Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/CPZm2SeFOIGe_OgN0NPISykbiEU.roa
File: CPZm2SeFOIGe_OgN0NPISykbiEU.roa (raw, json)
Hash identifier: iOxyfFeCOL3cFVMmvyVRSSGebiCRbb0DtD7NcsgUnZ0=
Subject key identifier: 08:F6:66:D9:27:85:38:81:9E:FC:E8:0D:D0:D3:C8:4B:29:1B:88:45
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF87AA3613C71E811AA3A9728786061
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/CPZm2SeFOIGe_OgN0NPISykbiEU.roa
Signing time: Sun 01 Jan 2023 10:55:01 +0000
ROA not before: Sun 01 Jan 2023 10:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205630
IP address blocks: 5.183.79.0/24 maxlen: 24
2a07:22c0:8004::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 May 2023 08:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7a:a3:61:3c:71:e8:11:aa:3a:97:28:78:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f666d9278538819efce80dd0d3c84b291b8845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:e6:3d:94:49:05:cd:f1:5b:53:9e:cb:65:
16:39:c4:51:13:b6:c8:f0:13:18:c9:ac:66:49:5a:
21:03:3b:36:6f:e5:d0:0b:b0:d8:9e:42:ec:81:fb:
40:b1:34:fe:00:49:b7:40:ed:ac:fa:44:28:cd:2c:
d8:25:15:ad:41:c8:20:56:de:a2:2b:9a:17:4e:ea:
c0:37:eb:37:b3:97:c0:a1:d9:17:4e:a0:48:cb:78:
d2:c4:1c:b3:4b:37:7b:ca:e5:a0:34:b7:1d:17:5c:
d2:53:06:f4:8d:1d:82:1a:fe:07:8f:a3:d2:b4:24:
a7:be:f2:06:78:30:5a:7f:53:38:49:0e:eb:62:ef:
f7:d5:74:71:63:e5:57:1a:c3:9e:2c:11:92:f6:a7:
72:6f:26:59:85:53:47:b0:c1:e5:f8:88:3f:49:16:
f7:c0:27:fb:60:e1:34:ed:c9:8b:70:5f:74:c6:a0:
61:19:c7:dd:b7:c2:85:08:fb:fb:f1:ca:6e:fc:a6:
b4:b0:7c:c2:47:42:cf:8e:ec:8d:3d:41:14:f4:e0:
35:49:ff:64:51:03:92:83:f1:a7:29:c3:93:c1:d2:
37:5a:cf:b6:ef:63:6a:0f:15:72:1d:73:45:d8:e0:
a8:24:45:bf:01:ca:54:d9:a6:67:34:27:4f:65:c1:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F6:66:D9:27:85:38:81:9E:FC:E8:0D:D0:D3:C8:4B:29:1B:88:45
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/CPZm2SeFOIGe_OgN0NPISykbiEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.79.0/24
IPv6:
2a07:22c0:8004::/48
Signature Algorithm: sha256WithRSAEncryption
a2:42:7f:60:03:7b:b8:01:01:ad:c8:da:13:d4:42:dd:d7:5e:
dd:1f:c1:da:0f:e3:3c:bd:76:83:23:4d:04:fd:38:b7:41:b0:
37:b0:01:96:4f:f1:08:d0:a4:e3:9f:e6:9a:fb:d4:c8:6b:36:
3e:62:66:c4:9c:74:ce:11:b9:0f:20:7e:37:a0:80:dc:85:ac:
06:c0:fd:7c:e7:3f:5a:1f:c8:08:99:b0:3e:df:0b:0e:13:f7:
95:aa:c8:25:31:e0:38:de:5e:3b:68:41:fc:71:34:2b:b3:d6:
ec:c4:92:36:89:92:ef:21:4e:9a:23:4e:54:70:c3:e0:18:1e:
a8:2b:c2:5c:79:4f:2b:d0:90:a0:cb:ef:10:1d:62:9a:36:83:
d9:1e:92:84:55:94:51:d6:59:a0:60:f9:18:2f:76:7c:cd:62:
13:98:06:0d:7b:9b:ff:17:f2:43:77:9f:86:65:f1:d1:ba:ae:
4a:0b:13:0e:8b:90:af:21:b1:09:3a:c1:23:fd:dc:4f:77:d0:
ac:86:59:69:34:05:14:eb:2a:08:e8:50:18:ed:f1:22:46:16:
d1:db:af:fd:69:fb:fb:1d:34:fd:da:18:11:7f:47:69:9f:b8:
8d:4a:de:fc:02:47:46:22:63:99:51:20:21:c5:73:7d:d9:00:
65:ed:5b:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVs+HqjYTxx6BGqOpcoeGBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjMwMTAxMTA1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGY2NjZkOTI3ODUzODgxOWVmY2U4MGRkMGQzYzg0YjI5MWI4ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/7mPZRJBc3xW1Oey2UWOcRRE7bI
8BMYyaxmSVohAzs2b+XQC7DYnkLsgftAsTT+AEm3QO2s+kQozSzYJRWtQcggVt6i
K5oXTurAN+s3s5fAodkXTqBIy3jSxByzSzd7yuWgNLcdF1zSUwb0jR2CGv4Hj6PS
tCSnvvIGeDBaf1M4SQ7rYu/31XRxY+VXGsOeLBGS9qdybyZZhVNHsMHl+Ig/SRb3
wCf7YOE07cmLcF90xqBhGcfdt8KFCPv78cpu/Ka0sHzCR0LPjuyNPUEU9OA1Sf9k
UQOSg/GnKcOTwdI3Ws+272NqDxVyHXNF2OCoJEW/AcpU2aZnNCdPZcEf+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAj2ZtknhTiBnvzoDdDTyEspG4hFMB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvQ1BabTJTZUZPSUdlX09nTjBOUElTeWtiaUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABbdPMA8E
AgACMAkDBwAqByLAgAQwDQYJKoZIhvcNAQELBQADggEBAKJCf2ADe7gBAa3I2hPU
Qt3XXt0fwdoP4zy9doMjTQT9OLdBsDewAZZP8QjQpOOf5pr71MhrNj5iZsScdM4R
uQ8gfjeggNyFrAbA/XznP1ofyAiZsD7fCw4T95WqyCUx4DjeXjtoQfxxNCuz1uzE
kjaJku8hTpojTlRww+AYHqgrwlx5TyvQkKDL7xAdYpo2g9kekoRVlFHWWaBg+Rgv
dnzNYhOYBg17m/8X8kN3n4Zl8dG6rkoLEw6LkK8hsQk6wSP93E930KyGWWk0BRTr
KgjoUBjt8SJGFtHbr/1p+/sdNP3aGBF/R2mfuI1K3vwCR0YiY5lRICHFc33ZAGXt
W9I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:35 2024 by rpki-client on console-ams.rpki-client.org