Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rTAtt3o1QKxWXqwEOf_v5L0Vg0M.roa
File: rTAtt3o1QKxWXqwEOf_v5L0Vg0M.roa (raw, json)
Hash identifier: uUNO4lCwUp7bkHJjsnWJ0hrXnv3EoaWrGpO75teED0I=
Subject key identifier: AD:30:2D:B7:7A:35:40:AC:56:5E:AC:04:39:FF:EF:E4:BD:15:83:43
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D9D48D72B3D1242600545EA3719C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rTAtt3o1QKxWXqwEOf_v5L0Vg0M.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60861
IP address blocks: 37.221.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d9:d4:8d:72:b3:d1:24:26:00:54:5e:a3:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad302db77a3540ac565eac0439ffefe4bd158343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:a0:b8:93:3a:58:60:ca:ee:d0:90:50:42:
ea:b1:b9:5e:4e:58:82:15:a6:b6:c6:e6:34:ec:ff:
15:55:41:3e:77:97:dc:d6:05:27:be:12:1d:a8:c2:
ed:49:96:9f:3e:cd:e1:2b:5c:71:1f:52:b0:79:f9:
e5:ae:92:57:d7:68:b8:b8:df:f3:37:cb:4a:b4:95:
1f:eb:7b:50:41:c5:90:e2:76:20:4e:cc:fa:c9:b5:
fb:1d:8f:76:8b:1c:a9:e5:61:ca:e9:de:dc:76:c6:
c4:bb:7d:d5:ea:d1:a9:45:64:30:5c:01:2f:65:57:
98:1f:ea:e8:90:60:d4:42:99:d2:1d:b8:cc:8d:11:
e6:81:cb:4f:56:e2:b6:f2:0b:a7:c8:3b:85:42:68:
f1:c5:3b:b9:02:12:11:d0:0a:b0:3f:2d:60:18:51:
d7:db:d7:b7:22:93:8e:63:55:09:ee:5a:54:cb:2d:
3d:e9:f8:2a:47:c4:e0:cc:c6:0c:07:21:f4:be:19:
17:ee:16:fa:d1:44:2a:00:bd:e6:16:c6:93:21:c7:
c2:d3:8f:06:d1:4a:34:7d:d6:86:5f:ab:e1:16:ea:
69:a4:71:2f:0c:3b:ae:5f:63:24:fc:fd:67:96:0c:
35:e1:c2:82:cd:86:da:16:af:de:27:6e:43:fe:5c:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:2D:B7:7A:35:40:AC:56:5E:AC:04:39:FF:EF:E4:BD:15:83:43
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rTAtt3o1QKxWXqwEOf_v5L0Vg0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:98:4b:89:ec:b6:bf:b1:d1:7d:54:11:69:ef:98:4f:1d:0d:
a8:8c:9d:ee:72:69:77:f5:94:20:78:09:23:d9:cb:49:b1:41:
c4:13:87:a8:5d:5d:10:d8:79:f9:f8:0b:a5:30:6b:e0:f8:c5:
b0:ae:db:ee:4b:2f:b7:a8:60:7b:e2:79:d7:4a:e3:ad:e5:73:
df:d5:a2:79:fd:12:aa:de:03:bb:cf:e0:6c:8d:c5:1a:b3:26:
25:c2:e8:46:0e:37:da:83:b3:d7:7f:63:5d:6f:af:74:23:ab:
c9:d4:8f:3e:d9:28:80:21:bb:88:6b:dd:a2:ee:65:6c:64:fa:
4c:31:67:a9:42:f7:2b:c3:85:eb:0d:9d:f6:19:a8:56:a4:4c:
18:a8:ad:9b:6c:16:ad:7f:02:34:81:c6:56:66:98:81:e8:a2:
ee:f1:e1:98:cd:d8:26:03:3e:77:8c:80:39:8e:9b:7d:ca:52:
62:cf:96:66:a9:e6:b4:64:a7:46:c1:8d:9c:9f:2e:6e:98:d9:
6c:29:ae:a6:62:1f:39:44:c3:49:1a:bc:33:f5:d2:d6:da:2d:
c9:73:78:7a:9a:af:df:fa:b7:dc:6d:76:51:03:47:08:b1:af:
07:99:7b:c5:21:61:04:4c:ec:1a:02:20:0b:fc:48:19:54:13:
3a:42:5d:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx19nUjXKz0SQmAFReo3GcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDMwMmRiNzdhMzU0MGFjNTY1ZWFjMDQzOWZmZWZlNGJkMTU4MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEuguJM6WGDK7tCQUELqsbleTliC
Faa2xuY07P8VVUE+d5fc1gUnvhIdqMLtSZafPs3hK1xxH1KwefnlrpJX12i4uN/z
N8tKtJUf63tQQcWQ4nYgTsz6ybX7HY92ixyp5WHK6d7cdsbEu33V6tGpRWQwXAEv
ZVeYH+rokGDUQpnSHbjMjRHmgctPVuK28gunyDuFQmjxxTu5AhIR0AqwPy1gGFHX
29e3IpOOY1UJ7lpUyy096fgqR8TgzMYMByH0vhkX7hb60UQqAL3mFsaTIcfC048G
0Uo0fdaGX6vhFupppHEvDDuuX2Mk/P1nlgw14cKCzYbaFq/eJ25D/lxW6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0wLbd6NUCsVl6sBDn/7+S9FYNDMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvclRBdHQzbzFRS3hXWHF3RU9mX3Y1TDBWZzBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd20MA0G
CSqGSIb3DQEBCwUAA4IBAQALmEuJ7La/sdF9VBFp75hPHQ2ojJ3ucml39ZQgeAkj
2ctJsUHEE4eoXV0Q2Hn5+AulMGvg+MWwrtvuSy+3qGB74nnXSuOt5XPf1aJ5/RKq
3gO7z+BsjcUasyYlwuhGDjfag7PXf2Ndb690I6vJ1I8+2SiAIbuIa92i7mVsZPpM
MWepQvcrw4XrDZ32GahWpEwYqK2bbBatfwI0gcZWZpiB6KLu8eGYzdgmAz53jIA5
jpt9ylJiz5Zmqea0ZKdGwY2cny5umNlsKa6mYh85RMNJGrwz9dLW2i3Jc3h6mq/f
+rfcbXZRA0cIsa8HmXvFIWEETOwaAiAL/EgZVBM6Ql1o
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:57 2024 by rpki-client on console-ams.rpki-client.org