Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/nVeCc-dLHV5KqHRy8YNm03Qsg7A.roa
File: nVeCc-dLHV5KqHRy8YNm03Qsg7A.roa (raw, json)
Hash identifier: 7y3SyYHVJ3/hW4iJY3mW9eakMLogfI2+cqfHMnlkaaA=
Subject key identifier: 9D:57:82:73:E7:4B:1D:5E:4A:A8:74:72:F1:83:66:D3:74:2C:83:B0
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 018573B16B475873FD64E5851EE13D53550D
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/nVeCc-dLHV5KqHRy8YNm03Qsg7A.roa
Signing time: Mon 02 Jan 2023 18:14:45 +0000
ROA not before: Mon 02 Jan 2023 18:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25215
IP address blocks: 155.140.91.0/24 maxlen: 24
155.140.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:6b:47:58:73:fd:64:e5:85:1e:e1:3d:53:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Jan 2 18:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d578273e74b1d5e4aa87472f18366d3742c83b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:cf:63:a7:f5:5d:75:94:20:4a:8a:c3:44:
80:44:47:f9:04:9a:9b:ec:aa:e0:5c:22:3c:2b:79:
56:55:22:73:47:bf:01:1e:e1:b4:b5:af:a8:57:d9:
57:d9:6b:84:1e:22:a2:14:27:b1:99:a9:b3:21:1b:
49:c3:b0:4a:d9:89:16:ea:d5:cd:cf:09:dc:8c:2e:
ac:2c:3c:4a:6f:3e:32:fe:7d:e4:bf:de:a5:37:31:
42:b5:2d:3d:45:8f:1a:3b:71:79:5f:69:5e:69:19:
e6:0b:be:75:12:89:83:ba:f3:73:5d:95:cc:42:23:
89:28:68:0c:9c:4d:49:17:d7:1c:ff:3e:c4:b7:16:
b2:7a:46:42:54:bc:7b:45:d5:42:af:3b:93:85:2a:
ca:59:1d:c7:20:80:c1:25:bc:94:7d:4f:6e:03:2e:
40:29:3f:54:34:e2:ab:fb:18:77:d7:c4:3c:7c:69:
db:f7:09:76:09:80:23:e0:53:9b:74:28:2b:e5:bf:
b5:ae:a7:97:de:c7:63:62:20:81:8d:a6:b3:26:20:
71:f4:05:7a:cf:7a:f8:2b:9a:88:13:6e:8c:eb:47:
a5:57:79:a5:a7:93:3b:22:d1:fd:77:89:1b:b1:cc:
01:98:9e:ce:a2:44:49:a0:b0:f8:44:5f:3f:d7:18:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:82:73:E7:4B:1D:5E:4A:A8:74:72:F1:83:66:D3:74:2C:83:B0
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/nVeCc-dLHV5KqHRy8YNm03Qsg7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.140.90.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ca:8f:25:a8:6d:fd:d7:fb:50:50:ba:7f:82:2c:ef:d4:93:
7d:cc:38:f2:33:ab:84:04:5a:79:87:4a:e1:54:44:dc:e1:48:
34:3d:52:33:fc:e4:c2:c1:5d:d5:b8:01:6c:a5:48:eb:34:17:
2c:e3:e3:3c:a5:47:79:8a:cf:33:42:69:7b:f0:eb:c9:45:79:
35:07:2b:22:e1:3e:56:31:c5:75:0b:c4:dd:92:05:1e:49:53:
4d:c0:cc:25:71:0f:92:b8:5a:96:ba:5a:97:40:5c:90:21:1f:
8b:69:d8:64:0a:ca:12:61:c5:bc:22:61:09:69:df:6b:9c:fb:
a0:60:6c:6f:f7:ac:2b:a0:5e:76:40:70:06:2b:b6:5f:e0:c2:
0e:31:4b:c8:1a:41:bd:36:91:6b:9e:d2:02:49:91:0a:65:ee:
17:ac:4f:b6:31:70:be:91:58:d9:fb:4f:fc:e1:56:db:56:95:
07:9d:d1:e2:2e:9e:ac:e1:d1:c0:a2:91:95:26:90:0e:e3:f5:
98:1e:a1:ab:6a:d6:d0:76:a5:4c:a8:f1:d7:94:ec:92:5a:54:
47:f4:2d:d2:09:e4:18:b5:3f:73:04:10:20:a3:3e:09:8b:18:
b2:07:13:2d:e7:b6:13:c2:07:71:7d:43:b2:35:86:c7:a7:36:
68:d5:08:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzsWtHWHP9ZOWFHuE9U1UNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmEyNWIyZmNiMTQ2ODExNGI3Mzg5MjhhYjIwZDg3NjFi
Zjg4MzEwHhcNMjMwMTAyMTgxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDU3ODI3M2U3NGIxZDVlNGFhODc0NzJmMTgzNjZkMzc0MmM4M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmzPY6f1XXWUIEqKw0SAREf5BJqb
7KrgXCI8K3lWVSJzR78BHuG0ta+oV9lX2WuEHiKiFCexmamzIRtJw7BK2YkW6tXN
zwncjC6sLDxKbz4y/n3kv96lNzFCtS09RY8aO3F5X2leaRnmC751EomDuvNzXZXM
QiOJKGgMnE1JF9cc/z7EtxayekZCVLx7RdVCrzuThSrKWR3HIIDBJbyUfU9uAy5A
KT9UNOKr+xh318Q8fGnb9wl2CYAj4FObdCgr5b+1rqeX3sdjYiCBjaazJiBx9AV6
z3r4K5qIE26M60elV3mlp5M7ItH9d4kbscwBmJ7OokRJoLD4RF8/1xiB5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ1XgnPnSx1eSqh0cvGDZtN0LIOwMB8GA1UdIwQY
MBaAFIL6JbL8sUaBFLc4koqyDYdhv4gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQt
NzY4NWM5NjcwMDE3LzEvblZlQ2MtZExIVjVLcUhSeThZTm0wM1FzZzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQtNzY4NWM5NjcwMDE3
LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBm4xaMA0G
CSqGSIb3DQEBCwUAA4IBAQBgyo8lqG391/tQULp/gizv1JN9zDjyM6uEBFp5h0rh
VETc4Ug0PVIz/OTCwV3VuAFspUjrNBcs4+M8pUd5is8zQml78OvJRXk1Bysi4T5W
McV1C8TdkgUeSVNNwMwlcQ+SuFqWulqXQFyQIR+LadhkCsoSYcW8ImEJad9rnPug
YGxv96wroF52QHAGK7Zf4MIOMUvIGkG9NpFrntICSZEKZe4XrE+2MXC+kVjZ+0/8
4VbbVpUHndHiLp6s4dHAopGVJpAO4/WYHqGratbQdqVMqPHXlOySWlRH9C3SCeQY
tT9zBBAgoz4JixiyBxMt57YTwgdxfUOyNYbHpzZo1Qi1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:28 2024 by rpki-client on console-ams.rpki-client.org