Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/Fk1VhMWAaLTU2AYdoVQ9Un4Oy60.roa
File: Fk1VhMWAaLTU2AYdoVQ9Un4Oy60.roa (raw, json)
Hash identifier: GNGV0XfEYftIzaUokk5Q+wB7Fdxyddv4PKdJyNPuacc=
Subject key identifier: 16:4D:55:84:C5:80:68:B4:D4:D8:06:1D:A1:54:3D:52:7E:0E:CB:AD
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 018CD3F0705F62869C0F1A489A8938E990B8
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/Fk1VhMWAaLTU2AYdoVQ9Un4Oy60.roa
Signing time: Thu 04 Jan 2024 10:06:39 +0000
ROA not before: Thu 04 Jan 2024 10:06:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215787
IP address blocks: 134.255.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 09:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:f0:70:5f:62:86:9c:0f:1a:48:9a:89:38:e9:90:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 4 10:06:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=164d5584c58068b4d4d8061da1543d527e0ecbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:a5:64:18:37:db:7d:d7:7a:4a:38:47:db:
ab:0f:be:9f:10:9a:db:8d:12:9f:66:06:4b:15:28:
ca:3d:fb:8b:9f:72:7a:a4:44:79:b0:c7:7e:08:06:
c7:25:97:b0:07:2d:cd:92:c3:6b:17:b9:1c:67:18:
bd:92:f4:e6:a5:5b:bd:05:02:a1:19:42:f6:e5:c8:
ac:c3:33:83:3e:25:5a:a0:88:7b:7d:99:75:67:82:
70:4f:dd:2d:b5:b3:52:63:8a:de:d6:b4:f1:65:9a:
30:f5:24:e0:22:4a:69:d3:ca:2e:9f:cc:b1:1b:e2:
60:b8:ff:9b:26:41:00:18:89:c9:5c:a8:23:59:ad:
3d:09:41:2d:31:67:67:5d:16:8e:3d:85:b0:5d:3f:
d9:b3:b7:87:1b:78:86:00:0d:ac:ef:06:a9:4f:72:
fa:f7:02:bb:61:f9:76:a2:41:14:6c:12:b8:1e:22:
b7:4d:17:dc:4b:3c:dc:09:89:e0:11:47:5b:a9:f5:
9f:09:6b:8e:2f:f6:af:2b:10:e0:d3:61:4d:54:87:
81:3a:a4:c5:fe:5f:77:98:47:33:f3:04:e8:8a:a5:
6e:38:68:05:0b:9b:37:76:53:f2:74:ad:04:86:6b:
29:9e:72:59:10:29:92:93:86:b3:c1:ab:f3:2d:3c:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:55:84:C5:80:68:B4:D4:D8:06:1D:A1:54:3D:52:7E:0E:CB:AD
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/Fk1VhMWAaLTU2AYdoVQ9Un4Oy60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.255.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5d:82:99:ab:1a:13:3f:c3:b1:19:5d:36:ff:7a:9c:b5:7b:
19:a5:a4:9a:f1:d7:a8:47:a0:04:c7:e2:23:56:ab:27:da:22:
52:78:19:05:af:8c:71:9a:a7:06:1c:95:f5:b6:3e:8c:80:64:
e9:ff:84:8c:4a:87:03:be:3b:1a:10:13:9a:23:73:c1:54:05:
00:e2:4a:1a:7f:4e:07:de:d1:8d:c9:d3:66:f8:73:28:2b:7e:
40:83:30:d7:1f:c7:95:32:e9:78:d3:6c:02:2c:9e:48:6a:30:
cb:d2:8a:83:28:f6:1e:06:67:27:de:44:39:c8:f4:11:ea:40:
3c:4f:55:ba:e1:16:a1:7a:2b:04:72:44:99:28:10:87:11:86:
fa:51:f0:02:41:ed:c2:f4:53:b5:72:31:be:37:dd:82:4e:35:
7d:fb:8f:da:a9:98:58:e4:ba:85:13:59:9f:1f:f3:81:f0:c1:
19:ed:90:a0:8c:d4:31:f0:c4:6f:e9:24:85:19:75:9e:70:2a:
c9:a1:39:14:ea:89:9c:76:02:d0:6c:f1:ae:54:43:3a:70:af:
c7:b5:96:49:9b:be:45:55:92:b5:df:0a:0b:88:81:bf:0e:3f:
11:e4:aa:9c:f0:d1:69:b6:f2:c9:76:d8:67:0a:3c:33:45:bc:
c9:4d:3d:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzT8HBfYoacDxpImok46ZC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx
NTNjYmEwHhcNMjQwMTA0MTAwNjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRkNTU4NGM1ODA2OGI0ZDRkODA2MWRhMTU0M2Q1MjdlMGVjYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gmlZBg3233Xeko4R9urD76fEJrb
jRKfZgZLFSjKPfuLn3J6pER5sMd+CAbHJZewBy3NksNrF7kcZxi9kvTmpVu9BQKh
GUL25ciswzODPiVaoIh7fZl1Z4JwT90ttbNSY4re1rTxZZow9STgIkpp08oun8yx
G+JguP+bJkEAGInJXKgjWa09CUEtMWdnXRaOPYWwXT/Zs7eHG3iGAA2s7wapT3L6
9wK7Yfl2okEUbBK4HiK3TRfcSzzcCYngEUdbqfWfCWuOL/avKxDg02FNVIeBOqTF
/l93mEcz8wToiqVuOGgFC5s3dlPydK0EhmspnnJZECmSk4azwavzLTwWPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZNVYTFgGi01NgGHaFUPVJ+DsutMB8GA1UdIwQY
MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt
NjViZTU1MDMxNjVkLzEvRmsxVmhNV0FhTFRVMkFZZG9WUTlVbjRPeTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk
LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhv//MA0G
CSqGSIb3DQEBCwUAA4IBAQApXYKZqxoTP8OxGV02/3qctXsZpaSa8deoR6AEx+Ij
Vqsn2iJSeBkFr4xxmqcGHJX1tj6MgGTp/4SMSocDvjsaEBOaI3PBVAUA4koaf04H
3tGNydNm+HMoK35AgzDXH8eVMul402wCLJ5IajDL0oqDKPYeBmcn3kQ5yPQR6kA8
T1W64RaheisEckSZKBCHEYb6UfACQe3C9FO1cjG+N92CTjV9+4/aqZhY5LqFE1mf
H/OB8MEZ7ZCgjNQx8MRv6SSFGXWecCrJoTkU6omcdgLQbPGuVEM6cK/HtZZJm75F
VZK13woLiIG/Dj8R5Kqc8NFptvLJdthnCjwzRbzJTT0f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:07 2024 by rpki-client on console-fra.rpki-client.org