeZi18Yf6ofVmp6F
yBSmdyAbY4tdT20bxB2oO4/VGax+eUpJmeO6xG4BDKXt7ebCSJxKD8V8LDr6FWWR
1OqL/wwX1jhMPySNhcXW/DWhv/BYbEjHR/1y+iV7h892etE8+OXZ7hjcrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAOaVHYkOqRSGQj63LdKKvVlAhgvMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvQTVwVWRpUTZwRklaQ1ByY3Qwb3E5V1VDR0M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQgQMA0G
CSqGSIb3DQEBCwUAA4IBAQA2a8w5L29bFajNBGr4a8IF3BpjvZowK+eo1KDMGESX
elDd0x0FpURKdtUCFSmwAX6CCKMW26yX6eBybVbS2aebgiDwrLXZZS78TOBBdZBI
giXd7cx70piGEAsZcEQzNEezbdFXTkc4hxpaB5BcQsfRniNvqyCX5F8W52vnQtl6
3ivmCtMzC7gK+txLRLGySaNNLCuUjSYgQ9bxfuQI9J7P1Mpders8jnbJhYmQON+D
hFIoWwn2k4W5P7ugPNSZm6c24hT1mC0POcZpD4uEYyJ4r5hl1Lxty1ZBe7xCrh1Y
fVK47UeN9uh8W64vgSY4i5cSG0MdFqRMs+rTsns7YzPr
-----END CERTIFICATE-----
Generated at Tue Dec 12 00:36:54 2023 by rpki-client on console-ams.rpki-client.org