Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/siPcZfZxDIG-zl6w3Lpm6a8N4wY.roa
File: siPcZfZxDIG-zl6w3Lpm6a8N4wY.roa (raw, json)
Hash identifier: 60HIZy2UIIGfO9YI+dYgCqHyXD4yjszmr3vPvP2I57M=
Subject key identifier: B2:23:DC:65:F6:71:0C:81:BE:CE:5E:B0:DC:BA:66:E9:AF:0D:E3:06
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018AACC9072D29D1F2AA7E85ED7056DD2A76
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/siPcZfZxDIG-zl6w3Lpm6a8N4wY.roa
Signing time: Tue 19 Sep 2023 09:32:50 +0000
ROA not before: Tue 19 Sep 2023 09:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 194.1.132.0/22 maxlen: 22
194.1.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:c9:07:2d:29:d1:f2:aa:7e:85:ed:70:56:dd:2a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Sep 19 09:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b223dc65f6710c81bece5eb0dcba66e9af0de306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:98:bf:cd:85:3c:71:a4:98:c4:c7:85:89:
c9:0d:e3:23:fd:c3:00:03:22:71:a0:8f:af:e2:cb:
0b:4e:f4:61:b9:86:b0:f4:71:0a:7d:c3:2c:c5:51:
33:72:94:57:8e:4f:46:f0:e9:8a:c3:a9:a9:86:95:
b8:c7:78:1d:44:46:2c:44:b2:f7:80:6b:7d:c1:58:
b4:e2:ab:b2:5f:01:2a:0c:ad:f4:14:28:94:dd:c5:
0d:9d:5e:85:05:54:e6:9e:00:6b:b3:ea:b6:2f:63:
c3:35:53:d5:74:82:fb:5d:2f:71:df:89:6f:33:54:
a0:c9:9b:69:62:42:42:ef:af:60:92:40:01:20:3b:
76:4a:3f:e8:25:26:dc:35:15:a1:21:f3:7f:47:c4:
5e:d7:8a:41:e1:4f:04:f4:63:dd:92:5c:db:90:29:
97:55:eb:16:f8:1a:56:b4:ca:3d:52:35:3a:96:fc:
21:cd:55:52:49:27:1f:39:7f:6a:46:17:43:6e:2d:
be:71:17:19:3d:59:49:3a:d5:f8:3e:c8:3b:2c:c5:
5b:03:df:26:5e:2a:2e:7a:46:d7:80:37:f7:2a:dd:
56:6e:f0:e9:5b:66:54:c6:b0:f9:e6:2e:f0:18:5f:
e9:c6:81:fc:02:56:76:fe:d8:07:89:f0:b1:35:d4:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:DC:65:F6:71:0C:81:BE:CE:5E:B0:DC:BA:66:E9:AF:0D:E3:06
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/siPcZfZxDIG-zl6w3Lpm6a8N4wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.132.0-194.1.139.255
Signature Algorithm: sha256WithRSAEncryption
32:5a:c4:22:30:be:38:da:70:56:20:76:bb:5c:61:a8:33:f7:
e1:45:b2:25:6b:ec:80:9e:db:cb:57:7f:da:a4:be:3f:d0:e1:
b6:c9:7d:7b:16:45:7c:f5:32:d3:e9:ab:96:75:20:fc:3e:f0:
45:c5:92:82:8b:9a:0c:61:f9:4d:05:b2:ea:95:99:11:0b:df:
2a:d3:22:90:bd:2b:b6:9e:ff:9d:3e:1c:47:f6:c0:78:01:51:
4b:1a:13:b4:92:f0:2e:e3:8c:84:51:f2:f8:96:10:fc:e1:74:
f5:9e:df:ab:f2:7e:36:fc:2e:62:bb:a1:96:0a:6a:1c:21:0a:
32:77:8d:d5:ec:d4:5f:5c:ff:0d:3f:90:78:e4:c0:74:5f:d5:
31:51:9e:e5:aa:ae:3b:a1:d1:2c:17:a0:03:7e:ab:21:55:06:
6f:99:93:97:42:e3:8d:cb:24:40:82:2f:78:55:11:d9:9f:cd:
25:65:bf:80:ff:55:ca:7f:6e:1d:39:c1:64:f3:da:c1:b3:c8:
ad:11:07:2c:4e:04:ec:da:6c:b7:31:df:21:f8:3f:44:75:8b:
cb:87:38:f3:95:39:86:79:de:6b:61:d3:45:e8:1e:04:5e:d2:
38:37:b5:1d:b2:3f:fa:20:34:68:0b:f1:9d:10:b6:a5:db:2b:
c0:76:e0:31
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYqsyQctKdHyqn6F7XBW3Sp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0
N2U4MzkwHhcNMjMwOTE5MDkzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjIzZGM2NWY2NzEwYzgxYmVjZTVlYjBkY2JhNjZlOWFmMGRlMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpaYv82FPHGkmMTHhYnJDeMj/cMA
AyJxoI+v4ssLTvRhuYaw9HEKfcMsxVEzcpRXjk9G8OmKw6mphpW4x3gdREYsRLL3
gGt9wVi04quyXwEqDK30FCiU3cUNnV6FBVTmngBrs+q2L2PDNVPVdIL7XS9x34lv
M1SgyZtpYkJC769gkkABIDt2Sj/oJSbcNRWhIfN/R8Re14pB4U8E9GPdklzbkCmX
VesW+BpWtMo9UjU6lvwhzVVSSScfOX9qRhdDbi2+cRcZPVlJOtX4Psg7LMVbA98m
XiouekbXgDf3Kt1WbvDpW2ZUxrD55i7wGF/pxoH8AlZ2/tgHifCxNdRhUQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLIj3GX2cQyBvs5esNy6ZumvDeMGMB8GA1UdIwQY
MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct
NTA0YzhmYzIyMGVhLzEvc2lQY1pmWnhESUctemw2dzNMcG02YThONHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh
LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCAYQD
BALCAYgwDQYJKoZIhvcNAQELBQADggEBADJaxCIwvjjacFYgdrtcYagz9+FFsiVr
7ICe28tXf9qkvj/Q4bbJfXsWRXz1MtPpq5Z1IPw+8EXFkoKLmgxh+U0FsuqVmREL
3yrTIpC9K7ae/50+HEf2wHgBUUsaE7SS8C7jjIRR8viWEPzhdPWe36vyfjb8LmK7
oZYKahwhCjJ3jdXs1F9c/w0/kHjkwHRf1TFRnuWqrjuh0SwXoAN+qyFVBm+Zk5dC
443LJECCL3hVEdmfzSVlv4D/Vcp/bh05wWTz2sGzyK0RByxOBOzabLcx3yH4P0R1
i8uHOPOVOYZ53mth00XoHgRe0jg3tR2yP/ogNGgL8Z0QtqXbK8B24DE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org