Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cGJHYOkW9KPJvYB-79Lhf-xVpLM.roa
File: cGJHYOkW9KPJvYB-79Lhf-xVpLM.roa (raw, json)
Hash identifier: Sru94TwxIwcukwXdCpgy1e/qQVzourdmEUqZ4uUndM4=
Subject key identifier: 70:62:47:60:E9:16:F4:A3:C9:BD:80:7E:EF:D2:E1:7F:EC:55:A4:B3
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018968DF89F0A07A2A81761750966BC865CF
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cGJHYOkW9KPJvYB-79Lhf-xVpLM.roa
Signing time: Tue 18 Jul 2023 12:00:27 +0000
ROA not before: Tue 18 Jul 2023 12:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200092
IP address blocks: 5.226.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:df:89:f0:a0:7a:2a:81:76:17:50:96:6b:c8:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jul 18 12:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70624760e916f4a3c9bd807eefd2e17fec55a4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:5e:b4:0f:f6:d4:2c:6f:23:53:87:cc:e2:
49:7a:a5:ba:6c:91:7d:05:95:26:3e:b1:bb:9e:f8:
11:e9:bc:98:46:82:91:1c:26:ca:fb:15:84:fd:d0:
d8:16:8a:b2:28:43:92:fa:66:01:04:b9:c5:f9:36:
c5:06:f5:4d:9c:8b:92:2f:5f:28:e2:10:63:5c:b7:
43:19:a0:3f:fc:88:7e:cf:e2:ec:0c:b1:8e:33:63:
47:b8:7c:d4:87:dd:a4:5a:8a:f1:a9:53:f1:0a:be:
c5:21:06:45:42:a1:a2:4c:b5:c7:59:3e:fa:ef:7b:
03:85:97:fe:a8:c4:fa:33:68:2f:a1:bf:c2:28:31:
4f:15:c0:b3:1d:00:36:a6:3c:70:e7:60:cb:41:c7:
45:ed:b5:12:43:c0:a6:97:52:95:c4:81:dd:86:b6:
f0:04:00:4d:ad:3f:81:bd:a2:3f:2e:ba:78:a3:5c:
a7:46:0a:2c:30:c7:c5:b3:af:f6:4e:47:a8:08:7b:
46:51:88:f2:1f:88:2b:2f:06:45:a8:24:93:8c:c9:
0a:4d:57:5e:88:75:c3:79:dd:1d:ad:15:25:6a:45:
e6:60:20:65:4c:4d:ac:f1:52:62:03:c2:5c:f0:e5:
d6:1b:34:e9:d6:4a:ab:ca:3e:6d:0b:28:7a:c6:77:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:47:60:E9:16:F4:A3:C9:BD:80:7E:EF:D2:E1:7F:EC:55:A4:B3
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cGJHYOkW9KPJvYB-79Lhf-xVpLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c0:89:8d:06:41:75:0c:af:e0:24:ff:cb:24:e1:b2:30:f6:
20:fb:85:68:f2:1b:e4:41:95:fc:a8:7d:5a:09:32:ef:ca:18:
77:23:44:c9:e3:8d:60:5a:19:3e:2e:3b:2a:9f:ed:ec:19:58:
31:50:bc:cb:a5:9f:1a:18:d4:2d:dd:7f:2d:63:1d:5c:74:8d:
b1:c7:27:6d:f5:e8:bc:83:6d:45:1e:00:4a:f5:96:63:49:b1:
22:f1:c7:b9:47:00:0b:6b:3d:7d:3c:4b:32:d2:46:34:32:dc:
7b:b0:e8:15:09:da:6c:f7:44:80:9c:b7:92:4a:f1:31:d5:ec:
f6:27:ef:49:79:e3:5e:6d:91:47:e5:da:9e:bf:4b:50:46:49:
d8:da:23:da:2c:b3:d7:35:00:3b:38:5d:fa:55:e4:5a:0b:34:
f8:09:0a:72:b6:86:79:32:26:32:ca:de:b2:42:6d:17:6d:db:
38:0d:0a:8a:5b:e5:3f:26:0f:1f:bd:b8:d6:b6:a0:3f:39:c8:
d0:0a:a3:0a:d0:eb:b5:6b:5a:75:f8:26:4b:1f:22:c8:e9:18:
98:e1:81:cc:1c:5a:31:65:14:45:4e:96:c4:78:b3:d8:f3:5f:
98:5e:68:70:13:25:6b:89:c8:d3:c5:ab:ac:12:bd:99:8b:e5:
66:ca:2d:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlo34nwoHoqgXYXUJZryGXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwNzE4MTIwMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDYyNDc2MGU5MTZmNGEzYzliZDgwN2VlZmQyZTE3ZmVjNTVhNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl39etA/21CxvI1OHzOJJeqW6bJF9
BZUmPrG7nvgR6byYRoKRHCbK+xWE/dDYFoqyKEOS+mYBBLnF+TbFBvVNnIuSL18o
4hBjXLdDGaA//Ih+z+LsDLGOM2NHuHzUh92kWorxqVPxCr7FIQZFQqGiTLXHWT76
73sDhZf+qMT6M2gvob/CKDFPFcCzHQA2pjxw52DLQcdF7bUSQ8Cml1KVxIHdhrbw
BABNrT+BvaI/Lrp4o1ynRgosMMfFs6/2TkeoCHtGUYjyH4grLwZFqCSTjMkKTVde
iHXDed0drRUlakXmYCBlTE2s8VJiA8Jc8OXWGzTp1kqryj5tCyh6xnd0nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBiR2DpFvSjyb2Afu/S4X/sVaSzMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvY0dKSFlPa1c5S1BKdllCLTc5TGhmLXhWcExNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABeKEMA0G
CSqGSIb3DQEBCwUAA4IBAQAswImNBkF1DK/gJP/LJOGyMPYg+4Vo8hvkQZX8qH1a
CTLvyhh3I0TJ441gWhk+Ljsqn+3sGVgxULzLpZ8aGNQt3X8tYx1cdI2xxydt9ei8
g21FHgBK9ZZjSbEi8ce5RwALaz19PEsy0kY0Mtx7sOgVCdps90SAnLeSSvEx1ez2
J+9JeeNebZFH5dqev0tQRknY2iPaLLPXNQA7OF36VeRaCzT4CQpytoZ5MiYyyt6y
Qm0Xbds4DQqKW+U/Jg8fvbjWtqA/OcjQCqMK0Ou1a1p1+CZLHyLI6RiY4YHMHFox
ZRRFTpbEeLPY81+YXmhwEyVricjTxausEr2Zi+Vmyi3E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org