Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/LAl3iIAnbwJgwpQu55Re2-Y7CLY.roa
File: LAl3iIAnbwJgwpQu55Re2-Y7CLY.roa (raw, json)
Hash identifier: P0DB6dyuBZvG3qObZmVgSn4ftKFmvoaYxUKulNRnU9Y=
Subject key identifier: 2C:09:77:88:80:27:6F:02:60:C2:94:2E:E7:94:5E:DB:E6:3B:08:B6
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018C8B4277C0372927AEB12424AD3B6873E1
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/LAl3iIAnbwJgwpQu55Re2-Y7CLY.roa
Signing time: Thu 21 Dec 2023 07:23:58 +0000
ROA not before: Thu 21 Dec 2023 07:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210893
IP address blocks: 5.134.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:42:77:c0:37:29:27:ae:b1:24:24:ad:3b:68:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Dec 21 07:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c09778880276f0260c2942ee7945edbe63b08b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:4b:b9:61:bc:ea:ca:d7:dc:c0:38:e3:45:
63:66:02:a3:95:c9:f3:cc:e6:a4:42:f7:3b:c5:8f:
3f:6a:71:76:7c:d9:11:8e:e7:a2:a4:e9:ac:87:9a:
95:07:f4:f9:7f:ef:70:b3:81:b1:c1:6d:70:97:1f:
05:9f:7c:09:bd:48:7f:a2:11:44:11:3b:92:f5:2c:
48:a6:05:a4:c5:67:30:32:25:3f:d2:d6:6d:0c:50:
57:fd:2d:d1:fe:c4:d8:d7:e5:5d:ad:5a:38:c5:e5:
16:9b:00:8b:2b:59:72:43:85:86:72:40:c2:07:d2:
fa:c2:4d:19:de:0e:49:91:ff:fd:65:fc:30:bd:a1:
25:9e:f4:15:ed:47:e7:e7:89:33:a5:d0:fb:3d:dd:
ac:0f:50:7e:22:21:73:75:04:5c:71:00:83:0f:37:
a7:0b:b6:a7:38:eb:18:51:bb:07:a1:76:70:f9:83:
c9:ac:63:13:18:0f:9f:2f:97:90:45:2d:84:94:4e:
a6:5d:80:d9:14:47:08:28:a6:a7:7c:a8:56:cd:81:
31:1b:5f:50:67:64:ef:b6:9a:91:85:d7:06:2b:06:
c9:c9:67:7d:0b:07:16:84:2d:dd:8a:5a:cc:96:03:
94:ed:62:48:56:19:78:41:d9:2e:14:65:b6:fd:15:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:77:88:80:27:6F:02:60:C2:94:2E:E7:94:5E:DB:E6:3B:08:B6
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/LAl3iIAnbwJgwpQu55Re2-Y7CLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:13:34:66:3a:81:c4:9c:2b:8f:d5:9b:bf:c2:95:80:b4:c0:
52:a5:a5:04:62:89:31:d9:7f:44:2b:6d:31:09:d2:69:95:db:
3c:1d:2a:fb:d6:88:82:e7:5c:8f:25:a7:7b:a4:fd:72:87:2d:
e9:5a:28:c0:63:f2:49:53:bf:f6:78:7b:56:ee:e4:72:e2:e9:
51:6c:79:1a:f1:52:f1:1a:05:ec:bf:eb:ed:59:20:f2:0f:04:
8c:6e:5b:f9:4e:fd:f3:61:95:87:b5:18:eb:47:29:53:60:a5:
2f:63:48:b1:0a:8a:db:3a:36:82:65:ff:19:02:8b:5b:a2:b3:
40:cc:3c:a8:47:62:bc:71:58:b4:46:42:61:2c:7a:14:5b:e0:
e0:de:d8:ad:ec:39:5a:b1:02:55:ec:19:e0:61:b8:0e:95:40:
1d:d7:da:05:6f:d5:97:99:23:29:bd:2e:19:b5:83:1b:c9:e0:
52:42:25:19:82:6f:da:4a:1a:bc:ca:20:06:64:31:b5:04:a3:
c1:5d:bf:64:89:3d:91:46:22:d9:9c:89:5d:71:1a:1a:3a:ee:
b1:aa:8f:63:9b:c8:dc:34:ff:da:f8:59:a4:2b:be:19:b7:ea:
bc:07:0f:98:2e:5d:61:1a:db:ac:c9:e7:73:e8:be:30:b7:37:
4f:00:f7:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyLQnfANyknrrEkJK07aHPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMxMjIxMDcyMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzA5Nzc4ODgwMjc2ZjAyNjBjMjk0MmVlNzk0NWVkYmU2M2IwOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aBLuWG86srX3MA440VjZgKjlcnz
zOakQvc7xY8/anF2fNkRjueipOmsh5qVB/T5f+9ws4GxwW1wlx8Fn3wJvUh/ohFE
ETuS9SxIpgWkxWcwMiU/0tZtDFBX/S3R/sTY1+VdrVo4xeUWmwCLK1lyQ4WGckDC
B9L6wk0Z3g5Jkf/9ZfwwvaElnvQV7Ufn54kzpdD7Pd2sD1B+IiFzdQRccQCDDzen
C7anOOsYUbsHoXZw+YPJrGMTGA+fL5eQRS2ElE6mXYDZFEcIKKanfKhWzYExG19Q
Z2TvtpqRhdcGKwbJyWd9CwcWhC3dilrMlgOU7WJIVhl4QdkuFGW2/RXcewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwJd4iAJ28CYMKULueUXtvmOwi2MB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvTEFsM2lJQW5id0pnd3BRdTU1UmUyLVk3Q0xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBYZWMA0G
CSqGSIb3DQEBCwUAA4IBAQAtEzRmOoHEnCuP1Zu/wpWAtMBSpaUEYokx2X9EK20x
CdJplds8HSr71oiC51yPJad7pP1yhy3pWijAY/JJU7/2eHtW7uRy4ulRbHka8VLx
GgXsv+vtWSDyDwSMblv5Tv3zYZWHtRjrRylTYKUvY0ixCorbOjaCZf8ZAotborNA
zDyoR2K8cVi0RkJhLHoUW+Dg3tit7DlasQJV7BngYbgOlUAd19oFb9WXmSMpvS4Z
tYMbyeBSQiUZgm/aShq8yiAGZDG1BKPBXb9kiT2RRiLZnIldcRoaOu6xqo9jm8jc
NP/a+FmkK74Zt+q8Bw+YLl1hGtusyedz6L4wtzdPAPfX
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:40 2024 by rpki-client on console-ams.rpki-client.org