Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/dJZJcrZwZRBmYv_jM6XoUxeJxWw.roa
File: dJZJcrZwZRBmYv_jM6XoUxeJxWw.roa (raw, json)
Hash identifier: 0KERIPuL6PaFJkqmdqoKVrnc9kFqQy0bfDWOCvFxFJ0=
Subject key identifier: 74:96:49:72:B6:70:65:10:66:62:FF:E3:33:A5:E8:53:17:89:C5:6C
Certificate issuer: /CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
Certificate serial: 01856D13E5AC89B955EC09B3DC979823BD47
Authority key identifier: A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/dJZJcrZwZRBmYv_jM6XoUxeJxWw.roa
Signing time: Sun 01 Jan 2023 11:24:58 +0000
ROA not before: Sun 01 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e5:ac:89:b9:55:ec:09:b3:dc:97:98:23:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
Validity
Not Before: Jan 1 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74964972b67065106662ffe333a5e8531789c56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:56:11:6a:b4:db:ef:77:31:d7:6b:20:6f:
53:1c:34:8f:4e:62:63:95:b5:bf:c9:ad:a2:dd:02:
28:0c:fe:af:52:bc:32:53:99:f5:15:82:36:fa:f7:
83:16:3c:3b:b7:27:ed:09:a3:09:d7:7f:59:8d:e4:
19:25:90:8f:96:7e:39:83:c1:de:90:01:66:0a:cf:
c2:32:75:d9:06:9f:c5:8e:7a:fe:39:d9:f7:56:65:
bf:14:86:d2:3d:13:a2:ff:b1:a6:c9:50:06:a6:05:
47:51:59:02:67:c9:3c:d4:2a:a4:8d:d0:ce:78:cb:
ac:b6:eb:c7:6d:e9:1d:4e:ee:3d:1b:fb:29:32:7d:
a2:a4:80:7d:ad:92:60:59:94:ce:78:b8:33:d5:7d:
80:e7:b3:32:86:94:db:70:09:63:f3:ba:cd:19:cc:
34:a9:ba:d5:08:7f:32:9b:ac:1f:13:a3:12:67:b2:
d1:53:05:73:a8:46:9e:d9:46:ea:48:7d:74:da:99:
56:16:35:94:34:62:54:38:13:1d:77:88:72:ef:d6:
bd:f9:13:e5:9a:ca:8f:5b:3d:ba:3f:2f:bb:eb:d5:
75:56:49:0d:ce:9e:f1:41:c4:d9:04:a9:14:2d:c6:
e2:04:38:b4:92:f9:7e:15:3b:97:4f:2f:8d:3c:af:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:49:72:B6:70:65:10:66:62:FF:E3:33:A5:E8:53:17:89:C5:6C
X509v3 Authority Key Identifier:
keyid:A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/dJZJcrZwZRBmYv_jM6XoUxeJxWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6c:d8:ab:30:88:ac:12:da:1d:64:73:12:26:95:17:dd:60:
c4:2d:24:48:29:2e:9f:ed:ed:ed:af:35:7f:b5:d2:eb:2d:99:
87:ef:ff:60:4b:20:3d:f0:3d:0c:3a:61:fa:82:2b:17:6c:d9:
af:4d:46:70:e6:56:0d:a5:ac:f8:cd:99:64:1a:23:d1:25:34:
95:66:16:1b:e1:b9:40:1f:37:55:dd:a3:b1:1d:b5:44:aa:70:
95:f7:b3:9e:a5:69:bc:2a:c6:4e:ca:80:0d:b0:41:7b:74:9a:
71:18:0f:5f:27:9d:44:80:84:c7:fa:bb:b3:a1:9c:9d:b7:b3:
19:27:40:da:93:e0:b4:38:ee:8c:98:c7:4b:ca:c9:33:a6:2b:
f0:a6:01:47:a4:db:d9:39:df:78:c3:c1:5b:ce:5d:cf:95:28:
e2:e1:35:83:50:24:a2:9b:91:f0:10:94:df:28:ca:5e:ca:11:
b4:22:48:8d:a0:08:c5:4b:e2:c6:a6:e3:49:a8:76:a2:d8:ca:
70:91:d5:a9:20:22:a3:ae:45:f6:a1:d9:3b:8a:7d:cc:69:d8:
9a:72:07:9b:f1:ef:07:3e:95:d5:3c:e7:8f:8d:e0:84:ae:2e:
14:4d:c4:4f:9e:4e:8f:10:5b:44:2a:81:67:f3:dd:29:10:8e:
91:86:1f:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtE+WsiblV7Amz3JeYI71HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTg4NWI2ZGJhZDY3ZWE1YzFhOWE1NWVlMTQ4OWEwN2Ni
Zjk1NDIwHhcNMjMwMTAxMTEyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDk2NDk3MmI2NzA2NTEwNjY2MmZmZTMzM2E1ZTg1MzE3ODljNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1FWEWq02+93MddrIG9THDSPTmJj
lbW/ya2i3QIoDP6vUrwyU5n1FYI2+veDFjw7tyftCaMJ139ZjeQZJZCPln45g8He
kAFmCs/CMnXZBp/Fjnr+Odn3VmW/FIbSPROi/7GmyVAGpgVHUVkCZ8k81CqkjdDO
eMustuvHbekdTu49G/spMn2ipIB9rZJgWZTOeLgz1X2A57MyhpTbcAlj87rNGcw0
qbrVCH8ym6wfE6MSZ7LRUwVzqEae2UbqSH102plWFjWUNGJUOBMdd4hy79a9+RPl
msqPWz26Py+769V1VkkNzp7xQcTZBKkULcbiBDi0kvl+FTuXTy+NPK8w1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSWSXK2cGUQZmL/4zOl6FMXicVsMB8GA1UdIwQY
MBaAFKfohbbbrWfqXBqaVe4UiaB8v5VCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1pRnR0dXRaLXBjR3BwVjdoU0pvSHlfbFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZmJmOWItMzA4YS00OWNhLTliMGYt
YWQ2YWFlY2NhMjdmLzEvZEpaSmNyWndaUkJtWXZfak02WG9VeGVKeFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZmJmOWItMzA4YS00OWNhLTliMGYtYWQ2YWFlY2NhMjdm
LzEvcC1pRnR0dXRaLXBjR3BwVjdoU0pvSHlfbFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeFMA0G
CSqGSIb3DQEBCwUAA4IBAQB8bNirMIisEtodZHMSJpUX3WDELSRIKS6f7e3trzV/
tdLrLZmH7/9gSyA98D0MOmH6gisXbNmvTUZw5lYNpaz4zZlkGiPRJTSVZhYb4blA
HzdV3aOxHbVEqnCV97OepWm8KsZOyoANsEF7dJpxGA9fJ51EgITH+ruzoZydt7MZ
J0Dak+C0OO6MmMdLyskzpivwpgFHpNvZOd94w8Fbzl3PlSji4TWDUCSim5HwEJTf
KMpeyhG0IkiNoAjFS+LGpuNJqHai2MpwkdWpICKjrkX2odk7in3Madiacgeb8e8H
PpXVPOePjeCEri4UTcRPnk6PEFtEKoFn890pEI6Rhh82
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:23 2023 by rpki-client on console-fra.rpki-client.org