Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/kTXVokJ3zzCwnGrKBbfj9ksSK64.roa
File: kTXVokJ3zzCwnGrKBbfj9ksSK64.roa (raw, json)
Hash identifier: fkP97Ck3L5r1kjXCZTCv2msXjYAB+PK+hfYPfHRQDc8=
Subject key identifier: 91:35:D5:A2:42:77:CF:30:B0:9C:6A:CA:05:B7:E3:F6:4B:12:2B:AE
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01856CEF3B19D6974232127A9846E43AF5DC
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/kTXVokJ3zzCwnGrKBbfj9ksSK64.roa
Signing time: Sun 01 Jan 2023 10:44:55 +0000
ROA not before: Sun 01 Jan 2023 10:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 147.215.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:3b:19:d6:97:42:32:12:7a:98:46:e4:3a:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jan 1 10:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9135d5a24277cf30b09c6aca05b7e3f64b122bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:2d:91:4b:6a:95:e6:b0:1e:45:69:e6:c8:
03:df:45:ca:c5:d9:82:e5:1b:bc:bc:40:6a:64:4d:
02:d1:26:26:5b:25:91:43:58:5c:13:99:45:78:7d:
fc:32:0a:d4:a0:cf:fc:69:d3:e5:92:94:79:f3:24:
16:18:d5:4d:4a:4b:dd:c6:91:88:ae:f2:8a:5b:c5:
c7:a9:47:8b:cd:74:c1:e9:fe:46:0b:7a:d3:e0:89:
e6:e1:a7:42:7a:74:f1:26:a8:a4:6c:28:05:11:83:
fe:4e:2a:d5:be:f2:fb:5e:d3:d7:3e:66:26:10:56:
c5:17:ef:30:73:a9:24:3c:c3:51:b5:4c:1a:90:8a:
d6:bf:f9:f8:ae:50:4b:fd:91:fb:6b:3f:06:6c:b2:
05:17:23:cf:a8:f1:db:0d:c9:fe:b9:9b:05:be:01:
f1:1b:d7:78:f5:f7:ec:0b:79:20:b4:12:8d:40:c6:
a0:4a:d8:07:62:41:55:98:8c:0a:9a:ef:fa:0d:f3:
9e:97:e8:aa:b4:a6:35:ec:ef:38:aa:d9:f9:d2:3b:
a8:84:16:fe:67:04:68:a9:2d:07:0d:16:c3:79:eb:
72:ab:bf:f8:58:dc:0e:15:e9:30:46:cb:28:42:b0:
6d:17:94:72:9b:8a:1b:58:b9:b3:49:db:11:08:c2:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:D5:A2:42:77:CF:30:B0:9C:6A:CA:05:B7:E3:F6:4B:12:2B:AE
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/kTXVokJ3zzCwnGrKBbfj9ksSK64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.215.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:0d:92:13:c6:8e:9e:48:d0:24:44:25:e9:23:1d:3c:75:41:
e7:32:04:a7:a5:5a:a9:28:02:89:ac:9b:f7:44:93:db:82:6a:
b5:03:de:8b:92:c3:d7:0d:bb:ee:32:bb:0a:8d:82:41:a9:a2:
e3:bc:5e:fa:58:d8:76:d5:a8:81:3c:54:58:4b:76:b6:d9:81:
b7:64:94:3a:f4:ed:bc:d2:00:8f:8d:ef:83:7a:2b:da:e6:58:
bd:db:0c:f9:80:6e:53:8f:b0:f3:9a:d3:74:10:82:d9:47:1e:
3d:f5:fa:71:42:51:cb:49:d2:69:50:6d:67:ab:7e:f9:eb:c1:
5a:70:e9:94:4d:3d:6e:3a:38:f1:65:c6:65:a9:e8:09:2b:f9:
7d:cd:e5:3a:9b:5e:fe:cd:a4:fc:fb:b6:11:93:dc:c6:ad:4c:
d8:34:f0:c8:db:57:e1:d7:03:4c:66:64:8c:95:be:4e:f1:7b:
f6:9e:3c:c4:0f:59:0b:98:ce:b6:b5:45:55:75:c8:37:70:66:
30:8c:bd:64:66:c7:8f:77:04:52:4b:f6:7f:84:60:8e:ff:96:
8c:19:fd:3f:21:0c:5c:72:03:84:0e:28:3d:7c:36:e2:f6:8c:
36:3a:bd:c7:ff:13:9b:84:9b:a7:50:4a:86:df:0b:b6:e5:e3:
6d:49:ab:da
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVs7zsZ1pdCMhJ6mEbkOvXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGE1NjQ4ZTFkNDZiNjYyZjRkMWRjYzA2NmQzOTQyN2M2
NWYwZDEwHhcNMjMwMTAxMTA0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTM1ZDVhMjQyNzdjZjMwYjA5YzZhY2EwNWI3ZTNmNjRiMTIyYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7EtkUtqleawHkVp5sgD30XKxdmC
5Ru8vEBqZE0C0SYmWyWRQ1hcE5lFeH38MgrUoM/8adPlkpR58yQWGNVNSkvdxpGI
rvKKW8XHqUeLzXTB6f5GC3rT4Inm4adCenTxJqikbCgFEYP+TirVvvL7XtPXPmYm
EFbFF+8wc6kkPMNRtUwakIrWv/n4rlBL/ZH7az8GbLIFFyPPqPHbDcn+uZsFvgHx
G9d49ffsC3kgtBKNQMagStgHYkFVmIwKmu/6DfOel+iqtKY17O84qtn50juohBb+
ZwRoqS0HDRbDeetyq7/4WNwOFekwRssoQrBtF5Rym4obWLmzSdsRCMLXWwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJE11aJCd88wsJxqygW34/ZLEiuuMB8GA1UdIwQY
MBaAFEMKVkjh1GtmL00dzAZtOUJ8ZfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzct
ODkwNTIyYzYxMDViLzEva1RYVm9rSjN6ekN3bkdyS0JiZmo5a3NTSzY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzctODkwNTIyYzYxMDVi
LzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk9cwDQYJ
KoZIhvcNAQELBQADggEBABwNkhPGjp5I0CREJekjHTx1QecyBKelWqkoAomsm/dE
k9uCarUD3ouSw9cNu+4yuwqNgkGpouO8XvpY2HbVqIE8VFhLdrbZgbdklDr07bzS
AI+N74N6K9rmWL3bDPmAblOPsPOa03QQgtlHHj31+nFCUctJ0mlQbWerfvnrwVpw
6ZRNPW46OPFlxmWp6Akr+X3N5TqbXv7NpPz7thGT3MatTNg08MjbV+HXA0xmZIyV
vk7xe/aePMQPWQuYzra1RVV1yDdwZjCMvWRmx493BFJL9n+EYI7/lowZ/T8hDFxy
A4QOKD18NuL2jDY6vcf/E5uEm6dQSobfC7bl421Jq9o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:59 2024 by rpki-client on console-ams.rpki-client.org