Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uUh1BggJjGepFbYuybQHp7sUQdQ.roa
File: uUh1BggJjGepFbYuybQHp7sUQdQ.roa (raw, json)
Hash identifier: zoRwaXGrJPDg8ilmZCmn+PcHy0oNXCq4GPyyqirC4cE=
Subject key identifier: B9:48:75:06:08:09:8C:67:A9:15:B6:2E:C9:B4:07:A7:BB:14:41:D4
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0185AA587F99B214CA8E18C487AC84424F89
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uUh1BggJjGepFbYuybQHp7sUQdQ.roa
Signing time: Fri 13 Jan 2023 08:56:44 +0000
ROA not before: Fri 13 Jan 2023 08:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 86.62.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 13:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:58:7f:99:b2:14:ca:8e:18:c4:87:ac:84:42:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 13 08:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b948750608098c67a915b62ec9b407a7bb1441d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:4e:d1:a5:3d:94:5d:09:9c:87:ca:32:22:
77:8f:af:4e:b6:77:53:4f:51:c6:fd:65:e2:42:52:
69:9d:44:e1:c1:85:4f:d3:41:a3:7a:63:fb:ab:da:
ae:72:48:5b:cc:54:b9:ae:7d:00:c9:70:16:e1:43:
2d:3c:e6:8b:e0:16:95:31:dd:08:27:a1:88:3c:cb:
8e:cf:4b:d6:79:0a:92:74:29:2e:54:35:bb:cf:2e:
f6:c9:82:87:10:0d:9c:86:d7:b2:07:26:1f:44:78:
4c:12:68:a1:b6:2b:f4:33:f1:28:99:fc:6f:7f:a5:
0d:9f:98:a4:ed:11:ca:83:c3:8a:a6:33:c2:4e:2c:
63:46:ad:71:a9:a7:ec:f7:d3:68:d4:55:24:08:7b:
3b:e1:2c:5a:6a:11:05:99:a4:4f:cb:38:4a:6b:7d:
aa:3b:13:b0:69:3d:9f:91:0f:71:65:c4:86:24:43:
45:19:6f:55:10:63:2d:8d:24:de:74:df:5a:55:c4:
1d:c1:75:be:2b:57:4c:28:c3:2b:05:f9:89:8c:16:
80:15:e4:f3:47:81:96:60:e8:af:00:6b:f4:39:99:
3b:a7:68:eb:95:ea:ba:29:e9:2d:b4:90:a8:4a:60:
0d:08:20:f9:82:55:bf:01:76:e7:ba:f8:98:47:d3:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:48:75:06:08:09:8C:67:A9:15:B6:2E:C9:B4:07:A7:BB:14:41:D4
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uUh1BggJjGepFbYuybQHp7sUQdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
98:89:97:ba:48:d5:96:0e:12:24:38:bf:b1:77:b1:f0:72:72:
25:ae:55:e8:dd:60:43:32:52:38:7c:e9:dc:e4:78:70:61:fd:
d0:a9:93:20:db:42:88:3f:75:bb:96:30:58:3c:7e:70:91:42:
1c:07:4e:b0:1a:21:08:89:e1:ff:70:5f:8f:19:1a:03:b2:66:
25:f9:da:26:31:22:d2:ba:25:d3:58:dc:8b:19:eb:68:15:96:
be:3e:bf:4e:cd:dc:a3:9e:f6:4d:91:a1:a1:a7:03:69:f6:5b:
0d:dc:6e:49:8b:18:69:2a:8f:68:a8:05:71:82:29:29:50:af:
fc:1e:93:f7:23:19:f2:78:34:4c:4b:0a:36:d6:db:81:72:49:
60:b5:f4:df:7a:52:72:3c:3c:e4:89:35:e7:ab:e7:61:81:1a:
66:3e:87:73:7f:80:2a:9c:79:07:ad:47:c4:82:ee:d3:59:fa:
05:83:85:70:2c:33:47:29:76:38:a5:d0:85:0e:12:cf:0c:dc:
c2:86:fc:80:10:87:6e:f4:4f:04:7a:5c:91:bf:63:b1:0a:22:
d0:44:58:c1:3b:ad:40:43:af:8c:af:ab:0e:4b:bb:e2:85:17:
fe:5d:5f:4c:72:ce:c4:0b:99:97:fe:37:04:6d:7f:51:b9:eb:
ae:a3:4d:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWqWH+ZshTKjhjEh6yEQk+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjMwMTEzMDg1NjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTQ4NzUwNjA4MDk4YzY3YTkxNWI2MmVjOWI0MDdhN2JiMTQ0MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUBO0aU9lF0JnIfKMiJ3j69OtndT
T1HG/WXiQlJpnUThwYVP00GjemP7q9quckhbzFS5rn0AyXAW4UMtPOaL4BaVMd0I
J6GIPMuOz0vWeQqSdCkuVDW7zy72yYKHEA2chteyByYfRHhMEmihtiv0M/Eomfxv
f6UNn5ik7RHKg8OKpjPCTixjRq1xqafs99No1FUkCHs74SxaahEFmaRPyzhKa32q
OxOwaT2fkQ9xZcSGJENFGW9VEGMtjSTedN9aVcQdwXW+K1dMKMMrBfmJjBaAFeTz
R4GWYOivAGv0OZk7p2jrleq6KekttJCoSmANCCD5glW/AXbnuviYR9PZHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlIdQYICYxnqRW2Lsm0B6e7FEHUMB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvdVVoMUJnZ0pqR2VwRmJZdXliUUhwN3NVUWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVj4eMA0G
CSqGSIb3DQEBCwUAA4IBAQCYiZe6SNWWDhIkOL+xd7HwcnIlrlXo3WBDMlI4fOnc
5HhwYf3QqZMg20KIP3W7ljBYPH5wkUIcB06wGiEIieH/cF+PGRoDsmYl+domMSLS
uiXTWNyLGetoFZa+Pr9OzdyjnvZNkaGhpwNp9lsN3G5JixhpKo9oqAVxgikpUK/8
HpP3IxnyeDRMSwo21tuBcklgtfTfelJyPDzkiTXnq+dhgRpmPodzf4AqnHkHrUfE
gu7TWfoFg4VwLDNHKXY4pdCFDhLPDNzChvyAEIdu9E8EelyRv2OxCiLQRFjBO61A
Q6+Mr6sOS7vihRf+XV9Mcs7EC5mX/jcEbX9Rueuuo02E
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org