Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1-jepeXPfFpJsd4j3QbT5fOuLdWo.roa
File: 1-jepeXPfFpJsd4j3QbT5fOuLdWo.roa (raw, json)
Hash identifier: 5jGmstfracVNHYiGvedcS4s8ekJcb9Pu6VHJ/it5Clg=
Subject key identifier: FA:37:A9:79:73:DF:16:92:6C:77:88:F7:41:B4:F9:7C:EB:8B:75:6A
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570306C06673B4EACE400E97245F3F826
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1-jepeXPfFpJsd4j3QbT5fOuLdWo.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51660
IP address blocks: 84.1.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 12:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6c:06:67:3b:4e:ac:e4:00:e9:72:45:f3:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa37a97973df16926c7788f741b4f97ceb8b756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:af:91:8b:3e:c0:84:a6:bc:e8:89:eb:61:
ba:fc:d1:cc:b6:b4:57:4e:a0:cd:c8:55:d1:75:44:
c2:7b:74:d3:93:43:82:0d:23:45:0e:45:76:d1:b2:
be:1b:73:89:9d:f2:23:d0:69:81:07:68:65:03:31:
3c:74:58:38:3f:23:94:fa:e3:4f:c1:a2:a1:8f:2a:
d8:b8:54:58:69:ef:c2:fe:17:2b:d7:51:08:ab:6f:
5f:11:52:79:d6:07:17:6d:b9:2b:ca:1e:18:66:56:
09:87:5c:b4:5b:28:d2:5f:33:9f:91:e1:0b:4b:e4:
41:70:0e:e6:7a:7d:bb:5a:06:ce:c8:f3:42:70:55:
39:c7:6b:e7:9f:a7:5d:1f:7c:8e:f3:9f:90:90:75:
ce:b9:3d:33:c2:83:6a:d6:79:c1:98:9d:90:e3:3b:
f3:5a:42:85:93:2b:f0:d0:18:8d:d1:18:d6:47:d9:
27:32:2f:42:09:5c:8f:dc:75:8a:13:06:fd:3c:cb:
8b:2e:71:b8:1f:b0:c2:70:a7:f5:bb:90:16:c4:17:
93:b5:cf:18:72:85:aa:28:d8:e1:52:e8:b8:54:f0:
21:10:51:ba:ec:6c:95:03:b8:e4:c8:87:59:a4:c0:
0e:7c:9b:e5:af:01:8c:f9:fc:bc:ce:8b:bc:05:16:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:A9:79:73:DF:16:92:6C:77:88:F7:41:B4:F9:7C:EB:8B:75:6A
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1-jepeXPfFpJsd4j3QbT5fOuLdWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
40:10:6e:1d:40:8d:e7:e7:67:72:7a:fc:3a:8f:b9:64:7d:38:
c8:84:1e:8e:85:38:eb:1f:37:33:19:5f:bd:07:64:c4:ba:4b:
eb:25:a4:02:36:f7:01:51:a9:60:ba:cc:0b:d3:4d:c9:07:d9:
fa:ab:ad:bd:5d:e3:ac:0a:43:a4:21:af:95:c3:d5:43:2c:38:
ef:34:9f:53:84:f6:9f:1f:2e:13:d5:55:2d:43:ab:ba:71:0b:
39:7c:19:54:0e:73:04:51:45:3f:19:39:31:4c:0f:f6:e4:e0:
76:d7:de:7f:8f:60:52:d1:1b:29:07:a1:b2:5e:04:13:1c:7e:
a7:52:ce:4e:a0:93:8e:12:2b:8e:3b:1b:1e:6a:79:88:f8:c9:
cb:fa:9b:e1:62:8d:91:a1:90:7c:8d:8a:d2:09:8e:1f:3c:b7:
54:52:94:c8:a0:14:8f:80:14:20:df:b7:f8:16:c5:6c:90:8f:
43:fa:4a:de:cb:92:1d:59:61:47:91:da:4d:3b:7c:16:6e:65:
85:49:00:24:6a:9d:5e:f3:e6:af:b5:f5:58:2c:01:72:20:5e:
b7:cc:96:52:81:3b:b7:4a:d8:a0:0f:fc:f5:e4:5f:11:a6:80:
a6:36:8f:74:c9:24:2b:38:08:3a:5e:c9:24:9b:ab:80:03:83:
3f:7e:f6:34
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwMGwGZztOrOQA6XJF8/gmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMwMTAyMDE1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTM3YTk3OTczZGYxNjkyNmM3Nzg4Zjc0MWI0Zjk3Y2ViOGI3NTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUavkYs+wISmvOiJ62G6/NHMtrRX
TqDNyFXRdUTCe3TTk0OCDSNFDkV20bK+G3OJnfIj0GmBB2hlAzE8dFg4PyOU+uNP
waKhjyrYuFRYae/C/hcr11EIq29fEVJ51gcXbbkryh4YZlYJh1y0WyjSXzOfkeEL
S+RBcA7men27WgbOyPNCcFU5x2vnn6ddH3yO85+QkHXOuT0zwoNq1nnBmJ2Q4zvz
WkKFkyvw0BiN0RjWR9knMi9CCVyP3HWKEwb9PMuLLnG4H7DCcKf1u5AWxBeTtc8Y
coWqKNjhUui4VPAhEFG67GyVA7jkyIdZpMAOfJvlrwGM+fy8zou8BRZbtQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPo3qXlz3xaSbHeI90G0+Xzri3VqMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvMS1qZXBlWFBmRnBKc2Q0ajNRYlQ1Zk91TGRXby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGQvZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMw
Mi8xLzhDMnNZRjlHV1hHTUNoWGg5ekxMMVBTS3Jucy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQBLDAN
BgkqhkiG9w0BAQsFAAOCAQEAQBBuHUCN5+dncnr8Oo+5ZH04yIQejoU46x83Mxlf
vQdkxLpL6yWkAjb3AVGpYLrMC9NNyQfZ+qutvV3jrApDpCGvlcPVQyw47zSfU4T2
nx8uE9VVLUOrunELOXwZVA5zBFFFPxk5MUwP9uTgdtfef49gUtEbKQehsl4EExx+
p1LOTqCTjhIrjjsbHmp5iPjJy/qb4WKNkaGQfI2K0gmOHzy3VFKUyKAUj4AUIN+3
+BbFbJCPQ/pK3suSHVlhR5HaTTt8Fm5lhUkAJGqdXvPmr7X1WCwBciBet8yWUoE7
t0rYoA/89eRfEaaApjaPdMkkKzgIOl7JJJurgAODP372NA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org