Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/jRbbbvZTjSTAcuIsM6GozgdVi7I.roa
File: jRbbbvZTjSTAcuIsM6GozgdVi7I.roa (raw, json)
Hash identifier: 24GHDbYvWq94cU1Rf0zPTAHtwmdlysS8xyjGNhLZXi0=
Subject key identifier: 8D:16:DB:6E:F6:53:8D:24:C0:72:E2:2C:33:A1:A8:CE:07:55:8B:B2
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 018A2162D6F65555F17551B55C436DC09707
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/jRbbbvZTjSTAcuIsM6GozgdVi7I.roa
Signing time: Wed 23 Aug 2023 07:54:00 +0000
ROA not before: Wed 23 Aug 2023 07:54:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 163.119.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:62:d6:f6:55:55:f1:75:51:b5:5c:43:6d:c0:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Aug 23 07:54:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d16db6ef6538d24c072e22c33a1a8ce07558bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:ca:ba:a2:74:a5:8e:c3:a4:55:a3:1a:69:
fe:d7:c6:39:b2:40:2d:8e:fc:c4:b3:c1:95:c3:14:
a0:72:f8:90:11:86:a0:3b:84:9e:f4:bb:b1:e4:d2:
91:08:03:db:e7:c3:9b:cb:a8:54:df:54:9d:35:e5:
a9:b9:92:de:ec:8b:fa:ec:a5:b2:9e:cf:62:75:bb:
5f:fe:18:c9:81:07:76:d0:f2:53:68:16:1f:eb:73:
b1:c2:19:64:9a:42:54:d3:bc:b4:d8:3e:73:13:ef:
56:a9:8c:44:c3:a1:dc:06:2f:e6:94:08:ca:75:21:
4c:c7:30:a5:ac:1a:df:4b:b7:cc:df:43:35:e6:7c:
e9:9a:7b:54:84:43:7d:16:75:84:b4:25:89:8e:b3:
52:3d:61:4a:69:0d:d8:77:28:3d:7c:4e:34:bb:86:
af:32:ed:b4:a8:8e:72:8c:28:2c:21:8c:15:8e:1e:
2b:e3:c4:d9:65:b0:cf:c2:e9:3a:96:c9:c4:8a:c4:
e4:2c:35:bb:f1:80:76:29:7f:96:b9:e9:0d:e2:38:
59:c1:bd:5b:c6:cc:c5:80:bd:5f:37:4e:ac:b3:60:
dc:c1:5f:0d:70:8d:69:a0:08:38:8e:67:f9:f2:c0:
d3:67:b0:6d:de:3e:d2:f6:4c:88:6c:76:40:bc:42:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:DB:6E:F6:53:8D:24:C0:72:E2:2C:33:A1:A8:CE:07:55:8B:B2
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/jRbbbvZTjSTAcuIsM6GozgdVi7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.119.4.0/24
Signature Algorithm: sha256WithRSAEncryption
42:be:ba:33:78:1a:3e:23:06:38:8e:68:34:2f:63:8a:85:d4:
20:4e:bb:69:96:09:07:34:b1:40:48:2d:30:e2:82:d3:41:9e:
07:d1:79:a3:64:a6:ff:1f:0e:8d:d4:e6:5b:33:60:48:7f:66:
52:35:48:32:13:fe:40:4c:8a:d0:ae:9e:1e:9e:e1:59:ab:9e:
ef:e5:6b:2d:38:91:07:b0:f9:a4:53:c9:56:05:17:89:a0:24:
a6:f8:17:ae:fb:1a:db:f0:7c:58:49:77:c2:c9:55:f4:a9:e4:
b3:e5:e1:1d:bb:68:57:a5:bc:b5:99:34:ae:de:ef:d4:94:72:
ad:5c:5b:26:71:7a:64:8a:a7:c8:ad:ff:ec:1a:e0:e2:1b:c7:
b2:97:52:a3:88:24:0f:e3:6d:a8:ec:05:20:9f:61:f4:c6:4a:
aa:a0:b1:04:d8:1f:74:1b:73:2e:2c:a0:71:57:63:ec:a6:27:
7d:ec:47:af:ab:0c:1f:4d:1b:af:0a:68:8b:a6:cc:c8:cc:06:
5b:0c:29:17:61:6d:24:cf:6a:65:ce:01:41:ad:e5:be:2d:8a:
50:57:fd:08:4c:20:6d:51:2f:54:ef:ec:7b:54:90:4d:1a:9d:
87:e8:d6:49:17:98:08:ed:ab:c0:71:b0:ef:d4:0c:56:1b:37:
d5:ac:3f:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYohYtb2VVXxdVG1XENtwJcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjMwODIzMDc1NDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDE2ZGI2ZWY2NTM4ZDI0YzA3MmUyMmMzM2ExYThjZTA3NTU4YmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XLKuqJ0pY7DpFWjGmn+18Y5skAt
jvzEs8GVwxSgcviQEYagO4Se9Lux5NKRCAPb58Oby6hU31SdNeWpuZLe7Iv67KWy
ns9idbtf/hjJgQd20PJTaBYf63OxwhlkmkJU07y02D5zE+9WqYxEw6HcBi/mlAjK
dSFMxzClrBrfS7fM30M15nzpmntUhEN9FnWEtCWJjrNSPWFKaQ3Ydyg9fE40u4av
Mu20qI5yjCgsIYwVjh4r48TZZbDPwuk6lsnEisTkLDW78YB2KX+WuekN4jhZwb1b
xszFgL1fN06ss2DcwV8NcI1poAg4jmf58sDTZ7Bt3j7S9kyIbHZAvEKVhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI0W2272U40kwHLiLDOhqM4HVYuyMB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvalJiYmJ2WlRqU1RBY3VJc002R296Z2RWaTdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3cEMA0G
CSqGSIb3DQEBCwUAA4IBAQBCvrozeBo+IwY4jmg0L2OKhdQgTrtplgkHNLFASC0w
4oLTQZ4H0XmjZKb/Hw6N1OZbM2BIf2ZSNUgyE/5ATIrQrp4enuFZq57v5WstOJEH
sPmkU8lWBReJoCSm+Beu+xrb8HxYSXfCyVX0qeSz5eEdu2hXpby1mTSu3u/UlHKt
XFsmcXpkiqfIrf/sGuDiG8eyl1KjiCQP422o7AUgn2H0xkqqoLEE2B90G3MuLKBx
V2Pspid97EevqwwfTRuvCmiLpszIzAZbDCkXYW0kz2plzgFBreW+LYpQV/0ITCBt
US9U7+x7VJBNGp2H6NZJF5gI7avAcbDv1AxWGzfVrD9U
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:50 2024 by rpki-client on console-ams.rpki-client.org