Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/g9GbwAe02qVjJstuImIxzcvYSoA.roa
File: g9GbwAe02qVjJstuImIxzcvYSoA.roa (raw, json)
Hash identifier: cxHlZ9sJbVWS2vf1MNRXHpTURvPlrkArBdKCILflcpg=
Subject key identifier: 83:D1:9B:C0:07:B4:DA:A5:63:26:CB:6E:22:62:31:CD:CB:D8:4A:80
Certificate issuer: /CN=17802133d98b655a9f5411b700ec79347e1eb490
Certificate serial: 01856BAED8029EEC88D27109A966125FE7BC
Authority key identifier: 17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/g9GbwAe02qVjJstuImIxzcvYSoA.roa
Signing time: Sun 01 Jan 2023 04:54:58 +0000
ROA not before: Sun 01 Jan 2023 04:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 176.97.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:d8:02:9e:ec:88:d2:71:09:a9:66:12:5f:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17802133d98b655a9f5411b700ec79347e1eb490
Validity
Not Before: Jan 1 04:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d19bc007b4daa56326cb6e226231cdcbd84a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:b9:36:69:10:63:e6:6f:2d:cf:a5:e6:2c:
50:8a:f6:62:03:17:d8:9e:d5:c8:07:ce:42:db:47:
74:4a:a3:55:7f:71:0c:a6:42:56:3e:78:b2:11:c9:
ea:98:e9:0e:59:a4:c4:b3:33:57:d0:a2:31:3d:5b:
92:61:7e:78:54:94:36:8d:c2:e4:ea:f9:51:bd:70:
46:bd:6b:a1:f1:27:f1:a4:75:0e:58:19:4b:d6:17:
ec:e1:a1:d3:cc:b0:89:43:68:b1:85:ac:7c:34:f6:
e4:9d:95:ad:68:78:36:37:55:6a:8b:d0:44:da:c6:
0f:a1:49:a9:01:2e:7d:b0:c9:3e:18:26:e8:64:e7:
18:7d:6b:61:f9:a9:7c:ea:d6:7a:99:ed:7a:b0:50:
23:57:1f:4a:b4:82:51:50:9b:38:52:80:a7:75:49:
4b:81:94:a2:27:f3:a6:1c:8e:45:0d:f8:94:b4:26:
6d:a2:bf:60:a9:48:7b:75:79:10:fd:98:16:fd:8b:
61:88:0d:ef:e6:a5:b7:c2:68:d1:e3:1b:00:54:d5:
a8:b1:5e:90:86:3f:1b:c7:8a:2c:46:d9:de:75:02:
55:51:a2:61:0d:76:91:26:f1:cc:09:b2:87:c9:ed:
89:a7:62:36:77:17:72:79:92:83:7d:8d:c2:2c:ad:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D1:9B:C0:07:B4:DA:A5:63:26:CB:6E:22:62:31:CD:CB:D8:4A:80
X509v3 Authority Key Identifier:
keyid:17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/g9GbwAe02qVjJstuImIxzcvYSoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.194.0/24
Signature Algorithm: sha256WithRSAEncryption
68:82:fa:12:15:22:42:26:2d:97:97:f0:9b:a5:4e:15:03:6c:
ed:e2:55:b2:19:e0:0e:45:10:3e:4f:07:7c:11:18:9b:13:ac:
68:36:2c:0b:08:26:5c:f3:4f:0b:8c:b4:13:19:da:5c:07:6c:
be:6d:b0:91:57:15:2b:e4:b4:1b:f8:53:45:6e:4b:10:4e:72:
d2:4c:58:5f:be:0f:b5:47:56:dc:6e:89:d8:ec:8f:95:fd:a3:
5f:40:03:90:4e:bf:5b:1b:94:e4:49:e0:db:1b:ef:8d:6a:6e:
a4:4c:72:1b:a4:b8:78:8c:e6:33:04:9c:3b:f0:c7:e1:af:73:
a0:d3:25:94:96:7b:a5:7f:c3:57:cb:05:ff:0c:07:70:9d:1b:
0d:52:78:1f:7a:ab:83:dc:bf:85:c9:af:b0:4c:28:9b:63:86:
ad:36:56:d1:c9:46:02:97:ad:98:34:49:88:fc:08:f4:c8:54:
dd:7e:9c:c2:75:45:28:8a:21:07:65:7a:f8:61:8e:74:de:42:
49:53:df:f3:c9:d9:ff:55:10:98:3a:27:b2:9b:e3:b2:07:da:
a0:fe:7d:3d:0a:c9:8c:b1:ca:ae:c1:83:e6:71:c0:0b:50:77:
af:74:cf:b6:3c:4f:b3:e3:42:f8:7d:6c:03:e7:df:dc:65:c1:
f0:07:0f:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrrtgCnuyI0nEJqWYSX+e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODAyMTMzZDk4YjY1NWE5ZjU0MTFiNzAwZWM3OTM0N2Ux
ZWI0OTAwHhcNMjMwMTAxMDQ1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2QxOWJjMDA3YjRkYWE1NjMyNmNiNmUyMjYyMzFjZGNiZDg0YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl+5NmkQY+ZvLc+l5ixQivZiAxfY
ntXIB85C20d0SqNVf3EMpkJWPniyEcnqmOkOWaTEszNX0KIxPVuSYX54VJQ2jcLk
6vlRvXBGvWuh8SfxpHUOWBlL1hfs4aHTzLCJQ2ixhax8NPbknZWtaHg2N1Vqi9BE
2sYPoUmpAS59sMk+GCboZOcYfWth+al86tZ6me16sFAjVx9KtIJRUJs4UoCndUlL
gZSiJ/OmHI5FDfiUtCZtor9gqUh7dXkQ/ZgW/YthiA3v5qW3wmjR4xsAVNWosV6Q
hj8bx4osRtnedQJVUaJhDXaRJvHMCbKHye2Jp2I2dxdyeZKDfY3CLK0WewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIPRm8AHtNqlYybLbiJiMc3L2EqAMB8GA1UdIwQY
MBaAFBeAITPZi2Van1QRtwDseTR+HrSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRBaE05bUxaVnFmVkJHM0FPeDVOSDRldEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jZDgyMGUtYTk4OC00OGUzLWI5NDQt
OWZlMzI3ZGFiZTY0LzEvZzlHYndBZTAycVZqSnN0dUltSXh6Y3ZZU29BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jZDgyMGUtYTk4OC00OGUzLWI5NDQtOWZlMzI3ZGFiZTY0
LzEvRjRBaE05bUxaVnFmVkJHM0FPeDVOSDRldEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHCMA0G
CSqGSIb3DQEBCwUAA4IBAQBogvoSFSJCJi2Xl/CbpU4VA2zt4lWyGeAORRA+Twd8
ERibE6xoNiwLCCZc808LjLQTGdpcB2y+bbCRVxUr5LQb+FNFbksQTnLSTFhfvg+1
R1bcbonY7I+V/aNfQAOQTr9bG5TkSeDbG++Nam6kTHIbpLh4jOYzBJw78Mfhr3Og
0yWUlnulf8NXywX/DAdwnRsNUngfequD3L+Fya+wTCibY4atNlbRyUYCl62YNEmI
/Aj0yFTdfpzCdUUoiiEHZXr4YY503kJJU9/zydn/VRCYOieym+OyB9qg/n09CsmM
scquwYPmccALUHevdM+2PE+z40L4fWwD59/cZcHwBw/c
-----END CERTIFICATE-----
Generated at Mon Nov 13 11:17:23 2023 by rpki-client on console-fra.rpki-client.org