Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/kO15odnryoxR8CxSaDG7wkF1mwI.roa
File: kO15odnryoxR8CxSaDG7wkF1mwI.roa (raw, json)
Hash identifier: 35PWeRJVZrJsEL5tFECySEt/KBFJrGGgz0cOgwXPeaw=
Subject key identifier: 90:ED:79:A1:D9:EB:CA:8C:51:F0:2C:52:68:31:BB:C2:41:75:9B:02
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018C578AC42FFB51E6D8B32538E3ED9A8ED7
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/kO15odnryoxR8CxSaDG7wkF1mwI.roa
Signing time: Mon 11 Dec 2023 06:22:41 +0000
ROA not before: Mon 11 Dec 2023 06:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:8a:c4:2f:fb:51:e6:d8:b3:25:38:e3:ed:9a:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Dec 11 06:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90ed79a1d9ebca8c51f02c526831bbc241759b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:a8:b3:73:46:d3:70:de:f8:ba:36:01:a9:
a0:e0:5b:61:65:36:d8:ce:66:b6:cf:73:af:44:3d:
f3:11:b0:29:26:d2:ec:91:b5:38:89:ca:8a:21:1a:
f7:39:cb:58:61:ce:02:fb:88:74:0b:46:8b:5e:43:
08:c2:00:bc:9a:dd:9a:3c:42:6f:35:74:8f:8f:01:
0e:55:58:f1:24:9f:7a:b9:59:2a:15:38:3e:0e:59:
de:1e:38:1f:11:f9:fd:45:53:87:bf:5b:8e:94:fe:
70:d7:8e:b3:cd:b0:d5:a6:77:87:d6:e3:1b:b8:1c:
b3:7a:a9:43:f8:72:4c:61:8f:46:d3:61:8b:ab:03:
b5:8c:19:2d:14:99:2a:6d:2b:95:f2:9f:3a:d1:06:
5e:03:55:e9:6d:89:12:83:33:38:55:1f:19:9a:1c:
e4:c3:f7:87:1b:42:93:1b:a3:43:76:79:64:d3:aa:
b4:46:98:36:62:69:4e:44:c3:8e:7b:42:6c:e2:3a:
24:1a:8f:20:63:70:77:72:5a:74:13:45:c0:ec:d2:
2d:2d:64:3a:e4:24:6f:45:98:19:c9:49:6f:76:77:
4f:21:c3:44:4d:93:bb:0e:85:84:1a:60:b0:5b:59:
d6:b8:8c:c2:2c:3e:fc:22:97:71:c0:45:86:48:c8:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:ED:79:A1:D9:EB:CA:8C:51:F0:2C:52:68:31:BB:C2:41:75:9B:02
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/kO15odnryoxR8CxSaDG7wkF1mwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
17:ce:f8:3d:77:05:33:31:7c:9e:b3:ce:fc:88:62:2b:08:dd:
58:79:c6:d6:1e:78:03:b4:e3:ab:61:65:5d:43:f9:bd:f4:7d:
b4:11:d9:ee:b4:1a:94:02:50:8c:b1:bb:e1:63:72:78:0b:db:
8e:ee:f0:47:86:be:3c:f4:c5:d8:b5:27:ca:d7:f7:d5:f9:c0:
21:9e:f8:8e:00:94:3e:e1:58:54:11:16:6e:08:82:cd:a5:ad:
eb:29:f6:e4:99:7c:ab:ad:d9:f9:c3:58:db:21:e4:d8:41:4c:
bd:d3:83:9a:5b:38:07:47:99:05:88:91:cb:c6:c9:39:6b:21:
4c:33:2d:2e:70:2b:91:d2:52:dc:87:7e:c8:a2:28:c2:f8:8c:
6f:cd:9e:34:e6:df:6e:b3:fb:b3:bd:34:5c:dd:e6:a0:81:e4:
35:b3:41:5e:df:ae:95:ad:68:22:7a:df:78:33:0e:11:1b:62:
88:cb:aa:bf:c0:0c:ff:db:ec:f8:4b:c2:f7:0d:30:1d:a2:01:
eb:c1:f7:19:df:d6:55:e6:0e:23:2f:2e:3d:20:26:3e:d1:1a:
9d:c8:5e:71:6a:7b:fe:e3:d4:a3:78:3e:ea:48:40:84:15:62:
d6:69:32:b4:a1:b3:af:89:c9:6d:96:d3:d6:5a:7d:ba:19:ae:
5c:09:af:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxXisQv+1Hm2LMlOOPtmo7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMxMjExMDYyMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGVkNzlhMWQ5ZWJjYThjNTFmMDJjNTI2ODMxYmJjMjQxNzU5YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYOos3NG03De+Lo2Aamg4FthZTbY
zma2z3OvRD3zEbApJtLskbU4icqKIRr3OctYYc4C+4h0C0aLXkMIwgC8mt2aPEJv
NXSPjwEOVVjxJJ96uVkqFTg+DlneHjgfEfn9RVOHv1uOlP5w146zzbDVpneH1uMb
uByzeqlD+HJMYY9G02GLqwO1jBktFJkqbSuV8p860QZeA1XpbYkSgzM4VR8Zmhzk
w/eHG0KTG6NDdnlk06q0Rpg2YmlORMOOe0Js4jokGo8gY3B3clp0E0XA7NItLWQ6
5CRvRZgZyUlvdndPIcNETZO7DoWEGmCwW1nWuIzCLD78IpdxwEWGSMiX/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDteaHZ68qMUfAsUmgxu8JBdZsCMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEva08xNW9kbnJ5b3hSOEN4U2FERzd3a0YxbXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEWMA0G
CSqGSIb3DQEBCwUAA4IBAQAXzvg9dwUzMXyes878iGIrCN1YecbWHngDtOOrYWVd
Q/m99H20EdnutBqUAlCMsbvhY3J4C9uO7vBHhr489MXYtSfK1/fV+cAhnviOAJQ+
4VhUERZuCILNpa3rKfbkmXyrrdn5w1jbIeTYQUy904OaWzgHR5kFiJHLxsk5ayFM
My0ucCuR0lLch37IoijC+IxvzZ405t9us/uzvTRc3eaggeQ1s0Fe366VrWgiet94
Mw4RG2KIy6q/wAz/2+z4S8L3DTAdogHrwfcZ39ZV5g4jLy49ICY+0RqdyF5xanv+
49SjeD7qSECEFWLWaTK0obOvicltltPWWn26Ga5cCa9+
-----END CERTIFICATE-----
Generated at Thu Dec 14 18:54:49 2023 by rpki-client on console-fra.rpki-client.org