Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/siIFYQ2xYD-dNJ7EBLA3ULTHWbQ.roa
File: siIFYQ2xYD-dNJ7EBLA3ULTHWbQ.roa (raw, json)
Hash identifier: 7UpeXAMUqcNyeN9Xq6vfSZ2J2AMVl8+T6EPWzCSjqx4=
Subject key identifier: B2:22:05:61:0D:B1:60:3F:9D:34:9E:C4:04:B0:37:50:B4:C7:59:B4
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 01856CC16A835A82B8A140B32C9BD48B461C
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/siIFYQ2xYD-dNJ7EBLA3ULTHWbQ.roa
Signing time: Sun 01 Jan 2023 09:54:53 +0000
ROA not before: Sun 01 Jan 2023 09:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50392
IP address blocks: 176.120.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:6a:83:5a:82:b8:a1:40:b3:2c:9b:d4:8b:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 09:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22205610db1603f9d349ec404b03750b4c759b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:02:af:7b:20:d2:0e:12:d2:b1:7d:38:20:
67:a5:59:20:69:81:6d:1d:a4:1c:92:f1:ec:36:9e:
05:a3:01:1c:81:7a:99:96:f6:ad:16:f9:e3:60:92:
91:7b:79:96:1b:28:4f:f8:08:56:eb:b6:d9:9b:7c:
8e:eb:92:88:ad:0c:cf:1b:ef:62:9a:7a:41:e2:45:
f1:f5:59:f4:f1:33:70:95:c0:f5:09:01:15:4d:95:
74:6d:ef:7f:72:a8:a1:be:08:8a:37:b3:5d:41:fd:
79:f5:ec:c9:2a:da:d3:f6:b0:1e:14:83:fb:62:30:
04:20:30:3a:9a:7b:99:9d:51:0c:0e:05:28:5b:b5:
31:96:d2:38:09:ee:10:75:d1:bc:32:54:90:80:67:
47:c7:60:4b:24:5c:8d:14:bc:ec:a8:cb:5b:b3:3e:
79:32:a3:58:c7:ae:fc:bd:bc:a2:e4:b4:d1:f4:67:
56:e6:86:e0:ae:eb:de:c2:ac:67:10:4d:5b:2b:cc:
32:b0:e8:bf:7c:33:f8:f9:44:32:aa:6c:4f:28:33:
f4:a0:48:e3:d6:29:2a:ef:56:1e:f8:0f:50:07:23:
17:0e:50:cb:9c:36:95:a8:79:c9:17:8a:d5:25:a9:
4c:3a:78:6a:40:e5:c9:d0:99:c5:89:4a:c1:5e:71:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:05:61:0D:B1:60:3F:9D:34:9E:C4:04:B0:37:50:B4:C7:59:B4
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/siIFYQ2xYD-dNJ7EBLA3ULTHWbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9c:c0:3b:56:85:c5:f7:35:11:46:6c:54:24:a0:69:b9:6a:
1a:c4:48:7d:5c:69:dd:2d:fb:0c:b9:18:40:df:61:fe:4e:bc:
8b:d7:b5:1b:ef:f3:54:b4:a4:b9:69:64:2b:34:1c:73:eb:f6:
36:ab:fe:2c:0a:70:49:04:cb:01:90:0c:8c:a4:87:9d:74:6d:
e4:e5:b1:99:d2:52:5e:e2:ab:86:93:6a:a3:8a:80:6b:90:c5:
3d:0f:f4:c8:7a:a1:72:20:8f:75:91:06:ba:f1:8c:69:c0:48:
06:9a:83:b0:b8:5b:c2:97:01:c3:0e:bd:26:58:78:bd:f0:f7:
a0:f3:ff:9a:6c:4f:b9:06:9a:50:87:3d:66:2f:01:53:24:96:
57:ae:57:6b:ed:d6:aa:7e:9d:d2:66:e9:f0:d9:ba:dd:0c:c5:
40:d8:27:cf:b0:dc:4a:01:9e:bc:91:ad:39:24:37:53:56:58:
64:07:f4:cf:9d:4e:43:ce:32:83:31:66:1a:12:65:eb:6a:50:
53:4b:42:bb:db:5f:70:76:fd:d0:73:5b:ae:94:18:9c:ec:e0:
e3:5b:19:ed:9c:93:60:fb:e4:53:c0:34:41:7f:46:68:dd:59:
43:9d:65:f1:f1:2b:39:0c:39:68:d3:9a:b9:b3:ff:bb:e2:52:
fc:0e:fb:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswWqDWoK4oUCzLJvUi0YcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmU4MjdhNTgwZGU2MTUzOGRkZWZhMjgyMzk0NjhjNGU5
MDFiNDAwHhcNMjMwMTAxMDk1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjIyMDU2MTBkYjE2MDNmOWQzNDllYzQwNGIwMzc1MGI0Yzc1OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh0Cr3sg0g4S0rF9OCBnpVkgaYFt
HaQckvHsNp4FowEcgXqZlvatFvnjYJKRe3mWGyhP+AhW67bZm3yO65KIrQzPG+9i
mnpB4kXx9Vn08TNwlcD1CQEVTZV0be9/cqihvgiKN7NdQf159ezJKtrT9rAeFIP7
YjAEIDA6mnuZnVEMDgUoW7UxltI4Ce4QddG8MlSQgGdHx2BLJFyNFLzsqMtbsz55
MqNYx678vbyi5LTR9GdW5obgruvewqxnEE1bK8wysOi/fDP4+UQyqmxPKDP0oEjj
1ikq71Ye+A9QByMXDlDLnDaVqHnJF4rVJalMOnhqQOXJ0JnFiUrBXnHS7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIiBWENsWA/nTSexASwN1C0x1m0MB8GA1UdIwQY
MBaAFBe+gnpYDeYVON3vooI5RoxOkBtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTct
YTFkOWQwZjg4NjI5LzEvc2lJRllRMnhZRC1kTko3RUJMQTNVTFRIV2JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5
LzEvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHhlMA0G
CSqGSIb3DQEBCwUAA4IBAQBLnMA7VoXF9zURRmxUJKBpuWoaxEh9XGndLfsMuRhA
32H+TryL17Ub7/NUtKS5aWQrNBxz6/Y2q/4sCnBJBMsBkAyMpIeddG3k5bGZ0lJe
4quGk2qjioBrkMU9D/TIeqFyII91kQa68YxpwEgGmoOwuFvClwHDDr0mWHi98Peg
8/+abE+5BppQhz1mLwFTJJZXrldr7daqfp3SZunw2brdDMVA2CfPsNxKAZ68ka05
JDdTVlhkB/TPnU5DzjKDMWYaEmXralBTS0K7219wdv3Qc1uulBic7ODjWxntnJNg
++RTwDRBf0Zo3VlDnWXx8Ss5DDlo05q5s/+74lL8Dvv1
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:25 2024 by rpki-client on console-fra.rpki-client.org