Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/OiCJp4wFQllRrZJCxClRVGqPm_Y.roa
File: OiCJp4wFQllRrZJCxClRVGqPm_Y.roa (raw, json)
Hash identifier: yD/W6tpP4AtVKMoAdioBtFekBuR8x9+qxykWEe/yfWw=
Subject key identifier: 3A:20:89:A7:8C:05:42:59:51:AD:92:42:C4:29:51:54:6A:8F:9B:F6
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 01856B256A0B805B7B0F507E3F320E66DF5E
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/OiCJp4wFQllRrZJCxClRVGqPm_Y.roa
Signing time: Sun 01 Jan 2023 02:24:52 +0000
ROA not before: Sun 01 Jan 2023 02:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35753
IP address blocks: 185.51.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:6a:0b:80:5b:7b:0f:50:7e:3f:32:0e:66:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jan 1 02:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a2089a78c05425951ad9242c42951546a8f9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:ba:42:d4:61:81:3a:ec:1b:1a:13:74:01:
a9:2c:b0:ff:93:78:5f:ca:37:c4:1f:c5:79:60:a4:
7f:a6:66:11:e8:ca:bf:01:ba:ae:dc:86:74:4d:d7:
d7:af:73:d9:90:01:37:6b:66:de:ca:60:f3:61:96:
99:38:2e:d1:e7:01:52:69:a5:32:66:15:53:97:ba:
ab:4f:d8:eb:09:42:db:88:8e:ab:40:95:98:7e:81:
93:3d:60:20:6d:2f:87:0a:91:33:14:05:ce:3e:20:
78:c0:d6:fd:ea:51:d0:16:f4:2f:58:3c:99:68:cf:
4d:c9:eb:0a:e6:d5:ad:a0:9f:17:b0:9b:9a:d7:ef:
fc:64:29:1c:4d:ce:06:d7:d1:10:b1:50:2a:65:85:
9d:eb:74:1e:3a:80:c0:43:2c:91:47:06:07:eb:58:
bf:f7:f0:0a:2b:23:1d:fe:f4:d7:26:71:1f:50:1a:
59:f7:2e:ac:32:26:3e:c5:8f:47:1d:23:5c:87:0f:
c5:bc:29:04:08:c2:d1:26:90:5d:7e:e0:38:25:de:
25:8a:e6:20:31:ee:f5:88:39:b5:96:2f:04:bb:f8:
44:a7:c5:c9:29:29:f3:0a:61:13:d4:ca:f7:a5:3a:
dc:88:5c:72:8e:98:b5:6c:9f:74:c2:6d:a6:c3:d8:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:89:A7:8C:05:42:59:51:AD:92:42:C4:29:51:54:6A:8F:9B:F6
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/OiCJp4wFQllRrZJCxClRVGqPm_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2a:45:bb:c0:09:01:c9:a6:1e:4d:10:59:19:b8:f5:0b:c3:
8d:7e:55:3f:d2:78:57:21:c9:e0:ce:64:45:57:64:f2:6c:8a:
63:2d:11:49:9c:4b:e3:9e:19:da:df:7c:ae:e6:10:1d:05:34:
29:e5:76:53:d1:f5:f8:df:03:7d:48:bb:40:a1:eb:dc:b2:7c:
e4:3d:4b:38:4d:45:f0:0a:51:9e:f4:cb:60:e1:2f:7e:c4:3a:
fa:c3:ce:f5:4a:de:69:22:d8:7c:ad:e7:1b:3e:b1:2d:d6:48:
85:95:73:87:67:fe:74:c6:0a:e7:e1:d3:21:89:aa:86:c7:a9:
59:ed:74:be:ad:d9:4a:02:c2:fe:c0:ff:67:87:dd:21:de:1f:
c8:4f:e5:62:2b:09:53:b8:bb:0e:20:f9:b7:3e:56:22:f8:d6:
52:e8:4f:c8:61:a8:39:0e:f0:79:27:5c:72:28:96:a8:9c:4b:
3c:3d:95:52:30:1a:be:6b:b6:78:d4:97:a6:36:ac:87:e7:43:
b3:af:7e:0b:cc:d5:c6:4a:76:9c:6c:7b:f8:e2:4e:64:04:0a:
02:ed:45:35:70:a0:88:38:9c:b8:6a:3f:c4:de:a3:3a:c9:1d:
01:85:ee:f8:25:4d:84:67:2c:3e:fe:54:f9:7d:7f:68:f0:5d:
8e:06:10:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrJWoLgFt7D1B+PzIOZt9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm
ZTYyZTcwHhcNMjMwMTAxMDIyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTIwODlhNzhjMDU0MjU5NTFhZDkyNDJjNDI5NTE1NDZhOGY5YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhba6QtRhgTrsGxoTdAGpLLD/k3hf
yjfEH8V5YKR/pmYR6Mq/Abqu3IZ0TdfXr3PZkAE3a2beymDzYZaZOC7R5wFSaaUy
ZhVTl7qrT9jrCULbiI6rQJWYfoGTPWAgbS+HCpEzFAXOPiB4wNb96lHQFvQvWDyZ
aM9NyesK5tWtoJ8XsJua1+/8ZCkcTc4G19EQsVAqZYWd63QeOoDAQyyRRwYH61i/
9/AKKyMd/vTXJnEfUBpZ9y6sMiY+xY9HHSNchw/FvCkECMLRJpBdfuA4Jd4liuYg
Me71iDm1li8Eu/hEp8XJKSnzCmET1Mr3pTrciFxyjpi1bJ90wm2mw9h57wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDogiaeMBUJZUa2SQsQpUVRqj5v2MB8GA1UdIwQY
MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt
Mzk0ZjUwZDRiYTM4LzEvT2lDSnA0d0ZRbGxSclpKQ3hDbFJWR3FQbV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4
LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTN7MA0G
CSqGSIb3DQEBCwUAA4IBAQBsKkW7wAkByaYeTRBZGbj1C8ONflU/0nhXIcngzmRF
V2TybIpjLRFJnEvjnhna33yu5hAdBTQp5XZT0fX43wN9SLtAoevcsnzkPUs4TUXw
ClGe9Mtg4S9+xDr6w871St5pIth8recbPrEt1kiFlXOHZ/50xgrn4dMhiaqGx6lZ
7XS+rdlKAsL+wP9nh90h3h/IT+ViKwlTuLsOIPm3PlYi+NZS6E/IYag5DvB5J1xy
KJaonEs8PZVSMBq+a7Z41JemNqyH50Ozr34LzNXGSnacbHv44k5kBAoC7UU1cKCI
OJy4aj/E3qM6yR0Bhe74JU2EZyw+/lT5fX9o8F2OBhC/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org