Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/YqZ51N9sY6IvNBWmNDdLMIG668A.roa
File: YqZ51N9sY6IvNBWmNDdLMIG668A.roa (raw, json)
Hash identifier: dHnpzvcopa+hTHAret2RLEy2J55xh0PE8c+5TPdHZW0=
Subject key identifier: 62:A6:79:D4:DF:6C:63:A2:2F:34:15:A6:34:37:4B:30:81:BA:EB:C0
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0186F8A9DA67F456BDBFF0241D19E805E9C4
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/YqZ51N9sY6IvNBWmNDdLMIG668A.roa
Signing time: Sun 19 Mar 2023 06:58:46 +0000
ROA not before: Sun 19 Mar 2023 06:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 5.134.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f8:a9:da:67:f4:56:bd:bf:f0:24:1d:19:e8:05:e9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Mar 19 06:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a679d4df6c63a22f3415a634374b3081baebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:44:10:03:66:d0:65:a9:9f:f1:4e:83:30:
a8:56:5b:04:bc:7a:be:fe:e4:55:0f:d6:13:4b:78:
89:af:b2:9b:63:c5:b8:ed:2e:20:c8:9e:32:1e:a2:
90:09:fe:a3:0a:d8:a9:bc:90:5b:21:e7:28:3a:81:
7f:fc:bd:75:45:e5:91:51:51:96:a0:27:e8:09:10:
30:5a:86:19:de:f5:d8:0e:29:d0:7c:94:52:5d:ed:
8f:c6:b7:aa:bf:ba:7f:fd:c8:de:fc:14:9b:13:32:
53:f3:ef:5c:cb:c6:14:50:dd:91:d3:1f:6e:cb:01:
c8:16:38:9a:95:b2:91:84:d1:a9:f9:46:b1:fc:d1:
61:e8:5f:bc:8f:21:cf:b4:f1:0f:9f:c8:3f:b6:ba:
79:a5:48:25:d3:be:60:15:f6:f4:22:b2:ad:a8:2e:
ab:9e:2c:35:5b:4d:41:37:f0:b4:44:16:7a:61:22:
43:5e:04:20:89:16:3e:40:be:e4:0f:bd:3c:c8:42:
33:31:85:f8:24:a1:7a:0e:0a:7e:d9:e7:4b:cd:a6:
ff:de:5c:26:f4:05:70:0c:1e:87:98:fb:e6:8f:6e:
90:9b:08:e3:30:ef:50:24:73:5b:44:8d:17:70:cf:
f0:57:6b:47:83:9c:24:0d:3a:65:4c:32:b7:e6:7f:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:79:D4:DF:6C:63:A2:2F:34:15:A6:34:37:4B:30:81:BA:EB:C0
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/YqZ51N9sY6IvNBWmNDdLMIG668A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
Signature Algorithm: sha256WithRSAEncryption
14:8d:64:84:5b:5b:ce:f1:9a:6b:ff:88:21:66:fa:bc:0c:67:
92:8a:d0:5c:57:57:fb:33:57:32:cf:bf:84:1a:39:75:ed:17:
51:63:4c:6a:4a:3c:ff:62:cb:f3:1c:be:b2:93:78:c7:c4:7d:
9f:c8:dc:72:ba:7c:cb:9b:1c:80:e6:72:78:5b:05:e3:71:59:
ec:57:c8:4e:3f:8e:b8:40:68:7c:30:48:d4:00:e2:8b:2b:e9:
b4:c2:fc:a0:49:f4:0c:89:40:c8:2f:24:1f:77:f4:2a:ed:f2:
9f:e9:21:44:52:49:bc:5d:24:f0:6f:42:93:20:fd:58:df:c3:
b5:76:74:bb:b2:d8:3f:57:de:4a:05:c5:1b:9e:f9:6e:e0:17:
fb:eb:4c:61:97:16:55:6b:cf:41:1e:c3:39:75:b7:a3:fc:83:
72:f4:bc:00:82:99:b3:a7:c7:50:52:9b:34:c4:1e:50:b0:71:
73:2b:51:73:14:5f:2a:a1:1b:ed:f6:a1:76:ae:8f:9a:51:d9:
57:bc:a9:58:73:fc:02:0c:8e:10:db:6a:8c:28:92:29:fc:58:
29:cf:b4:5a:c0:78:1b:09:57:fe:48:22:b4:50:0f:0a:4a:d3:
6d:7d:98:a2:d2:87:ca:4a:e1:92:ed:bd:60:f2:61:80:cc:87:
74:e7:a7:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb4qdpn9Fa9v/AkHRnoBenEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMzE5MDY1ODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmE2NzlkNGRmNmM2M2EyMmYzNDE1YTYzNDM3NGIzMDgxYmFlYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngFEEANm0GWpn/FOgzCoVlsEvHq+
/uRVD9YTS3iJr7KbY8W47S4gyJ4yHqKQCf6jCtipvJBbIecoOoF//L11ReWRUVGW
oCfoCRAwWoYZ3vXYDinQfJRSXe2Pxreqv7p//cje/BSbEzJT8+9cy8YUUN2R0x9u
ywHIFjialbKRhNGp+Uax/NFh6F+8jyHPtPEPn8g/trp5pUgl075gFfb0IrKtqC6r
niw1W01BN/C0RBZ6YSJDXgQgiRY+QL7kD708yEIzMYX4JKF6Dgp+2edLzab/3lwm
9AVwDB6HmPvmj26QmwjjMO9QJHNbRI0XcM/wV2tHg5wkDTplTDK35n/OvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKmedTfbGOiLzQVpjQ3SzCBuuvAMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvWXFaNTFOOXNZNkl2TkJXbU5EZExNSUc2NjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBYZWMA0G
CSqGSIb3DQEBCwUAA4IBAQAUjWSEW1vO8Zpr/4ghZvq8DGeSitBcV1f7M1cyz7+E
Gjl17RdRY0xqSjz/YsvzHL6yk3jHxH2fyNxyunzLmxyA5nJ4WwXjcVnsV8hOP464
QGh8MEjUAOKLK+m0wvygSfQMiUDILyQfd/Qq7fKf6SFEUkm8XSTwb0KTIP1Y38O1
dnS7stg/V95KBcUbnvlu4Bf760xhlxZVa89BHsM5dbej/INy9LwAgpmzp8dQUps0
xB5QsHFzK1FzFF8qoRvt9qF2ro+aUdlXvKlYc/wCDI4Q22qMKJIp/Fgpz7RawHgb
CVf+SCK0UA8KStNtfZii0ofKSuGS7b1g8mGAzId056c/
-----END CERTIFICATE-----
Generated at Sat Sep 2 18:02:37 2023 by rpki-client on console-fra.rpki-client.org