Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/9XoeY7aV2wC8c3CYamStcPlSPXM.roa
File: 9XoeY7aV2wC8c3CYamStcPlSPXM.roa (raw, json)
Hash identifier: UdW1XPfnwSucP6MtyOH9+RCHvPew9wbeRLT5YsJJ6a0=
Subject key identifier: F5:7A:1E:63:B6:95:DB:00:BC:73:70:98:6A:64:AD:70:F9:52:3D:73
Certificate issuer: /CN=445cb7e2560de294a49a6370f742589ddcbcde74
Certificate serial: 01856F5DBE090B3CBFF9EBFC52020C93123C
Authority key identifier: 44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFy34lYN4pSkmmNw90JYndy83nQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/9XoeY7aV2wC8c3CYamStcPlSPXM.roa
Signing time: Sun 01 Jan 2023 22:04:52 +0000
ROA not before: Sun 01 Jan 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:be:09:0b:3c:bf:f9:eb:fc:52:02:0c:93:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445cb7e2560de294a49a6370f742589ddcbcde74
Validity
Not Before: Jan 1 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f57a1e63b695db00bc7370986a64ad70f9523d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:15:5d:0e:f8:9b:69:da:d7:bf:d7:46:c4:
a7:4a:83:28:d7:7b:9e:9c:6b:b6:d0:5b:82:95:2e:
90:82:f0:ef:c6:8b:04:c4:a0:0d:3c:dd:7e:0c:93:
6f:bc:04:5e:8f:7f:a1:a8:77:43:ef:98:ab:27:b6:
98:e7:68:af:05:48:43:5e:e2:03:d9:b5:df:1e:92:
e3:fd:53:7c:7e:99:d8:af:ce:84:8e:79:7a:e7:63:
5f:be:a8:a2:cb:fe:19:01:0c:b3:01:75:de:74:50:
bd:f9:90:dc:b0:44:39:52:62:4b:de:2e:3e:23:79:
43:d1:50:17:e2:d3:e2:fa:d4:a4:dc:68:76:4f:39:
52:1f:3f:3d:54:59:e2:84:83:e0:29:47:74:39:2f:
25:51:b0:fb:ca:bf:9a:3b:12:d8:de:2e:c3:96:9c:
75:05:b2:71:c8:2c:cf:37:b0:ea:f2:15:3f:4a:24:
2c:94:ad:d6:4f:c5:b1:9c:e9:db:56:bc:03:3d:13:
96:aa:db:ad:45:8e:7e:b0:77:5d:31:07:e3:3c:69:
ed:30:b0:29:02:1b:ae:77:54:e7:28:fa:66:6e:d3:
05:7e:5e:47:22:ec:e8:b7:4a:96:f2:d4:30:a0:0c:
4a:84:fa:3e:f1:44:97:c3:8f:c7:fe:a5:9f:1a:e4:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7A:1E:63:B6:95:DB:00:BC:73:70:98:6A:64:AD:70:F9:52:3D:73
X509v3 Authority Key Identifier:
keyid:44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFy34lYN4pSkmmNw90JYndy83nQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/9XoeY7aV2wC8c3CYamStcPlSPXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/RFy34lYN4pSkmmNw90JYndy83nQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.221.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c1:2d:9a:85:07:9e:e3:89:87:df:b0:09:c7:28:c8:d8:45:
80:bf:ec:5c:6f:2c:ed:75:48:78:42:08:91:c1:a0:6b:44:88:
1d:62:71:1a:02:47:66:43:ce:6e:84:a3:9e:24:dc:92:7b:9c:
bd:98:65:bf:50:14:48:ef:00:d2:71:5e:70:41:84:2a:9d:65:
74:15:71:da:d2:fc:7e:06:8c:b1:9c:d2:cd:0a:4e:61:36:c8:
08:32:6d:60:1a:27:d1:d1:cf:20:2a:d0:7a:42:09:fe:9b:2b:
1a:4f:d9:c9:93:3c:fa:5a:c4:76:9c:a0:84:62:c3:37:28:da:
aa:2c:c4:23:8e:5d:bb:8f:06:75:33:98:11:ad:2f:94:28:f1:
98:cb:52:52:f4:e2:7e:24:a9:0d:c5:f9:42:4a:a2:e9:54:ba:
d0:f8:0b:9a:10:3b:0c:3d:d9:d7:ae:aa:0c:00:38:22:2c:e9:
2a:69:71:98:ff:78:21:f4:5e:c2:14:d0:17:eb:88:3a:ac:f9:
ed:8a:c2:e7:7a:6f:3e:6a:e3:c3:72:10:79:6c:a8:77:8d:80:
a4:c8:6d:b5:c7:17:40:c4:24:bb:51:b1:25:c1:1a:46:a9:81:
d2:21:87:ef:91:50:24:00:b6:e2:76:99:40:68:09:fd:f3:f9:
6a:6c:31:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXb4JCzy/+ev8UgIMkxI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWNiN2UyNTYwZGUyOTRhNDlhNjM3MGY3NDI1ODlkZGNi
Y2RlNzQwHhcNMjMwMTAxMjIwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTdhMWU2M2I2OTVkYjAwYmM3MzcwOTg2YTY0YWQ3MGY5NTIzZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjgVXQ74m2na17/XRsSnSoMo13ue
nGu20FuClS6QgvDvxosExKANPN1+DJNvvARej3+hqHdD75irJ7aY52ivBUhDXuID
2bXfHpLj/VN8fpnYr86Ejnl652Nfvqiiy/4ZAQyzAXXedFC9+ZDcsEQ5UmJL3i4+
I3lD0VAX4tPi+tSk3Gh2TzlSHz89VFnihIPgKUd0OS8lUbD7yr+aOxLY3i7Dlpx1
BbJxyCzPN7Dq8hU/SiQslK3WT8WxnOnbVrwDPROWqtutRY5+sHddMQfjPGntMLAp
Ahuud1TnKPpmbtMFfl5HIuzot0qW8tQwoAxKhPo+8USXw4/H/qWfGuQx7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPV6HmO2ldsAvHNwmGpkrXD5Uj1zMB8GA1UdIwQY
MBaAFERct+JWDeKUpJpjcPdCWJ3cvN50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZ5MzRsWU40cFNrbW1OdzkwSlluZHk4M25RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hYzUzMWYtNDlhOC00Y2NmLWExYWIt
N2IxNDczNWVlMjM0LzEvOVhvZVk3YVYyd0M4YzNDWWFtU3RjUGxTUFhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9hYzUzMWYtNDlhOC00Y2NmLWExYWItN2IxNDczNWVlMjM0
LzEvUkZ5MzRsWU40cFNrbW1OdzkwSlluZHk4M25RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPdMA0G
CSqGSIb3DQEBCwUAA4IBAQCCwS2ahQee44mH37AJxyjI2EWAv+xcbyztdUh4QgiR
waBrRIgdYnEaAkdmQ85uhKOeJNySe5y9mGW/UBRI7wDScV5wQYQqnWV0FXHa0vx+
BoyxnNLNCk5hNsgIMm1gGifR0c8gKtB6Qgn+mysaT9nJkzz6WsR2nKCEYsM3KNqq
LMQjjl27jwZ1M5gRrS+UKPGYy1JS9OJ+JKkNxflCSqLpVLrQ+AuaEDsMPdnXrqoM
ADgiLOkqaXGY/3gh9F7CFNAX64g6rPntisLnem8+auPDchB5bKh3jYCkyG21xxdA
xCS7UbElwRpGqYHSIYfvkVAkALbidplAaAn98/lqbDHu
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:42 2023 by rpki-client on console-ams.rpki-client.org