Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vM2DMRLzfVvsydCSXessehZNXoM.roa
File: vM2DMRLzfVvsydCSXessehZNXoM.roa (raw, json)
Hash identifier: 8IdRU/quMK/+A7Ya83cPvxtK1rZ94DLO/An3LNqO2Ac=
Subject key identifier: BC:CD:83:31:12:F3:7D:5B:EC:C9:D0:92:5D:EB:2C:7A:16:4D:5E:83
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 01856ED4D391AE40878D2B12466F574C678A
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vM2DMRLzfVvsydCSXessehZNXoM.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47957
IP address blocks: 160.92.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d3:91:ae:40:87:8d:2b:12:46:6f:57:4c:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bccd833112f37d5becc9d0925deb2c7a164d5e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:32:3b:7f:6a:c8:eb:3d:52:7a:f0:f3:5d:
10:eb:02:44:dc:f6:a4:8b:7b:ad:62:86:99:1b:e2:
b7:6e:6b:34:b2:89:ae:8b:f5:2f:49:74:a2:79:e2:
9e:2f:13:ce:3e:03:b8:d4:ed:fc:5e:cb:b3:15:32:
00:f7:14:f1:58:b9:70:7e:f4:6b:82:7f:a1:6c:3d:
9a:bd:42:bb:94:c1:b3:9d:e8:90:c0:c5:de:52:5d:
14:a7:10:99:c7:0f:7a:32:e7:5e:b8:69:e6:f7:02:
f3:1b:6b:ee:f1:3e:a4:21:fb:eb:b3:7a:95:b0:0f:
4b:a6:dd:a8:d2:9c:f5:ed:ef:db:d8:c1:00:e4:40:
e0:5c:b9:5a:34:42:a0:d5:93:c3:77:5d:84:28:52:
d3:48:45:42:b5:38:cd:29:e3:bb:5d:91:a9:5c:e4:
a4:cd:48:21:90:17:a0:aa:d4:83:82:2f:a4:93:14:
a9:11:f2:3c:23:07:ed:a7:c5:f8:01:8c:02:eb:65:
3a:83:fa:bf:08:8a:07:57:22:d3:3c:66:ac:fe:b6:
43:99:2d:1c:f5:76:ab:85:3d:20:8a:a7:b6:d1:1d:
74:c8:e7:0f:cd:20:c8:5e:17:6a:60:43:29:65:dc:
63:08:ee:92:5d:b7:20:c3:3b:77:b7:c6:a6:d2:dc:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:83:31:12:F3:7D:5B:EC:C9:D0:92:5D:EB:2C:7A:16:4D:5E:83
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vM2DMRLzfVvsydCSXessehZNXoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:f8:02:46:b4:e9:21:ce:16:b9:69:43:5b:10:73:cf:d2:73:
e8:76:b5:e6:b1:11:31:d8:98:d5:3e:a5:40:21:dc:de:6f:7a:
3a:d0:8b:4b:e9:79:35:51:04:ef:f9:af:78:ec:a8:81:8c:dd:
53:71:4c:52:9f:61:d7:07:02:9b:75:c6:f3:19:f3:c9:f2:1b:
14:09:09:23:17:29:bc:84:05:9a:d7:37:79:9c:35:44:aa:93:
fe:13:18:56:14:4f:bd:15:6b:77:26:d7:7d:e2:60:9a:12:44:
df:9b:22:45:da:db:1c:d7:d8:29:63:80:a1:ba:f8:71:45:bb:
7c:24:10:50:e4:0c:00:72:fe:cf:34:33:e3:24:a0:ee:61:12:
7d:b6:96:7f:d4:21:15:c6:82:bf:7d:7d:6d:46:46:55:7d:38:
d7:5c:1d:f5:ca:f6:9f:74:34:ae:4c:20:fe:f5:3d:9c:fc:39:
34:79:fb:6c:d9:77:18:b8:62:c1:fc:fd:11:75:92:72:2c:b4:
e6:39:77:2f:b9:f4:3d:36:60:b0:15:40:e2:5a:a2:e3:96:e3:
4d:4f:ae:31:23:d2:ba:71:f3:ce:0f:b3:ab:17:07:be:be:21:
bb:d0:89:36:a5:a7:d4:14:ff:84:21:36:90:4e:a1:3d:59:96:
97:86:12:02
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVu1NORrkCHjSsSRm9XTGeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0
YWUyYzUwHhcNMjMwMTAxMTkzNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2NkODMzMTEyZjM3ZDViZWNjOWQwOTI1ZGViMmM3YTE2NGQ1ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IsyO39qyOs9Unrw810Q6wJE3Pak
i3utYoaZG+K3bms0somui/UvSXSieeKeLxPOPgO41O38XsuzFTIA9xTxWLlwfvRr
gn+hbD2avUK7lMGzneiQwMXeUl0UpxCZxw96MudeuGnm9wLzG2vu8T6kIfvrs3qV
sA9Lpt2o0pz17e/b2MEA5EDgXLlaNEKg1ZPDd12EKFLTSEVCtTjNKeO7XZGpXOSk
zUghkBegqtSDgi+kkxSpEfI8Iwftp8X4AYwC62U6g/q/CIoHVyLTPGas/rZDmS0c
9XarhT0giqe20R10yOcPzSDIXhdqYEMpZdxjCO6SXbcgwzt3t8am0tyELQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFLzNgzES831b7MnQkl3rLHoWTV6DMB8GA1UdIwQY
MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt
NWE4YzY3ODQyMzg5LzEvdk0yRE1STHpmVnZzeWRDU1hlc3NlaFpOWG9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5
LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoFwwDQYJ
KoZIhvcNAQELBQADggEBABX4Aka06SHOFrlpQ1sQc8/Sc+h2teaxETHYmNU+pUAh
3N5vejrQi0vpeTVRBO/5r3jsqIGM3VNxTFKfYdcHApt1xvMZ88nyGxQJCSMXKbyE
BZrXN3mcNUSqk/4TGFYUT70Va3cm133iYJoSRN+bIkXa2xzX2CljgKG6+HFFu3wk
EFDkDABy/s80M+MkoO5hEn22ln/UIRXGgr99fW1GRlV9ONdcHfXK9p90NK5MIP71
PZz8OTR5+2zZdxi4YsH8/RF1knIstOY5dy+59D02YLAVQOJaouOW401PrjEj0rpx
884Ps6sXB76+IbvQiTalp9QU/4QhNpBOoT1ZlpeGEgI=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:58 2024 by rpki-client on console-ams.rpki-client.org