Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/vPJhDDfh4-1SHh9DiI8PrcYK0vE.roa
File: vPJhDDfh4-1SHh9DiI8PrcYK0vE.roa (raw, json)
Hash identifier: 2BwmLSsfUP4c0GjVFj1z1Ac1D+FYs98iGKJZRLSVamQ=
Subject key identifier: BC:F2:61:0C:37:E1:E3:ED:52:1E:1F:43:88:8F:0F:AD:C6:0A:D2:F1
Certificate issuer: /CN=cdbadc4938878971f916dc26093e5b17199e81df
Certificate serial: 018AFB588881C3B07DAC58DD7573EE5CED21
Authority key identifier: CD:BA:DC:49:38:87:89:71:F9:16:DC:26:09:3E:5B:17:19:9E:81:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbrcSTiHiXH5FtwmCT5bFxmegd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/vPJhDDfh4-1SHh9DiI8PrcYK0vE.roa
Signing time: Wed 04 Oct 2023 15:39:57 +0000
ROA not before: Wed 04 Oct 2023 15:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 62.204.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:58:88:81:c3:b0:7d:ac:58:dd:75:73:ee:5c:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbadc4938878971f916dc26093e5b17199e81df
Validity
Not Before: Oct 4 15:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcf2610c37e1e3ed521e1f43888f0fadc60ad2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:3c:8d:72:7b:bd:de:6a:ce:34:6f:e0:b4:
04:a6:22:6b:ef:0a:40:ab:9b:66:c9:a3:7b:a4:e0:
46:b7:06:93:39:26:3f:9b:87:bf:9f:bd:39:6b:af:
2a:6d:8a:ab:24:1b:2c:b3:17:44:2a:31:a8:21:24:
91:76:9e:28:39:e2:43:4b:00:c4:b3:49:a0:a0:1c:
9d:50:38:a5:e6:e3:4e:01:91:5a:22:d1:a3:a1:ff:
54:50:fd:5a:a0:fb:50:a9:4f:14:7b:65:da:d0:3d:
c6:72:f2:45:d8:ed:d9:cb:06:4c:16:f7:08:ac:76:
9f:32:f9:60:fb:62:1d:19:f5:6a:0e:2f:04:05:93:
1b:e9:3e:c0:a5:b6:5e:38:7b:65:27:d0:ce:aa:1f:
b9:0e:b2:39:68:50:ee:71:9b:2b:51:51:2e:b8:44:
ab:f4:71:30:c8:a2:f0:09:18:45:ed:03:ae:e1:4d:
17:2c:b8:a0:c2:a4:58:e4:f0:85:82:0b:1a:0b:c4:
4e:8e:f0:23:07:f4:62:b6:c7:4d:bb:1f:39:84:3c:
4e:06:7c:dc:96:0e:d5:ba:34:aa:30:6d:08:60:d4:
39:b3:89:27:97:59:4b:21:81:ea:18:f9:4c:02:2c:
f4:8a:2a:91:1e:07:46:df:9d:84:4a:f8:38:ef:da:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:61:0C:37:E1:E3:ED:52:1E:1F:43:88:8F:0F:AD:C6:0A:D2:F1
X509v3 Authority Key Identifier:
keyid:CD:BA:DC:49:38:87:89:71:F9:16:DC:26:09:3E:5B:17:19:9E:81:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbrcSTiHiXH5FtwmCT5bFxmegd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/vPJhDDfh4-1SHh9DiI8PrcYK0vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/zbrcSTiHiXH5FtwmCT5bFxmegd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.55.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a0:24:0b:ed:59:40:db:36:8f:04:ed:9f:e2:df:aa:2d:7d:
45:f1:ee:5d:52:d8:65:56:7a:5d:e0:18:a5:1f:9b:1a:42:7f:
7a:b5:a0:97:7a:10:cc:67:72:93:3e:9a:55:57:bd:c1:cf:86:
31:e0:c3:1d:5d:03:53:f0:16:95:4d:1c:d6:84:6b:0e:51:29:
f4:15:45:b7:2c:ad:e4:13:17:fb:e0:d8:a4:a5:26:ec:a4:40:
60:c0:60:a4:d7:a6:ae:5d:04:5f:a1:0e:92:f2:d6:6d:c9:51:
46:94:07:52:6a:a3:18:76:38:02:73:7a:d4:7d:0c:bf:6c:7c:
de:c1:7e:55:3c:9f:be:56:9b:22:d2:4a:c2:f8:ba:6d:80:e2:
82:92:7f:b9:58:21:18:b2:2f:ad:14:50:cb:99:3d:e9:6b:19:
bb:14:b2:0e:ba:65:95:0b:5a:79:3d:d6:4f:38:54:5f:cc:a9:
9b:7b:56:8b:94:8a:5c:2e:3b:2b:4d:8c:f6:df:19:26:3e:ae:
09:09:7c:6c:7e:50:3e:cc:37:2d:f5:08:31:47:2e:74:35:d9:
be:62:f0:ff:20:fc:3b:aa:79:10:82:35:b4:b5:93:a7:96:af:
c1:ab:ee:8d:5e:54:ca:b0:46:97:7e:18:02:e2:08:31:ca:c8:
af:8c:50:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr7WIiBw7B9rFjddXPuXO0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmFkYzQ5Mzg4Nzg5NzFmOTE2ZGMyNjA5M2U1YjE3MTk5
ZTgxZGYwHhcNMjMxMDA0MTUzOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2YyNjEwYzM3ZTFlM2VkNTIxZTFmNDM4ODhmMGZhZGM2MGFkMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNE8jXJ7vd5qzjRv4LQEpiJr7wpA
q5tmyaN7pOBGtwaTOSY/m4e/n705a68qbYqrJBsssxdEKjGoISSRdp4oOeJDSwDE
s0mgoBydUDil5uNOAZFaItGjof9UUP1aoPtQqU8Ue2Xa0D3GcvJF2O3ZywZMFvcI
rHafMvlg+2IdGfVqDi8EBZMb6T7ApbZeOHtlJ9DOqh+5DrI5aFDucZsrUVEuuESr
9HEwyKLwCRhF7QOu4U0XLLigwqRY5PCFggsaC8ROjvAjB/RitsdNux85hDxOBnzc
lg7VujSqMG0IYNQ5s4knl1lLIYHqGPlMAiz0iiqRHgdG352ESvg479qJFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLzyYQw34ePtUh4fQ4iPD63GCtLxMB8GA1UdIwQY
MBaAFM263Ek4h4lx+RbcJgk+WxcZnoHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJyY1NUaUhpWEg1RnR3bUNUNWJGeG1lZ2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNjRlZGItNGZmMC00ZDVjLWIxNTMt
NzU3NTJhMjA1YTBmLzEvdlBKaEREZmg0LTFTSGg5RGlJOFByY1lLMHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hNjRlZGItNGZmMC00ZDVjLWIxNTMtNzU3NTJhMjA1YTBm
LzEvemJyY1NUaUhpWEg1RnR3bUNUNWJGeG1lZ2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsw3MA0G
CSqGSIb3DQEBCwUAA4IBAQCSoCQL7VlA2zaPBO2f4t+qLX1F8e5dUthlVnpd4Bil
H5saQn96taCXehDMZ3KTPppVV73Bz4Yx4MMdXQNT8BaVTRzWhGsOUSn0FUW3LK3k
Exf74NikpSbspEBgwGCk16auXQRfoQ6S8tZtyVFGlAdSaqMYdjgCc3rUfQy/bHze
wX5VPJ++Vpsi0krC+LptgOKCkn+5WCEYsi+tFFDLmT3paxm7FLIOumWVC1p5PdZP
OFRfzKmbe1aLlIpcLjsrTYz23xkmPq4JCXxsflA+zDct9QgxRy50Ndm+YvD/IPw7
qnkQgjW0tZOnlq/Bq+6NXlTKsEaXfhgC4ggxysivjFDU
-----END CERTIFICATE-----
Generated at Sat Oct 14 15:33:04 2023 by rpki-client on console-fra.rpki-client.org