Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/I_m1OVajNPpyvh85hy0Wo7nJixI.roa
File: I_m1OVajNPpyvh85hy0Wo7nJixI.roa (raw, json)
Hash identifier: iDyyZ7YT71pkCmFaJlUteYxXKLGaxdlEy0G0AFvDLlM=
Subject key identifier: 23:F9:B5:39:56:A3:34:FA:72:BE:1F:39:87:2D:16:A3:B9:C9:8B:12
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01856DC1ADF3FF463604EBDC9AF994C00E3C
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/I_m1OVajNPpyvh85hy0Wo7nJixI.roa
Signing time: Sun 01 Jan 2023 14:34:47 +0000
ROA not before: Sun 01 Jan 2023 14:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200548
IP address blocks: 84.39.96.0/21 maxlen: 24
2a01:b1c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ad:f3:ff:46:36:04:eb:dc:9a:f9:94:c0:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 1 14:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23f9b53956a334fa72be1f39872d16a3b9c98b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:17:5c:6c:16:f6:d2:8e:e2:9e:a0:8b:ec:
15:8a:10:72:29:ae:b6:b0:a4:d3:a8:96:14:33:2f:
1f:c1:3f:f1:43:ad:57:2b:d8:8f:9a:45:c7:04:b2:
42:06:01:80:cf:e1:67:71:f8:cc:49:a3:c8:52:56:
f2:20:68:fe:87:bd:1e:91:96:2a:cd:63:e3:e6:56:
68:cc:91:e5:b9:84:de:42:56:04:89:63:4e:46:58:
9b:c5:8e:1d:42:47:76:c7:ac:32:a8:b4:fe:be:0a:
67:b8:a6:9f:85:0f:91:d3:1a:85:d3:05:11:33:1b:
84:a5:7f:6d:ea:84:c7:83:c3:b4:1a:22:c4:61:fa:
44:24:c8:00:c6:9a:d0:d0:ec:bd:c5:42:8a:ea:60:
c5:21:af:2a:66:1c:9f:af:f6:07:62:5b:6a:c1:a5:
df:a2:31:68:24:68:6f:6a:d8:b9:9d:88:f2:bb:37:
4f:7a:d3:8b:d8:b1:6a:6c:2b:28:b0:54:a1:ac:98:
5d:2d:90:f5:de:68:1f:a4:02:0d:44:1c:d1:af:a1:
e3:88:34:e7:07:01:db:8e:40:c1:da:9a:2e:df:9f:
3e:f2:73:5f:dc:86:2d:bb:6c:93:76:ce:95:6f:04:
68:e4:42:56:10:fc:89:09:bc:17:74:23:86:1f:64:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:B5:39:56:A3:34:FA:72:BE:1F:39:87:2D:16:A3:B9:C9:8B:12
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/I_m1OVajNPpyvh85hy0Wo7nJixI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.96.0/21
IPv6:
2a01:b1c1::/32
Signature Algorithm: sha256WithRSAEncryption
ab:70:06:c0:25:93:1b:4f:b4:01:a4:e3:95:2f:40:11:f1:ef:
4f:b4:da:22:ca:8e:f3:f9:cc:29:3e:d0:45:b0:07:4d:ba:c6:
0b:f4:69:6b:7c:6d:97:ef:76:84:97:fe:d4:fb:c8:84:e4:6d:
8f:91:67:1c:7e:fd:e8:6f:39:28:2d:03:19:fe:c1:70:28:1f:
24:50:12:75:0d:f5:ef:f3:16:36:18:d4:22:51:c6:fd:7a:73:
c7:5a:52:3c:97:6d:a3:0c:73:1e:fe:da:6c:f2:c0:ff:c2:d0:
52:02:f0:e4:36:fc:73:61:48:d7:2a:be:05:da:f8:1f:e9:9c:
f2:80:3b:7a:f7:ce:4a:ee:d3:84:e8:46:b1:cd:da:92:11:15:
ed:10:df:4b:31:6a:c4:5f:99:6d:80:91:ab:dc:c4:b2:a9:00:
e1:64:e0:ec:1e:0a:5e:2f:55:c1:b3:25:54:56:9a:ec:9b:e8:
5e:32:1e:2f:68:90:96:9c:e9:a2:0f:93:5d:0e:27:f0:ed:7f:
f8:33:b7:a0:13:af:38:ee:fa:2f:8a:67:49:0a:d2:34:e0:54:
06:cb:31:1a:fa:1d:fb:b4:f4:3a:70:98:f7:73:32:0d:04:e5:
1f:46:38:d9:66:dc:4b:6e:75:bd:54:f9:f5:7e:3c:95:a3:9d:
31:b4:df:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtwa3z/0Y2BOvcmvmUwA48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx
NDlkNTYwHhcNMjMwMTAxMTQzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2Y5YjUzOTU2YTMzNGZhNzJiZTFmMzk4NzJkMTZhM2I5Yzk4YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BQXXGwW9tKO4p6gi+wVihByKa62
sKTTqJYUMy8fwT/xQ61XK9iPmkXHBLJCBgGAz+FncfjMSaPIUlbyIGj+h70ekZYq
zWPj5lZozJHluYTeQlYEiWNORlibxY4dQkd2x6wyqLT+vgpnuKafhQ+R0xqF0wUR
MxuEpX9t6oTHg8O0GiLEYfpEJMgAxprQ0Oy9xUKK6mDFIa8qZhyfr/YHYltqwaXf
ojFoJGhvati5nYjyuzdPetOL2LFqbCsosFShrJhdLZD13mgfpAINRBzRr6HjiDTn
BwHbjkDB2pou358+8nNf3IYtu2yTds6VbwRo5EJWEPyJCbwXdCOGH2REGQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCP5tTlWozT6cr4fOYctFqO5yYsSMB8GA1UdIwQY
MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt
MGZlYjY2ZTdmMjhhLzEvSV9tMU9WYWpOUHB5dmg4NWh5MFdvN25KaXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh
LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVCdgMA0E
AgACMAcDBQAqAbHBMA0GCSqGSIb3DQEBCwUAA4IBAQCrcAbAJZMbT7QBpOOVL0AR
8e9PtNoiyo7z+cwpPtBFsAdNusYL9GlrfG2X73aEl/7U+8iE5G2PkWccfv3obzko
LQMZ/sFwKB8kUBJ1DfXv8xY2GNQiUcb9enPHWlI8l22jDHMe/tps8sD/wtBSAvDk
NvxzYUjXKr4F2vgf6ZzygDt6985K7tOE6EaxzdqSERXtEN9LMWrEX5ltgJGr3MSy
qQDhZODsHgpeL1XBsyVUVprsm+heMh4vaJCWnOmiD5NdDifw7X/4M7egE6847vov
imdJCtI04FQGyzEa+h37tPQ6cJj3czINBOUfRjjZZtxLbnW9VPn1fjyVo50xtN+h
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:13 2024 by rpki-client on console-fra.rpki-client.org