Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/1-4oQw4YfYqrcqK0S3463BYL8JGw.roa
File: 1-4oQw4YfYqrcqK0S3463BYL8JGw.roa (raw, json)
Hash identifier: 9dy4SxzJKePNB+N7Tc95IDJUZMdqcaEo7DoF4IH8DKI=
Subject key identifier: FB:8A:10:C3:86:1F:62:AA:DC:A8:AD:12:DF:8E:B7:05:82:FC:24:6C
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0189B50C6B7404B4C09F887C30F948E22549
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/1-4oQw4YfYqrcqK0S3463BYL8JGw.roa
Signing time: Wed 02 Aug 2023 07:00:37 +0000
ROA not before: Wed 02 Aug 2023 07:00:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209224
IP address blocks: 5.42.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:0c:6b:74:04:b4:c0:9f:88:7c:30:f9:48:e2:25:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Aug 2 07:00:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8a10c3861f62aadca8ad12df8eb70582fc246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:cf:8e:06:73:c3:34:12:0c:b7:7e:02:d7:
66:8a:05:bd:c5:af:6f:8f:ae:bd:37:cd:9f:c0:82:
11:2f:94:06:ef:ee:7d:6d:ab:74:8e:4a:ae:ca:76:
5d:1f:b5:f7:d5:3e:f9:df:00:24:38:62:85:70:a0:
92:e4:a0:3d:a1:2f:93:07:5b:2f:b4:96:9e:38:17:
36:35:48:5f:8b:31:63:3e:66:3b:1c:16:75:39:f7:
36:83:58:0c:1b:7b:6f:4c:bc:00:ed:2b:84:e4:e3:
6f:08:f0:3e:dd:f9:c7:43:7e:92:39:38:5c:52:73:
4f:c3:56:f0:85:45:dd:ac:4a:ca:87:a8:0b:1b:21:
52:23:a2:85:8f:d5:bd:95:5c:c2:7e:23:bf:45:a8:
56:70:52:b0:af:57:70:05:eb:03:2f:00:28:ee:93:
49:42:d2:67:e9:ee:6a:d3:8e:b4:e5:f8:69:08:ef:
bd:79:cc:60:fb:d8:13:a5:a7:a2:3f:55:b8:8c:15:
22:55:a8:75:a9:95:ec:c3:1b:16:75:6e:01:a8:01:
ef:70:c3:24:9a:73:ab:ae:b9:07:58:d6:07:68:74:
d2:92:3d:b3:f7:f2:dc:61:f9:ca:97:3e:48:7b:1a:
5c:fd:3e:f0:cd:f1:12:39:bb:63:09:8c:0e:11:88:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:10:C3:86:1F:62:AA:DC:A8:AD:12:DF:8E:B7:05:82:FC:24:6C
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/1-4oQw4YfYqrcqK0S3463BYL8JGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ca:8a:23:30:77:34:de:e9:ed:d2:2c:b8:c0:2b:c8:70:1a:
6d:a0:89:18:9d:a1:29:49:5c:70:c0:3a:74:e6:cb:52:84:4d:
4c:f9:87:c3:70:7b:aa:24:88:1d:30:28:6d:6f:b6:5b:84:38:
d8:45:e6:d2:de:ba:87:6c:e3:7b:b3:ac:a3:d1:56:c5:a1:33:
3e:e5:9e:6f:66:bc:18:88:94:0a:0f:31:b0:d5:24:1c:6f:e6:
c0:25:c6:ba:bd:cb:e0:27:5a:60:11:08:24:ee:6e:8d:7e:86:
bb:ae:c3:b3:dd:09:1a:0e:85:f9:ff:c9:53:63:6f:65:3b:70:
b8:00:f3:f8:71:1a:bb:0f:60:27:77:7e:8f:78:9a:5d:73:1a:
8c:b5:4a:9a:d4:20:cf:6d:c9:14:bc:a3:91:c2:12:58:a2:e5:
8f:44:79:54:cb:c0:8d:3a:9e:ca:9f:45:0c:73:0e:26:f6:ab:
11:40:22:80:18:92:02:7d:66:fb:51:cc:a4:a8:e3:a8:9c:c6:
fe:fa:1e:35:13:ac:ab:dd:34:3f:4c:96:92:4c:6f:ea:1b:2a:
73:bb:4e:72:d2:f1:ec:e4:a4:b6:6d:1c:7a:2c:a4:d3:0d:28:
26:3d:1d:aa:a6:64:51:40:60:34:ee:6f:b7:f4:54:de:e4:d5:
9c:bd:e3:2f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYm1DGt0BLTAn4h8MPlI4iVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjMwODAyMDcwMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjhhMTBjMzg2MWY2MmFhZGNhOGFkMTJkZjhlYjcwNTgyZmMyNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ojPjgZzwzQSDLd+AtdmigW9xa9v
j669N82fwIIRL5QG7+59bat0jkquynZdH7X31T753wAkOGKFcKCS5KA9oS+TB1sv
tJaeOBc2NUhfizFjPmY7HBZ1Ofc2g1gMG3tvTLwA7SuE5ONvCPA+3fnHQ36SOThc
UnNPw1bwhUXdrErKh6gLGyFSI6KFj9W9lVzCfiO/RahWcFKwr1dwBesDLwAo7pNJ
QtJn6e5q04605fhpCO+9ecxg+9gTpaeiP1W4jBUiVah1qZXswxsWdW4BqAHvcMMk
mnOrrrkHWNYHaHTSkj2z9/LcYfnKlz5Iexpc/T7wzfESObtjCYwOEYgQAQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuKEMOGH2Kq3KitEt+OtwWC/CRsMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvMS00b1F3NFlmWXFyY3FLMFMzNDYzQllMOEpHdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzYvZTA1OTc1LWRhOGUtNDYwYi05ZWJiLTNmY2I1ZjNmM2M1
OS8xL2xnWXZYZHNZLVcxNFNTczFPTmQwWE1SeFNpWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAUqWTAN
BgkqhkiG9w0BAQsFAAOCAQEAlMqKIzB3NN7p7dIsuMAryHAabaCJGJ2hKUlccMA6
dObLUoRNTPmHw3B7qiSIHTAobW+2W4Q42EXm0t66h2zje7Oso9FWxaEzPuWeb2a8
GIiUCg8xsNUkHG/mwCXGur3L4CdaYBEIJO5ujX6Gu67Ds90JGg6F+f/JU2NvZTtw
uADz+HEauw9gJ3d+j3iaXXMajLVKmtQgz23JFLyjkcISWKLlj0R5VMvAjTqeyp9F
DHMOJvarEUAigBiSAn1m+1HMpKjjqJzG/voeNROsq900P0yWkkxv6hsqc7tOctLx
7OSktm0ceiyk0w0oJj0dqqZkUUBgNO5vt/RU3uTVnL3jLw==
-----END CERTIFICATE-----
Generated at Thu Dec 28 14:20:37 2023 by rpki-client on console-fra.rpki-client.org