Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/ig4RY-oY-Uyri71UjjiUJNC3BMU.roa
File: ig4RY-oY-Uyri71UjjiUJNC3BMU.roa (raw, json)
Hash identifier: saL/3AsWDQEeuH4wmSf2OBvMqbGP+dG+TRmXKNYdOTg=
Subject key identifier: 8A:0E:11:63:EA:18:F9:4C:AB:8B:BD:54:8E:38:94:24:D0:B7:04:C5
Certificate issuer: /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial: 01856C53D71D8679EE9914A620C7508CD0DF
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/ig4RY-oY-Uyri71UjjiUJNC3BMU.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205911
IP address blocks: 185.51.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d7:1d:86:79:ee:99:14:a6:20:c7:50:8c:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a0e1163ea18f94cab8bbd548e389424d0b704c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:64:05:b9:af:b1:f7:47:91:4d:be:71:f3:
1e:3e:53:3a:cb:20:43:5e:3d:0c:1a:ab:98:4e:e2:
d6:38:7a:08:8c:33:48:df:61:1c:05:bc:f9:99:e3:
7b:05:ca:37:4f:bd:7e:85:f4:13:dd:ba:7a:6b:4a:
69:63:ac:e4:87:3f:7c:11:6e:f5:59:a5:67:ae:65:
f7:31:62:b6:98:30:a0:d9:40:5c:78:4a:06:1d:aa:
4a:c8:f5:3e:ef:89:7d:bf:0d:d3:44:36:93:8a:27:
6b:3a:b3:c3:08:0f:99:35:24:17:bb:f5:3f:0b:d7:
cc:d6:0d:d3:c2:74:8f:3c:24:2f:da:34:ac:9c:9c:
f9:07:87:04:34:bc:df:6d:c9:53:c9:ec:08:17:fe:
59:a9:6b:c8:11:0d:80:96:a9:1c:6a:32:6b:db:5e:
43:9f:be:62:4d:ec:d9:ed:ab:2a:70:a1:0d:1a:ef:
76:84:89:1a:18:96:77:03:1d:3d:1d:fb:fd:b6:ce:
52:ba:72:ec:2f:dc:0e:f2:97:34:5c:57:87:65:83:
ba:4d:28:f2:9d:ee:09:2b:8f:fa:6a:45:ac:d5:2c:
0c:33:eb:2a:a4:f2:94:80:f4:fa:98:82:4e:d7:20:
f3:25:66:d4:15:9c:45:3e:f4:2e:63:14:f6:70:95:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0E:11:63:EA:18:F9:4C:AB:8B:BD:54:8E:38:94:24:D0:B7:04:C5
X509v3 Authority Key Identifier:
keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/ig4RY-oY-Uyri71UjjiUJNC3BMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a0:d5:90:a3:2d:62:45:b9:08:05:23:25:42:8b:cf:fd:af:
9f:ce:9f:08:77:6e:ca:8a:33:a8:66:a0:f8:5e:f6:ff:f7:34:
39:02:09:6b:08:a3:f7:11:62:31:1b:51:32:53:59:60:33:62:
99:6e:c6:82:62:6b:79:7e:cb:2d:fc:b5:ee:3c:e5:17:6f:95:
e7:15:c8:0e:12:21:4a:f8:32:d1:cb:c0:57:c1:57:bc:95:95:
f3:91:f1:60:6f:11:12:30:c1:ba:95:e8:54:bf:ce:d9:90:4c:
aa:40:42:5e:d3:fd:8b:7c:36:04:5f:41:b1:95:67:21:58:3f:
4f:1b:d7:33:e7:cb:19:84:18:9c:12:d1:f2:ce:03:30:72:f3:
8f:84:08:cc:a9:5c:2f:35:f2:b9:26:70:31:c9:5f:45:14:2a:
0a:44:22:4d:63:b0:e5:57:0b:1b:fe:a5:e8:13:31:a6:34:17:
36:65:b5:aa:16:3e:39:22:a6:50:d7:9b:82:cf:76:ce:d2:70:
6d:bd:07:fe:c0:be:fe:74:98:53:ef:ff:b6:3c:ea:03:78:6a:
3c:c6:c2:7e:a6:2a:ce:97:f4:dc:2e:78:0a:ac:fa:ba:42:99:
49:54:7f:4c:a2:27:2b:5b:29:85:5d:54:a1:ce:33:9c:12:8b:
d7:c5:d3:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU9cdhnnumRSmIMdQjNDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOWJmMjllMWFjYTIzYTUxNWUxMWY2Njk2MGI0ZWI5NWM4
MGNmYjkwHhcNMjMwMTAxMDc1NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTBlMTE2M2VhMThmOTRjYWI4YmJkNTQ4ZTM4OTQyNGQwYjcwNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnstkBbmvsfdHkU2+cfMePlM6yyBD
Xj0MGquYTuLWOHoIjDNI32EcBbz5meN7Bco3T71+hfQT3bp6a0ppY6zkhz98EW71
WaVnrmX3MWK2mDCg2UBceEoGHapKyPU+74l9vw3TRDaTiidrOrPDCA+ZNSQXu/U/
C9fM1g3TwnSPPCQv2jSsnJz5B4cENLzfbclTyewIF/5ZqWvIEQ2AlqkcajJr215D
n75iTezZ7asqcKENGu92hIkaGJZ3Ax09Hfv9ts5SunLsL9wO8pc0XFeHZYO6TSjy
ne4JK4/6akWs1SwMM+sqpPKUgPT6mIJO1yDzJWbUFZxFPvQuYxT2cJUnvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoOEWPqGPlMq4u9VI44lCTQtwTFMB8GA1UdIwQY
MBaAFJGb8p4ayiOlFeEfZpYLTrlcgM+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1p2eW5ocktJNlVWNFI5bWxndE91VnlBejdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lNTdkY2YtMzZmOS00YTRhLWFlM2Mt
MGJiM2FmZmNjMmQzLzEvaWc0Ulktb1ktVXlyaTcxVWpqaVVKTkMzQk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lNTdkY2YtMzZmOS00YTRhLWFlM2MtMGJiM2FmZmNjMmQz
LzEva1p2eW5ocktJNlVWNFI5bWxndE91VnlBejdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTN4MA0G
CSqGSIb3DQEBCwUAA4IBAQAuoNWQoy1iRbkIBSMlQovP/a+fzp8Id27KijOoZqD4
Xvb/9zQ5AglrCKP3EWIxG1EyU1lgM2KZbsaCYmt5fsst/LXuPOUXb5XnFcgOEiFK
+DLRy8BXwVe8lZXzkfFgbxESMMG6lehUv87ZkEyqQEJe0/2LfDYEX0GxlWchWD9P
G9cz58sZhBicEtHyzgMwcvOPhAjMqVwvNfK5JnAxyV9FFCoKRCJNY7DlVwsb/qXo
EzGmNBc2ZbWqFj45IqZQ15uCz3bO0nBtvQf+wL7+dJhT7/+2POoDeGo8xsJ+pirO
l/TcLngKrPq6QplJVH9MoicrWymFXVShzjOcEovXxdOd
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:37 2024 by rpki-client on console-ams.rpki-client.org