Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/l3on4RWE6FXcAiykdcIfVSaSn3U.roa
File: l3on4RWE6FXcAiykdcIfVSaSn3U.roa (raw, json)
Hash identifier: Fl29tbZVuzHwtalo+wxjRVNwsUwx6JIRzrIrbPr1QWY=
Subject key identifier: 97:7A:27:E1:15:84:E8:55:DC:02:2C:A4:75:C2:1F:55:26:92:9F:75
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 018572558B521FCEFAFF9C33CEA7A7C34862
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/l3on4RWE6FXcAiykdcIfVSaSn3U.roa
Signing time: Mon 02 Jan 2023 11:54:46 +0000
ROA not before: Mon 02 Jan 2023 11:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206817
IP address blocks: 5.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:8b:52:1f:ce:fa:ff:9c:33:ce:a7:a7:c3:48:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jan 2 11:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=977a27e11584e855dc022ca475c21f5526929f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:90:de:25:2a:50:3e:b3:79:12:e5:7f:c4:
22:04:13:d0:bf:43:6f:99:0c:4f:0e:9f:35:c9:62:
3e:50:e9:98:dc:5c:38:8e:28:0e:47:e9:24:3b:39:
9e:6b:2c:6c:f3:8d:d9:5f:46:4a:9b:5a:d8:ed:87:
81:0e:73:cf:97:03:88:a9:a4:f5:81:75:f5:90:73:
28:f5:c7:3b:71:c9:40:ff:ee:b0:39:47:b7:b7:fe:
96:2d:08:44:57:be:25:7d:de:eb:e8:68:70:e7:9b:
e0:09:df:3e:67:cc:04:ea:3c:e2:09:cc:64:2d:26:
22:e0:b0:0f:5f:e5:f5:9a:36:e1:07:1f:a9:97:43:
53:65:c9:4b:65:27:ef:8b:a9:b9:00:92:b5:82:13:
40:cd:0b:81:65:78:36:47:db:33:29:f8:41:d8:7e:
c9:c4:7f:a9:50:7b:9a:ab:82:c6:dc:55:bf:88:f0:
3b:bb:3a:63:8c:38:8b:0a:f7:91:1c:7b:8f:95:26:
30:52:60:c0:e2:c6:ab:0f:52:9a:80:fb:91:fb:81:
64:89:12:3c:75:0e:37:99:1a:32:99:7a:e9:37:9a:
6a:69:fa:21:ef:2f:cf:76:14:00:e1:af:56:c1:68:
10:65:3e:28:69:5a:c8:12:ab:6b:87:04:71:74:c9:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7A:27:E1:15:84:E8:55:DC:02:2C:A4:75:C2:1F:55:26:92:9F:75
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/l3on4RWE6FXcAiykdcIfVSaSn3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:35:ed:13:59:86:4a:02:8e:10:13:ca:1c:cb:6a:f1:33:f6:
23:98:9f:d8:be:75:cc:b5:63:04:c1:2d:a7:9d:a1:bb:08:2b:
26:0b:98:78:39:66:22:12:ec:87:10:f9:9b:8d:90:0b:b8:75:
dc:fa:3a:13:8f:36:43:10:8e:38:84:4b:cd:4d:3a:b5:ca:d8:
e7:9b:12:95:42:ed:55:fd:6d:a0:41:cd:2f:71:a6:ee:4c:7d:
30:f4:fa:1b:7c:1f:bc:ff:e2:62:0f:b2:45:99:3b:51:a1:8f:
f6:22:2f:fe:06:99:ae:e4:c9:8b:0e:97:4d:f6:4a:3a:4a:28:
4a:75:a6:01:46:1c:ab:8f:1b:41:c2:8c:a2:98:cd:4b:6b:a2:
4a:d1:6d:2f:c2:e2:8b:a7:48:e1:4d:a0:be:fa:b2:16:e9:b7:
71:3c:2c:6b:8f:de:bc:80:2a:04:a4:e3:75:21:18:a9:d9:32:
9b:fb:bc:35:18:65:85:d7:6b:ca:08:2c:b5:1f:de:ff:88:fd:
be:03:cd:98:d6:6e:ae:e0:52:b7:10:f1:cb:03:27:f6:65:76:
03:ff:93:10:83:d5:e8:18:72:91:e6:9d:11:b9:37:c4:b2:80:
68:d7:e4:1c:e0:3f:30:19:c7:c9:cd:09:e9:84:3e:91:b6:95:
99:5e:c8:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyVYtSH876/5wzzqenw0hiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjMwMTAyMTE1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzdhMjdlMTE1ODRlODU1ZGMwMjJjYTQ3NWMyMWY1NTI2OTI5Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2eQ3iUqUD6zeRLlf8QiBBPQv0Nv
mQxPDp81yWI+UOmY3Fw4jigOR+kkOzmeayxs843ZX0ZKm1rY7YeBDnPPlwOIqaT1
gXX1kHMo9cc7cclA/+6wOUe3t/6WLQhEV74lfd7r6Ghw55vgCd8+Z8wE6jziCcxk
LSYi4LAPX+X1mjbhBx+pl0NTZclLZSfvi6m5AJK1ghNAzQuBZXg2R9szKfhB2H7J
xH+pUHuaq4LG3FW/iPA7uzpjjDiLCveRHHuPlSYwUmDA4sarD1KagPuR+4FkiRI8
dQ43mRoymXrpN5pqafoh7y/PdhQA4a9WwWgQZT4oaVrIEqtrhwRxdMmvcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJd6J+EVhOhV3AIspHXCH1Umkp91MB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvbDNvbjRSV0U2RlhjQWl5a2RjSWZWU2FTbjNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYG0MA0G
CSqGSIb3DQEBCwUAA4IBAQBKNe0TWYZKAo4QE8ocy2rxM/YjmJ/YvnXMtWMEwS2n
naG7CCsmC5h4OWYiEuyHEPmbjZALuHXc+joTjzZDEI44hEvNTTq1ytjnmxKVQu1V
/W2gQc0vcabuTH0w9PobfB+8/+JiD7JFmTtRoY/2Ii/+Bpmu5MmLDpdN9ko6SihK
daYBRhyrjxtBwoyimM1La6JK0W0vwuKLp0jhTaC++rIW6bdxPCxrj968gCoEpON1
IRip2TKb+7w1GGWF12vKCCy1H97/iP2+A82Y1m6u4FK3EPHLAyf2ZXYD/5MQg9Xo
GHKR5p0RuTfEsoBo1+Qc4D8wGcfJzQnphD6RtpWZXshR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org