Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/Dtbi9XncZ-kIrvpxYF7C0KcAdg8.roa
File: Dtbi9XncZ-kIrvpxYF7C0KcAdg8.roa (raw, json)
Hash identifier: nNN3u9KFO6T5qJ2pXtDArunYkXB0knWhTrOcq62fN4w=
Subject key identifier: 0E:D6:E2:F5:79:DC:67:E9:08:AE:FA:71:60:5E:C2:D0:A7:00:76:0F
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0185704278374A7741826EA99D6AE8207279
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/Dtbi9XncZ-kIrvpxYF7C0KcAdg8.roa
Signing time: Mon 02 Jan 2023 02:14:42 +0000
ROA not before: Mon 02 Jan 2023 02:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1741
IP address blocks: 130.232.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:78:37:4a:77:41:82:6e:a9:9d:6a:e8:20:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jan 2 02:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed6e2f579dc67e908aefa71605ec2d0a700760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:64:44:e6:c5:79:2d:a4:a8:2d:c7:00:73:
9d:c3:0e:c7:a8:8f:ee:9d:ca:7d:2b:25:77:e1:dd:
06:f1:08:f4:15:08:14:03:29:89:c6:2d:6e:bc:53:
3d:8d:e1:d2:5e:6e:de:08:78:35:3f:8a:ca:d2:68:
05:15:75:53:24:16:8f:2d:d1:db:13:9c:83:37:2d:
5c:8a:38:6c:3b:b7:9d:c8:47:a2:f7:01:3e:59:4d:
df:ca:c0:0b:23:e2:6c:2f:8c:5b:fd:f1:08:19:b0:
ad:fc:db:47:27:73:48:72:32:40:7a:64:4c:50:c0:
1a:be:40:4f:7c:ac:9d:9e:93:b8:66:45:cb:66:f6:
d6:1e:93:c8:b9:64:4d:ef:fe:29:22:96:3a:f1:18:
c6:0d:07:83:6e:5e:9b:f5:dc:78:61:c1:29:75:28:
61:24:2b:84:71:27:97:83:99:45:cf:30:d7:02:92:
81:34:2a:b8:9d:59:2e:07:ca:af:cd:a7:79:5e:fc:
67:d8:b0:3f:56:1e:d4:21:e9:26:8d:be:35:80:b1:
c9:40:d8:12:01:43:56:1a:64:70:a9:48:29:aa:ee:
1f:1f:cb:1b:9f:c7:77:e8:a9:44:1d:14:81:79:c3:
a2:59:c9:44:ce:32:90:3a:16:76:09:0c:27:e0:5c:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D6:E2:F5:79:DC:67:E9:08:AE:FA:71:60:5E:C2:D0:A7:00:76:0F
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/Dtbi9XncZ-kIrvpxYF7C0KcAdg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:6f:00:b7:49:e3:3a:98:9c:bc:08:1d:95:97:72:1f:48:a3:
b8:0f:a3:5a:37:21:a4:00:40:31:08:40:0c:1a:f6:a7:bf:8e:
25:1b:fc:de:8b:06:1e:af:db:21:15:fc:01:4f:50:66:2e:07:
4e:22:70:19:35:c4:ff:91:8a:e0:7f:ee:ef:fb:22:3b:ed:f8:
db:e1:6d:51:1b:3a:27:13:4f:67:98:ae:ea:fa:84:2e:6d:78:
a2:63:a3:2d:69:88:9f:9a:fa:cf:4e:e7:fe:30:fd:76:bf:7b:
0c:dc:c5:e1:8b:a0:f4:07:c1:2e:5c:46:50:2b:44:18:a0:b0:
aa:2b:70:1b:3b:9d:52:72:38:18:7e:46:b9:48:50:8a:e8:de:
bd:12:48:2e:0e:c9:8e:d9:8a:4e:a6:a6:fe:b6:9b:45:c8:f8:
31:78:36:45:a3:fe:54:a8:45:24:b4:9d:4d:81:71:18:3f:81:
af:bc:2d:d9:f7:7f:fa:21:e6:6e:d9:37:de:ad:d9:03:6d:f3:
00:a0:c8:83:d9:ee:2d:a1:a5:18:d1:7b:0a:4f:99:37:c6:4c:
8e:dd:6b:b7:c1:a2:c1:89:ff:81:e3:b0:8e:5a:76:b9:59:87:
a8:a9:ee:27:e6:2d:4d:4a:d3:c1:85:61:1e:2b:ce:95:99:20:
02:6c:2d:5e
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVwQng3SndBgm6pnWroIHJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk
NGJlYzAwHhcNMjMwMTAyMDIxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWQ2ZTJmNTc5ZGM2N2U5MDhhZWZhNzE2MDVlYzJkMGE3MDA3NjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6pkRObFeS2kqC3HAHOdww7HqI/u
ncp9KyV34d0G8Qj0FQgUAymJxi1uvFM9jeHSXm7eCHg1P4rK0mgFFXVTJBaPLdHb
E5yDNy1cijhsO7edyEei9wE+WU3fysALI+JsL4xb/fEIGbCt/NtHJ3NIcjJAemRM
UMAavkBPfKydnpO4ZkXLZvbWHpPIuWRN7/4pIpY68RjGDQeDbl6b9dx4YcEpdShh
JCuEcSeXg5lFzzDXApKBNCq4nVkuB8qvzad5Xvxn2LA/Vh7UIekmjb41gLHJQNgS
AUNWGmRwqUgpqu4fH8sbn8d36KlEHRSBecOiWclEzjKQOhZ2CQwn4Fz6gwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFA7W4vV53GfpCK76cWBewtCnAHYPMB8GA1UdIwQY
MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt
ZGU5NzEyYzZlN2M3LzEvRHRiaTlYbmNaLWtJcnZweFlGN0MwS2NBZGc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3
LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgugwDQYJ
KoZIhvcNAQELBQADggEBAKFvALdJ4zqYnLwIHZWXch9Io7gPo1o3IaQAQDEIQAwa
9qe/jiUb/N6LBh6v2yEV/AFPUGYuB04icBk1xP+RiuB/7u/7Ijvt+NvhbVEbOicT
T2eYrur6hC5teKJjoy1piJ+a+s9O5/4w/Xa/ewzcxeGLoPQHwS5cRlArRBigsKor
cBs7nVJyOBh+RrlIUIro3r0SSC4OyY7Zik6mpv62m0XI+DF4NkWj/lSoRSS0nU2B
cRg/ga+8Ldn3f/oh5m7ZN96t2QNt8wCgyIPZ7i2hpRjRewpPmTfGTI7da7fBosGJ
/4HjsI5adrlZh6ip7ifmLU1K08GFYR4rzpWZIAJsLV4=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:05 2024 by rpki-client on console-ams.rpki-client.org