Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/PWDOWAORXKIKqHL1tqrqJKKAKkQ.roa
File: PWDOWAORXKIKqHL1tqrqJKKAKkQ.roa (raw, json)
Hash identifier: rb1t6al1uvWxjIliGH+GpOMwJNhQG3lr5yBLcoDkOTE=
Subject key identifier: 3D:60:CE:58:03:91:5C:A2:0A:A8:72:F5:B6:AA:EA:24:A2:80:2A:44
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 01877A49FB51AA73CC8EB483A8DD7E672A2A
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/PWDOWAORXKIKqHL1tqrqJKKAKkQ.roa
Signing time: Thu 13 Apr 2023 11:04:41 +0000
ROA not before: Thu 13 Apr 2023 11:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209976
IP address blocks: 217.28.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:49:fb:51:aa:73:cc:8e:b4:83:a8:dd:7e:67:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Apr 13 11:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d60ce5803915ca20aa872f5b6aaea24a2802a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:e5:a1:3d:5f:12:f3:05:30:b2:7a:1e:e6:
8f:92:a2:9b:c6:5c:44:87:60:27:62:37:22:7d:15:
db:d1:3e:ad:36:49:a8:2c:05:33:7e:07:26:b6:f1:
0b:93:ff:be:8f:9e:68:3e:3b:6d:19:0a:53:25:96:
ba:8f:1f:ad:3b:7a:34:e0:96:ef:aa:b2:5f:2a:56:
18:7e:8a:32:9d:c3:66:a9:96:a5:c0:26:af:b0:06:
4e:bb:09:0b:91:ee:85:51:1f:78:5d:5c:50:f4:a9:
2b:7b:37:6b:b6:c1:f3:ac:65:84:d4:8c:04:84:1a:
cb:ee:07:a6:3b:4d:9f:60:e4:c5:15:c5:b2:c4:e2:
06:d8:46:46:53:1e:c5:19:59:93:89:f7:2b:ea:9f:
66:b5:2f:c2:da:fc:5d:24:d0:dd:72:59:a4:77:5c:
75:da:83:a7:92:75:ac:b5:de:87:1b:b9:a6:28:fb:
ca:3b:8a:b3:aa:f9:dd:4a:1f:ad:3c:84:e9:6b:69:
cd:f4:77:42:be:50:90:bc:27:70:10:24:df:94:f4:
fe:76:7f:9f:02:c1:3d:f8:3b:df:7d:1b:77:2d:72:
9f:dc:59:6f:d7:ab:69:15:08:91:26:ef:a0:01:41:
da:13:4b:87:ef:c4:ad:bc:f7:59:4c:10:ac:ca:92:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:CE:58:03:91:5C:A2:0A:A8:72:F5:B6:AA:EA:24:A2:80:2A:44
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/PWDOWAORXKIKqHL1tqrqJKKAKkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d5:52:e2:90:16:d6:2f:59:62:5e:8d:a6:40:6e:0b:af:db:
4b:29:d6:12:30:5b:84:8f:ef:60:22:d8:ae:62:85:6e:c8:e6:
da:69:e0:a7:3e:a1:31:16:f6:ec:08:c5:f9:cf:c7:7b:fb:08:
b5:6f:de:19:20:d5:8a:68:58:0f:0b:ea:0d:44:03:37:01:8d:
63:c4:3f:49:96:40:ec:10:b0:03:a9:dd:aa:c3:19:f1:64:a8:
eb:72:05:fd:b6:47:c0:4f:b9:52:3a:46:41:3c:51:6d:4b:80:
d3:dd:70:2e:e8:9f:a2:32:b9:23:3a:bb:0c:66:0a:9e:53:f8:
c3:7c:16:00:09:c1:2e:f1:e0:b3:d3:95:0b:56:57:2f:77:60:
fa:d5:0f:d8:5a:b1:18:9f:5f:bc:73:8f:cf:3f:d7:9e:81:6d:
8f:f8:ef:64:e3:6c:87:e2:2b:75:fa:54:cb:bd:d9:9e:40:de:
45:69:2d:72:a4:f8:0e:db:83:75:ac:57:cc:60:fe:28:c4:1b:
90:94:1f:72:2c:59:f0:65:02:5e:d2:47:89:9b:31:ab:84:0b:
ff:d7:bd:56:4a:b1:66:28:c9:c9:7b:44:5b:67:f5:d7:76:2f:
95:b3:e4:de:e0:3b:d7:7d:aa:96:98:d6:0f:bb:09:26:e1:c3:
79:86:9b:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6SftRqnPMjrSDqN1+ZyoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTgyYmUyMDBmMmVkOWJlNDBmYzk4M2Q5NGQ5YzcyNjM1
MGE5ZDkwHhcNMjMwNDEzMTEwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDYwY2U1ODAzOTE1Y2EyMGFhODcyZjViNmFhZWEyNGEyODAyYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjurloT1fEvMFMLJ6HuaPkqKbxlxE
h2AnYjcifRXb0T6tNkmoLAUzfgcmtvELk/++j55oPjttGQpTJZa6jx+tO3o04Jbv
qrJfKlYYfooyncNmqZalwCavsAZOuwkLke6FUR94XVxQ9KkrezdrtsHzrGWE1IwE
hBrL7gemO02fYOTFFcWyxOIG2EZGUx7FGVmTifcr6p9mtS/C2vxdJNDdclmkd1x1
2oOnknWstd6HG7mmKPvKO4qzqvndSh+tPITpa2nN9HdCvlCQvCdwECTflPT+dn+f
AsE9+DvffRt3LXKf3Flv16tpFQiRJu+gAUHaE0uH78StvPdZTBCsypJyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1gzlgDkVyiCqhy9baq6iSigCpEMB8GA1UdIwQY
MBaAFBWYK+IA8u2b5A/Jg9lNnHJjUKnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2Qt
Y2E3ZTZjM2FlOGNlLzEvUFdET1dBT1JYS0lLcUhMMXRxcnFKS0tBS2tRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2QtY2E3ZTZjM2FlOGNl
LzEvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RyKMA0G
CSqGSIb3DQEBCwUAA4IBAQB/1VLikBbWL1liXo2mQG4Lr9tLKdYSMFuEj+9gItiu
YoVuyObaaeCnPqExFvbsCMX5z8d7+wi1b94ZINWKaFgPC+oNRAM3AY1jxD9JlkDs
ELADqd2qwxnxZKjrcgX9tkfAT7lSOkZBPFFtS4DT3XAu6J+iMrkjOrsMZgqeU/jD
fBYACcEu8eCz05ULVlcvd2D61Q/YWrEYn1+8c4/PP9eegW2P+O9k42yH4it1+lTL
vdmeQN5FaS1ypPgO24N1rFfMYP4oxBuQlB9yLFnwZQJe0keJmzGrhAv/171WSrFm
KMnJe0RbZ/XXdi+Vs+Te4DvXfaqWmNYPuwkm4cN5hpsk
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:44 2024 by rpki-client on console-ams.rpki-client.org