Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PMvJs6yT8TbWTyOqC5cvnxkTvHo.roa
File: PMvJs6yT8TbWTyOqC5cvnxkTvHo.roa (raw, json)
Hash identifier: XKlGwcf27UvBEKtpB8HSfe3bEsAsmc5G9XK1JDMlZHM=
Subject key identifier: 3C:CB:C9:B3:AC:93:F1:36:D6:4F:23:AA:0B:97:2F:9F:19:13:BC:7A
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53FFE698F4498556AB2307BF36955
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PMvJs6yT8TbWTyOqC5cvnxkTvHo.roa
Signing time: Mon 02 Jan 2023 00:15:24 +0000
ROA not before: Mon 02 Jan 2023 00:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60996
IP address blocks: 128.0.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3f:fe:69:8f:44:98:55:6a:b2:30:7b:f3:69:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ccbc9b3ac93f136d64f23aa0b972f9f1913bc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:09:72:41:fc:d1:b5:9d:c6:a5:81:c7:ec:
fd:ab:0c:48:7f:49:ee:9e:93:1c:df:cf:aa:e3:10:
db:0f:aa:27:73:7a:08:24:48:a7:71:aa:27:c4:83:
de:65:ef:f2:1e:67:e9:37:a9:80:db:10:70:34:26:
4c:19:74:c4:fd:82:1c:d2:0d:d4:73:b8:d7:0e:4a:
76:84:46:0b:5b:b9:42:4c:e1:2b:34:f8:85:bb:88:
28:2b:01:a6:39:62:5d:e0:61:b3:3e:ce:de:9e:07:
9f:bc:e3:24:67:9b:9e:61:e5:69:df:21:77:51:6e:
e8:3b:8a:66:7e:e6:ac:57:90:a1:e1:a9:fe:90:e9:
ab:28:49:18:8f:08:1f:c8:4c:31:b5:b1:f4:b1:31:
8d:fe:70:c6:f8:f2:0a:eb:c3:b2:d7:20:73:78:cd:
4f:db:2d:cb:13:3a:5d:1f:5b:2f:d3:b5:3b:1f:c9:
e4:3b:d1:e6:a9:f3:31:f1:2b:d5:22:84:0a:6a:7c:
79:1a:5d:c4:27:12:ff:1b:c4:bb:a8:1d:4c:73:d6:
1a:29:f6:05:51:ae:79:f2:16:ef:e6:a3:c1:6a:45:
bb:87:4e:7a:be:b4:c8:51:06:c1:6f:4d:93:ca:67:
88:20:78:07:d5:df:44:6a:7e:04:a7:cc:b9:4b:97:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CB:C9:B3:AC:93:F1:36:D6:4F:23:AA:0B:97:2F:9F:19:13:BC:7A
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PMvJs6yT8TbWTyOqC5cvnxkTvHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.56.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9f:f9:fc:00:60:35:f9:66:6a:b2:96:e0:32:f4:cb:1d:b0:
ac:79:90:8a:85:92:b7:2a:61:c4:06:49:e2:33:a6:40:01:6c:
e7:54:2c:1a:94:a8:d6:b8:42:9c:2d:af:ab:b8:14:6d:49:8d:
5f:42:a9:f0:0d:a9:04:5a:53:f7:8e:dc:a1:95:2f:a2:3b:b1:
e7:3d:19:df:85:3e:52:e5:af:0e:a1:dd:59:88:f0:6d:5b:0f:
cc:a5:87:34:12:6f:b3:87:52:03:67:74:8a:5c:a9:42:26:51:
9b:9f:df:7f:86:3e:7f:e7:9f:19:73:04:02:66:cb:7b:dd:f6:
e7:b8:5e:d8:9a:eb:dc:91:50:c5:c1:3e:3a:95:28:c5:a1:49:
fa:c0:1c:f5:fa:64:e4:a2:f9:0f:2c:23:67:7a:e1:1f:bd:91:
c3:eb:c5:28:b8:07:34:06:6a:f6:de:d5:3b:bd:a2:28:87:70:
53:9f:9c:79:c2:ca:45:83:e3:56:fc:59:4b:5d:e1:ec:9a:ed:
98:7e:4d:bb:e6:04:5d:84:71:f8:5d:a2:70:1d:c9:4e:79:d5:
31:9e:f5:25:6c:99:c8:63:85:31:b2:87:d2:a4:cc:62:5e:5a:
94:a4:ec:c2:c9:60:92:02:ee:6b:7d:c0:7f:bf:69:ba:e3:a2:
c7:28:e6:c8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1T/+aY9EmFVqsjB782lVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2NiYzliM2FjOTNmMTM2ZDY0ZjIzYWEwYjk3MmY5ZjE5MTNiYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngAJckH80bWdxqWBx+z9qwxIf0nu
npMc38+q4xDbD6onc3oIJEincaonxIPeZe/yHmfpN6mA2xBwNCZMGXTE/YIc0g3U
c7jXDkp2hEYLW7lCTOErNPiFu4goKwGmOWJd4GGzPs7engefvOMkZ5ueYeVp3yF3
UW7oO4pmfuasV5Ch4an+kOmrKEkYjwgfyEwxtbH0sTGN/nDG+PIK68Oy1yBzeM1P
2y3LEzpdH1sv07U7H8nkO9HmqfMx8SvVIoQKanx5Gl3EJxL/G8S7qB1Mc9YaKfYF
Ua558hbv5qPBakW7h056vrTIUQbBb02TymeIIHgH1d9Ean4Ep8y5S5fSvQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDzLybOsk/E21k8jqguXL58ZE7x6MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1BNdkpzNnlUOFRiV1R5T3FDNWN2bnhrVHZIby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACAADgw
DQYJKoZIhvcNAQELBQADggEBAIGf+fwAYDX5ZmqyluAy9MsdsKx5kIqFkrcqYcQG
SeIzpkABbOdULBqUqNa4Qpwtr6u4FG1JjV9CqfANqQRaU/eO3KGVL6I7sec9Gd+F
PlLlrw6h3VmI8G1bD8ylhzQSb7OHUgNndIpcqUImUZuf33+GPn/nnxlzBAJmy3vd
9ue4Xtia69yRUMXBPjqVKMWhSfrAHPX6ZOSi+Q8sI2d64R+9kcPrxSi4BzQGavbe
1Tu9oiiHcFOfnHnCykWD41b8WUtd4eya7Zh+TbvmBF2EcfhdonAdyU551TGe9SVs
mchjhTGyh9KkzGJeWpSk7MLJYJIC7mt9wH+/abrjosco5sg=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org