Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/1-wiieFmN0zUkviWf54Dt6SB1Ktw.roa
File: 1-wiieFmN0zUkviWf54Dt6SB1Ktw.roa (raw, json)
Hash identifier: MOR8Q10i0HvHSlexmzoMJICE12jEMXpa6uNF3sGHyYk=
Subject key identifier: FB:08:A2:78:59:8D:D3:35:24:BE:25:9F:E7:80:ED:E9:20:75:2A:DC
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01856C6EF9F15115E7A45BC8B7452F4E85B0
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/1-wiieFmN0zUkviWf54Dt6SB1Ktw.roa
Signing time: Sun 01 Jan 2023 08:24:50 +0000
ROA not before: Sun 01 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201921
IP address blocks: 5.63.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f9:f1:51:15:e7:a4:5b:c8:b7:45:2f:4e:85:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb08a278598dd33524be259fe780ede920752adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:d4:9f:91:84:f5:7a:84:32:48:ab:1e:f0:
90:b0:01:d4:5c:98:e0:d2:9f:64:46:d5:5f:a4:22:
b0:b2:8b:b2:61:22:67:f5:3f:ee:8d:0f:98:48:8a:
88:1b:2d:60:a1:e3:52:4e:77:3a:ba:5a:ce:33:a4:
d5:e2:a4:5a:84:6d:a0:a3:06:e7:0b:d2:b9:29:01:
f2:3b:78:b4:82:48:ef:0f:1a:c2:59:19:29:e5:d3:
b7:d1:ea:de:ed:f3:86:5a:a5:3b:48:5a:bb:92:b8:
b0:38:98:6c:59:4f:fb:57:8d:07:2f:d1:34:41:f3:
0e:ad:e7:33:ff:81:7e:a1:bc:2e:79:4f:3b:94:37:
ed:ad:d7:fc:e9:6e:45:b8:57:f3:11:f8:0c:31:54:
6a:5d:f8:4d:16:16:12:de:68:7e:d1:91:89:8d:d3:
97:3b:5a:a2:69:ac:2d:7e:59:12:2b:a1:3a:32:71:
77:ce:3e:90:9c:b1:49:d8:50:29:0e:e3:5e:1b:5f:
d6:56:0c:00:31:b4:31:02:87:53:03:1a:60:30:3c:
d8:d3:73:cc:2d:da:10:05:bc:05:e3:ac:db:88:5e:
bd:d2:1a:d9:0b:8b:ff:82:41:1d:e0:19:18:e3:b7:
f6:8c:1c:26:e4:b7:91:e7:e8:fc:85:36:bc:72:65:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:A2:78:59:8D:D3:35:24:BE:25:9F:E7:80:ED:E9:20:75:2A:DC
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/1-wiieFmN0zUkviWf54Dt6SB1Ktw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5d:4c:4d:76:b2:0e:f2:72:58:d3:66:d2:22:71:71:7f:bb:
c3:9d:dc:a1:85:8b:b0:f7:57:23:83:2a:db:32:4e:db:49:6c:
30:f8:1a:b8:0c:e5:5a:1f:2b:ca:f0:06:13:0b:f2:1b:a3:b5:
a8:88:9a:0a:4b:28:8b:4e:dd:dc:de:af:49:7f:55:b7:d3:47:
e9:02:5c:6a:70:65:92:67:e2:13:e7:2b:25:82:e5:f3:05:ab:
04:2e:95:db:36:b1:37:88:83:1c:fc:e9:24:9b:89:c3:d6:b2:
96:64:34:32:50:4d:fb:a8:f9:58:ae:c9:d0:a2:ff:ac:a1:a3:
55:4b:39:46:92:a5:07:3a:7c:5e:e6:03:b8:55:5b:1b:de:2a:
af:a0:82:81:b1:80:5f:d5:5e:4b:1b:c7:fe:71:06:24:8c:87:
1a:b4:6b:8a:8f:4e:65:1a:26:4a:e9:1f:af:d7:ce:37:f1:74:
54:7e:06:8e:18:60:b6:0a:66:ab:67:3d:ee:93:7f:49:19:d3:
ee:5e:ec:3a:48:80:2c:aa:f8:fd:3b:ff:3e:b1:20:f0:92:89:
ff:2e:6c:f5:34:60:c9:73:ac:c1:d4:31:1e:29:3d:71:ed:b1:
0c:bd:18:1a:91:6a:44:54:13:a0:53:19:14:67:7e:ae:b1:d0:
e1:65:6a:59
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVsbvnxURXnpFvIt0UvToWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi
Y2UzMTYwHhcNMjMwMTAxMDgyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjA4YTI3ODU5OGRkMzM1MjRiZTI1OWZlNzgwZWRlOTIwNzUyYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcvUn5GE9XqEMkirHvCQsAHUXJjg
0p9kRtVfpCKwsouyYSJn9T/ujQ+YSIqIGy1goeNSTnc6ulrOM6TV4qRahG2gowbn
C9K5KQHyO3i0gkjvDxrCWRkp5dO30ere7fOGWqU7SFq7kriwOJhsWU/7V40HL9E0
QfMOrecz/4F+obwueU87lDftrdf86W5FuFfzEfgMMVRqXfhNFhYS3mh+0ZGJjdOX
O1qiaawtflkSK6E6MnF3zj6QnLFJ2FApDuNeG1/WVgwAMbQxAodTAxpgMDzY03PM
LdoQBbwF46zbiF690hrZC4v/gkEd4BkY47f2jBwm5LeR5+j8hTa8cmVM3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsIonhZjdM1JL4ln+eA7ekgdSrcMB8GA1UdIwQY
MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct
YTRlOTkxYjBmMTQ0LzEvMS13aWllRm1OMHpVa3ZpV2Y1NER0NlNCMUt0dy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODEvYjIwNjRiLWJlMDktNDNkOS1iMDg3LWE0ZTk5MWIwZjE0
NC8xL0FwTVBqR2lNQk5GME02SzV4eVNieGlXODR4WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAU/oDAN
BgkqhkiG9w0BAQsFAAOCAQEADF1MTXayDvJyWNNm0iJxcX+7w53coYWLsPdXI4Mq
2zJO20lsMPgauAzlWh8ryvAGEwvyG6O1qIiaCksoi07d3N6vSX9Vt9NH6QJcanBl
kmfiE+crJYLl8wWrBC6V2zaxN4iDHPzpJJuJw9aylmQ0MlBN+6j5WK7J0KL/rKGj
VUs5RpKlBzp8XuYDuFVbG94qr6CCgbGAX9VeSxvH/nEGJIyHGrRrio9OZRomSukf
r9fON/F0VH4Gjhhgtgpmq2c97pN/SRnT7l7sOkiALKr4/Tv/PrEg8JKJ/y5s9TRg
yXOswdQxHik9ce2xDL0YGpFqRFQToFMZFGd+rrHQ4WVqWQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:29 2024 by rpki-client on console-fra.rpki-client.org