Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kuM_7crFpVpUELYwOjoitbu1CRM.roa
File: kuM_7crFpVpUELYwOjoitbu1CRM.roa (raw, json)
Hash identifier: Cux8bnLdbiTuVI/rWB9RzpVjhz3BsIN5PtSI+0Tdx0I=
Subject key identifier: 92:E3:3F:ED:CA:C5:A5:5A:54:10:B6:30:3A:3A:22:B5:BB:B5:09:13
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01867887E5704A0B86D4430DF43FBC1768A1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kuM_7crFpVpUELYwOjoitbu1CRM.roa
Signing time: Wed 22 Feb 2023 09:50:17 +0000
ROA not before: Wed 22 Feb 2023 09:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 07:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:87:e5:70:4a:0b:86:d4:43:0d:f4:3f:bc:17:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 22 09:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92e33fedcac5a55a5410b6303a3a22b5bbb50913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:51:eb:5d:43:bb:65:e2:81:85:64:75:7d:
92:ff:6c:1a:5f:e5:d5:20:30:01:a5:b3:99:1f:55:
0c:6e:97:ba:9d:87:2b:01:0b:d4:fd:e4:0f:3a:a4:
4c:97:54:e7:aa:c9:7b:78:09:86:a9:fd:f2:d1:d0:
95:9e:e5:d4:f4:5d:1e:73:5f:3e:6f:a0:ac:4a:f2:
2c:70:f4:70:66:9d:7d:ed:86:1b:0a:56:b5:d5:8a:
8d:42:be:07:d1:c9:9b:9e:bd:5a:3b:03:c6:e7:52:
9d:a2:1b:9c:a1:39:9e:46:64:fb:cd:7d:6b:ff:8f:
e9:d1:68:8d:2c:ee:8b:1a:47:12:16:97:59:a6:93:
f3:bf:60:ac:af:bc:48:ca:ef:64:e2:4b:17:b5:aa:
72:9a:3c:eb:c0:48:01:77:9e:c4:07:ea:03:3a:89:
2c:da:1a:37:32:dc:1e:b6:11:26:06:09:2d:28:ea:
8f:a8:cd:75:80:2c:ae:58:d5:7e:d8:b0:e7:33:13:
c5:cd:80:70:e2:9f:13:01:7e:54:8c:e1:57:d6:de:
37:80:95:c7:a1:19:b2:c3:c6:a6:7e:71:2b:05:40:
86:3f:5c:eb:ef:3b:00:3a:85:8c:e4:06:27:be:34:
c3:4f:e0:8b:f0:38:da:0e:9f:70:bd:3c:93:21:dd:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E3:3F:ED:CA:C5:A5:5A:54:10:B6:30:3A:3A:22:B5:BB:B5:09:13
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kuM_7crFpVpUELYwOjoitbu1CRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b6:c9:87:29:3a:e4:9f:a3:c2:99:6c:a5:4e:1a:8b:c0:ec:
1c:7f:4e:c9:3f:b7:f1:87:93:22:ed:98:a7:fa:9a:3a:c7:84:
86:ca:97:0c:0f:77:22:c8:82:90:f0:1b:1c:3a:9f:5c:ad:d0:
ed:fe:d9:af:27:86:0f:62:38:91:9e:51:5d:0c:18:ec:65:22:
a7:0d:76:0d:14:00:4c:5e:01:c6:25:4d:fb:0c:6f:ce:d4:f9:
f4:fc:d3:5d:3a:f2:a6:2d:fe:32:fa:cb:82:71:17:88:57:db:
a5:05:d2:a8:b6:53:74:7c:65:7d:59:67:a1:57:1a:9a:31:54:
cb:fd:3b:0e:ac:70:1b:20:08:f2:a8:7b:a7:d2:b2:9a:c5:ea:
4a:1f:d6:0a:ea:5b:85:cf:61:7b:51:db:49:03:85:0b:c0:e0:
d8:07:bc:6a:df:2d:ce:fd:ef:2a:b8:07:60:35:d9:e3:8e:e6:
17:2a:38:c9:07:5d:eb:e2:8a:d5:f3:8d:cb:86:bc:f1:05:ab:
6d:67:90:87:96:2a:fb:89:81:6e:bd:47:74:3d:ef:27:d5:68:
dd:c6:27:89:52:cf:94:28:e6:4e:fb:80:88:6a:00:25:0d:39:
80:fb:9f:b4:c3:e1:f2:df:a4:47:84:9e:9c:58:fc:9d:81:6b:
45:4f:ff:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ4h+VwSguG1EMN9D+8F2ihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMjIyMDk1MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmUzM2ZlZGNhYzVhNTVhNTQxMGI2MzAzYTNhMjJiNWJiYjUwOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFpR611Du2XigYVkdX2S/2waX+XV
IDABpbOZH1UMbpe6nYcrAQvU/eQPOqRMl1Tnqsl7eAmGqf3y0dCVnuXU9F0ec18+
b6CsSvIscPRwZp197YYbCla11YqNQr4H0cmbnr1aOwPG51KdohucoTmeRmT7zX1r
/4/p0WiNLO6LGkcSFpdZppPzv2Csr7xIyu9k4ksXtapymjzrwEgBd57EB+oDOoks
2ho3MtwethEmBgktKOqPqM11gCyuWNV+2LDnMxPFzYBw4p8TAX5UjOFX1t43gJXH
oRmyw8amfnErBUCGP1zr7zsAOoWM5AYnvjTDT+CL8DjaDp9wvTyTId0QOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLjP+3KxaVaVBC2MDo6IrW7tQkTMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEva3VNXzdjckZwVnBVRUxZd09qb2l0YnUxQ1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk/MA0G
CSqGSIb3DQEBCwUAA4IBAQA2tsmHKTrkn6PCmWylThqLwOwcf07JP7fxh5Mi7Zin
+po6x4SGypcMD3ciyIKQ8BscOp9crdDt/tmvJ4YPYjiRnlFdDBjsZSKnDXYNFABM
XgHGJU37DG/O1Pn0/NNdOvKmLf4y+suCcReIV9ulBdKotlN0fGV9WWehVxqaMVTL
/TsOrHAbIAjyqHun0rKaxepKH9YK6luFz2F7UdtJA4ULwODYB7xq3y3O/e8quAdg
NdnjjuYXKjjJB13r4orV843LhrzxBattZ5CHlir7iYFuvUd0Pe8n1WjdxieJUs+U
KOZO+4CIagAlDTmA+5+0w+Hy36RHhJ6cWPydgWtFT//7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org