Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/APDmRBYWogDnBfLyww5aYVSrE18.roa
File: APDmRBYWogDnBfLyww5aYVSrE18.roa (raw, json)
Hash identifier: NbbqQQlEQa9YloonZ+larqNt1qX6W1oixcZ8U1TUvBc=
Subject key identifier: 00:F0:E6:44:16:16:A2:00:E7:05:F2:F2:C3:0E:5A:61:54:AB:13:5F
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01857042A499FC9BFD320FD9717BF86FC692
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/APDmRBYWogDnBfLyww5aYVSrE18.roa
Signing time: Mon 02 Jan 2023 02:14:53 +0000
ROA not before: Mon 02 Jan 2023 02:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39205
IP address blocks: 84.247.127.0/24 maxlen: 24
188.240.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a4:99:fc:9b:fd:32:0f:d9:71:7b:f8:6f:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 2 02:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00f0e6441616a200e705f2f2c30e5a6154ab135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:a2:88:3d:45:12:a2:59:57:10:d3:b5:32:
c3:ce:d6:2b:ed:80:87:b9:b4:ba:a6:24:7e:65:f2:
b3:0c:62:de:a6:6d:83:f6:27:f2:5f:ac:23:48:a8:
4f:21:1f:8f:97:2e:64:ee:2e:31:c8:0f:b1:35:60:
13:a4:0b:1c:a7:da:e1:75:70:a7:2c:c8:f7:bb:c4:
3e:e4:41:77:04:3a:01:02:98:a6:6c:b8:e0:f7:b3:
df:f5:0d:b3:19:83:ba:bb:20:0d:c8:c6:68:cb:c0:
50:21:58:52:08:49:d6:e8:02:90:d9:91:77:af:d1:
a8:75:39:65:39:2b:a1:60:34:53:f8:f3:25:bf:50:
be:0a:91:ed:52:21:a1:e1:4e:17:33:52:fb:1f:a1:
6d:78:76:46:33:7a:47:9b:c1:6f:34:0f:9e:62:82:
03:e5:44:73:db:65:2c:ce:94:68:35:6e:3b:0f:c4:
1d:3e:28:5a:23:70:15:19:32:d0:e4:0e:8a:6d:60:
37:de:e8:27:2c:4d:ae:03:81:de:46:e3:97:61:cd:
44:6b:ef:72:d4:0d:19:21:64:24:d9:61:7f:bd:0a:
ec:72:65:93:d4:71:0a:f2:8f:cc:7a:b9:88:57:d6:
ab:f8:e8:f0:b5:5c:dc:a9:dc:7a:45:0c:65:63:b9:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:E6:44:16:16:A2:00:E7:05:F2:F2:C3:0E:5A:61:54:AB:13:5F
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/APDmRBYWogDnBfLyww5aYVSrE18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.127.0/24
188.240.8.0/23
Signature Algorithm: sha256WithRSAEncryption
04:dd:06:a9:75:c3:74:12:f3:91:77:6f:1a:be:86:8d:d5:a8:
47:ac:65:3e:d0:76:62:1f:e6:66:f9:58:40:30:24:b0:b0:e2:
1e:29:82:11:4c:fe:f8:10:17:70:0d:9f:64:32:9b:ac:ba:e0:
12:4b:3d:b4:79:cd:13:50:e7:e3:54:de:6c:61:14:00:83:ce:
ee:76:15:cc:6a:37:4a:4c:cd:3c:ac:da:e4:bb:75:d2:b4:d3:
19:81:97:b0:92:50:b3:c6:06:4c:a6:78:56:bf:81:ba:f6:2f:
4e:f9:fb:13:81:ec:f8:50:05:c8:b3:00:c4:99:c8:ce:4d:f7:
b3:c3:dd:10:af:35:04:4d:e5:d6:b3:3f:53:c0:17:7f:be:df:
84:15:08:47:83:09:f6:5c:2a:31:6b:9c:07:17:ae:f4:12:d1:
f3:bc:bb:e5:13:28:29:66:2e:76:c0:a3:0a:ef:30:97:6f:68:
05:1e:6e:a6:02:97:cc:ad:a6:78:4d:3d:d1:64:ec:23:e3:73:
df:4b:9b:ea:3c:92:17:eb:14:3b:c7:0d:97:a2:5c:e8:6b:7f:
a4:7f:78:f2:5e:9a:9f:21:ea:d3:ce:0e:38:71:a1:6e:3a:64:
dc:54:4e:31:7a:08:9a:57:8c:41:d5:3c:13:1c:ca:22:06:26:
fd:ee:9e:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwQqSZ/Jv9Mg/ZcXv4b8aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjMwMTAyMDIxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGYwZTY0NDE2MTZhMjAwZTcwNWYyZjJjMzBlNWE2MTU0YWIxMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxaiiD1FEqJZVxDTtTLDztYr7YCH
ubS6piR+ZfKzDGLepm2D9ifyX6wjSKhPIR+Ply5k7i4xyA+xNWATpAscp9rhdXCn
LMj3u8Q+5EF3BDoBApimbLjg97Pf9Q2zGYO6uyANyMZoy8BQIVhSCEnW6AKQ2ZF3
r9GodTllOSuhYDRT+PMlv1C+CpHtUiGh4U4XM1L7H6FteHZGM3pHm8FvNA+eYoID
5URz22UszpRoNW47D8QdPihaI3AVGTLQ5A6KbWA33ugnLE2uA4HeRuOXYc1Ea+9y
1A0ZIWQk2WF/vQrscmWT1HEK8o/MermIV9ar+OjwtVzcqdx6RQxlY7n1oQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFADw5kQWFqIA5wXy8sMOWmFUqxNfMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvQVBEbVJCWVdvZ0RuQmZMeXd3NWFZVlNyRTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVPd/AwQB
vPAIMA0GCSqGSIb3DQEBCwUAA4IBAQAE3QapdcN0EvORd28avoaN1ahHrGU+0HZi
H+Zm+VhAMCSwsOIeKYIRTP74EBdwDZ9kMpusuuASSz20ec0TUOfjVN5sYRQAg87u
dhXMajdKTM08rNrku3XStNMZgZewklCzxgZMpnhWv4G69i9O+fsTgez4UAXIswDE
mcjOTfezw90QrzUETeXWsz9TwBd/vt+EFQhHgwn2XCoxa5wHF670EtHzvLvlEygp
Zi52wKMK7zCXb2gFHm6mApfMraZ4TT3RZOwj43PfS5vqPJIX6xQ7xw2Xolzoa3+k
f3jyXpqfIerTzg44caFuOmTcVE4xegiaV4xB1TwTHMoiBib97p7H
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org