Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/awd21_edkyoBWZ1y3BGSkvqbN14.roa
File: awd21_edkyoBWZ1y3BGSkvqbN14.roa (raw, json)
Hash identifier: 6B2FGhWNHpZHqyM0pDXbns3adLrzEHGnr2E+k6dn2RY=
Subject key identifier: 6B:07:76:D7:F7:9D:93:2A:01:59:9D:72:DC:11:92:92:FA:9B:37:5E
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0185707990D81CC49394860D23252CDBAAB0
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/awd21_edkyoBWZ1y3BGSkvqbN14.roa
Signing time: Mon 02 Jan 2023 03:14:53 +0000
ROA not before: Mon 02 Jan 2023 03:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210513
IP address blocks: 62.3.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:90:d8:1c:c4:93:94:86:0d:23:25:2c:db:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jan 2 03:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b0776d7f79d932a01599d72dc119292fa9b375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:07:91:78:b7:9e:56:10:57:b6:ad:03:bb:
70:c0:06:77:db:ae:30:f0:65:71:dd:53:a2:a9:5a:
72:c2:a6:13:e5:57:8b:24:a3:7b:4c:f5:fb:0c:e9:
b2:dd:15:29:7c:b9:66:4f:aa:8d:65:bc:ff:7f:bd:
25:1b:47:8e:a3:97:34:07:9d:72:3e:f0:43:16:90:
7e:9f:2e:f5:ad:84:c9:72:e5:1d:7c:a6:43:a5:af:
09:29:b8:c1:18:1b:24:94:b7:c1:2a:0a:4a:74:33:
94:86:e0:f4:85:ae:41:e6:21:12:88:9b:46:e6:89:
38:8a:8a:11:4b:ac:bd:ed:df:80:9b:02:53:f5:e3:
d1:62:8d:42:4e:53:ba:fc:58:d5:37:0e:9e:e6:1a:
c5:af:51:92:97:01:18:d6:00:b9:1b:6d:a7:04:aa:
c7:c5:76:8c:4d:56:40:d0:c5:c1:f6:84:18:ce:95:
e4:a4:2f:14:a0:e8:5d:a3:7e:7e:f4:3d:e1:33:17:
8c:9d:76:fb:94:9b:52:59:f5:f3:a8:d9:0c:39:78:
dc:4b:bf:37:ac:7a:16:e6:f0:fe:30:43:fd:fc:7b:
a6:cc:47:00:ba:86:ac:e3:3a:57:ce:1a:fa:63:62:
e8:87:99:d5:77:70:f1:55:a3:a7:48:97:db:67:f4:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:76:D7:F7:9D:93:2A:01:59:9D:72:DC:11:92:92:FA:9B:37:5E
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/awd21_edkyoBWZ1y3BGSkvqbN14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e5:b5:82:9e:96:33:b1:ca:ea:11:d1:a4:82:a8:9b:80:09:
7d:03:9b:ee:73:9c:73:0b:df:75:8d:9a:bb:bb:61:4c:c6:9a:
c5:b2:23:40:52:ca:5a:21:7e:1c:d6:ed:c2:32:94:4f:9e:d3:
b9:70:fa:80:54:25:de:4a:77:8d:bc:fa:b0:3e:e3:0b:75:02:
9d:df:5c:d9:dd:43:05:44:16:a1:62:f4:42:a6:d9:15:5c:f5:
59:cc:4c:e4:c2:39:e9:b8:13:e9:b7:fb:44:50:c8:cb:14:64:
1a:d4:19:0c:b8:bf:83:58:b8:2a:f7:b6:5d:ac:75:67:69:a9:
0f:e6:91:33:c1:df:fc:20:ef:2f:dd:50:d2:43:e8:40:8e:0a:
c0:0c:97:b0:38:f6:92:1d:62:f1:e9:79:07:19:59:26:d4:ac:
6d:26:0c:ea:35:7e:f9:34:10:a3:31:60:f9:e7:eb:c2:16:0a:
bf:2e:82:4c:ca:54:c6:94:b9:6a:6d:0e:8f:4c:59:8f:93:f4:
4c:af:82:bd:c7:ee:96:41:dd:e8:55:75:56:6c:54:07:af:75:
c9:0d:6f:e0:64:35:d1:b1:c2:61:b5:56:12:43:05:0b:6a:28:
1c:f1:e7:aa:88:6f:0c:49:16:d0:af:78:9d:b9:8d:2a:03:38:
61:76:af:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVweZDYHMSTlIYNIyUs26qwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjMwMTAyMDMxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjA3NzZkN2Y3OWQ5MzJhMDE1OTlkNzJkYzExOTI5MmZhOWIzNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6IHkXi3nlYQV7atA7twwAZ3264w
8GVx3VOiqVpywqYT5VeLJKN7TPX7DOmy3RUpfLlmT6qNZbz/f70lG0eOo5c0B51y
PvBDFpB+ny71rYTJcuUdfKZDpa8JKbjBGBsklLfBKgpKdDOUhuD0ha5B5iESiJtG
5ok4iooRS6y97d+AmwJT9ePRYo1CTlO6/FjVNw6e5hrFr1GSlwEY1gC5G22nBKrH
xXaMTVZA0MXB9oQYzpXkpC8UoOhdo35+9D3hMxeMnXb7lJtSWfXzqNkMOXjcS783
rHoW5vD+MEP9/HumzEcAuoas4zpXzhr6Y2Loh5nVd3DxVaOnSJfbZ/Q1WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsHdtf3nZMqAVmdctwRkpL6mzdeMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvYXdkMjFfZWRreW9CV1oxeTNCR1NrdnFiTjE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM4MA0G
CSqGSIb3DQEBCwUAA4IBAQBD5bWCnpYzscrqEdGkgqibgAl9A5vuc5xzC991jZq7
u2FMxprFsiNAUspaIX4c1u3CMpRPntO5cPqAVCXeSneNvPqwPuMLdQKd31zZ3UMF
RBahYvRCptkVXPVZzEzkwjnpuBPpt/tEUMjLFGQa1BkMuL+DWLgq97ZdrHVnaakP
5pEzwd/8IO8v3VDSQ+hAjgrADJewOPaSHWLx6XkHGVkm1KxtJgzqNX75NBCjMWD5
5+vCFgq/LoJMylTGlLlqbQ6PTFmPk/RMr4K9x+6WQd3oVXVWbFQHr3XJDW/gZDXR
scJhtVYSQwULaigc8eeqiG8MSRbQr3iduY0qAzhhdq/w
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org