Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rwjsMYqhj6r8W-jIgL2oCy0Ukqk.roa
File: rwjsMYqhj6r8W-jIgL2oCy0Ukqk.roa (raw, json)
Hash identifier: xc42xMG+BzO7TrmJktE1e9U6MWEgS2RI8NFxSPcvnpI=
Subject key identifier: AF:08:EC:31:8A:A1:8F:AA:FC:5B:E8:C8:80:BD:A8:0B:2D:14:92:A9
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4D3106CF8446655E1FDE76B9D1E98
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rwjsMYqhj6r8W-jIgL2oCy0Ukqk.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213391
IP address blocks: 147.136.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 11:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d3:10:6c:f8:44:66:55:e1:fd:e7:6b:9d:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af08ec318aa18faafc5be8c880bda80b2d1492a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:70:48:4d:48:9e:57:99:49:59:ba:1c:35:
ae:8b:75:80:38:9d:56:28:51:16:28:f1:1c:f7:f4:
d3:1d:4d:4e:7a:89:87:eb:36:fe:1f:ab:5a:fc:e7:
cd:1b:dc:1d:f4:39:86:61:5c:8c:82:96:34:f7:81:
46:93:be:62:3e:c4:e5:64:6f:53:62:2b:1f:5b:d9:
e3:29:b8:0f:46:4c:aa:dc:0e:b6:07:63:5a:ba:fc:
2d:62:f9:1d:da:c6:d5:40:d8:73:fe:24:1c:a0:35:
4c:5f:45:a4:08:8f:28:2e:22:6a:ae:28:aa:80:f3:
b6:3b:bd:b4:3d:55:0b:30:be:60:6e:09:45:af:8b:
60:a5:a7:77:91:c0:16:42:81:a3:58:91:ed:1c:d7:
a2:fe:8f:19:6e:a5:ed:a8:ed:4c:de:9a:27:7c:9a:
1e:b1:ce:71:16:17:8f:17:b6:47:91:a4:dd:a0:77:
df:a2:d0:8a:f9:eb:3e:1a:a2:f0:12:a9:a4:8b:32:
be:17:41:d4:3f:60:5d:83:55:25:e7:ab:82:47:41:
93:52:9e:38:40:eb:db:96:dc:67:62:03:60:d2:5a:
e8:4a:fe:aa:40:7e:9b:31:6f:2e:fc:17:3f:9b:4d:
b4:23:15:d7:de:1f:18:f9:68:ba:7f:a4:e4:25:da:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:EC:31:8A:A1:8F:AA:FC:5B:E8:C8:80:BD:A8:0B:2D:14:92:A9
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rwjsMYqhj6r8W-jIgL2oCy0Ukqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.88.0/22
Signature Algorithm: sha256WithRSAEncryption
58:e0:81:07:53:6e:e1:34:73:1d:a8:46:9b:dd:f4:72:56:ac:
37:e1:9e:72:18:21:ae:e0:31:8e:40:4b:7e:27:76:c6:d6:06:
f2:b6:86:ad:23:46:f2:2f:49:8d:d8:12:83:13:46:50:5a:c3:
61:b2:c4:1c:50:34:fb:38:f4:ec:a0:c3:3d:b9:7a:8f:d4:b8:
38:b3:c9:44:cc:43:70:77:2e:47:5b:e1:72:f6:22:0a:6c:6f:
e9:07:29:60:36:67:04:ff:5e:9e:bb:47:d4:fb:75:53:74:91:
7a:ef:c6:b3:f1:23:eb:b1:97:72:f1:4f:8a:c2:e1:36:76:e5:
78:aa:cb:64:33:19:de:01:c7:64:68:19:bd:df:fc:46:54:16:
e5:54:1b:26:c3:06:a2:0a:5b:da:65:d8:88:a5:d6:96:5d:08:
be:94:20:5e:40:96:bc:09:d2:5c:28:fc:15:c7:a9:3d:e6:42:
a9:ca:f4:42:65:12:1f:f0:82:bd:e4:20:dd:73:37:ea:f7:e0:
16:07:8f:13:0e:5a:28:0b:74:8b:69:dd:86:c2:22:01:d9:a7:
b5:a1:52:52:82:18:93:d5:c6:f7:85:a9:ea:3a:3c:ac:d0:1e:
21:29:75:e7:f3:53:9b:80:17:bf:92:61:a0:91:1f:14:b4:17:
81:38:48:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1NMQbPhEZlXh/edrnR6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjMwMTAxMTkzNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjA4ZWMzMThhYTE4ZmFhZmM1YmU4Yzg4MGJkYTgwYjJkMTQ5MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzlwSE1InleZSVm6HDWui3WAOJ1W
KFEWKPEc9/TTHU1OeomH6zb+H6ta/OfNG9wd9DmGYVyMgpY094FGk75iPsTlZG9T
YisfW9njKbgPRkyq3A62B2NauvwtYvkd2sbVQNhz/iQcoDVMX0WkCI8oLiJqriiq
gPO2O720PVULML5gbglFr4tgpad3kcAWQoGjWJHtHNei/o8ZbqXtqO1M3ponfJoe
sc5xFhePF7ZHkaTdoHffotCK+es+GqLwEqmkizK+F0HUP2Bdg1Ul56uCR0GTUp44
QOvbltxnYgNg0lroSv6qQH6bMW8u/Bc/m020IxXX3h8Y+Wi6f6TkJdqUVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8I7DGKoY+q/FvoyIC9qAstFJKpMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvcndqc01ZcWhqNnI4Vy1qSWdMMm9DeTBVa3FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk4hYMA0G
CSqGSIb3DQEBCwUAA4IBAQBY4IEHU27hNHMdqEab3fRyVqw34Z5yGCGu4DGOQEt+
J3bG1gbytoatI0byL0mN2BKDE0ZQWsNhssQcUDT7OPTsoMM9uXqP1Lg4s8lEzENw
dy5HW+Fy9iIKbG/pBylgNmcE/16eu0fU+3VTdJF678az8SPrsZdy8U+KwuE2duV4
qstkMxneAcdkaBm93/xGVBblVBsmwwaiClvaZdiIpdaWXQi+lCBeQJa8CdJcKPwV
x6k95kKpyvRCZRIf8IK95CDdczfq9+AWB48TDlooC3SLad2GwiIB2ae1oVJSghiT
1cb3hanqOjys0B4hKXXn81ObgBe/kmGgkR8UtBeBOEjX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org