Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/a0-RY2Pl_7KJSgcAPDieE2LA_Vw.roa
File: a0-RY2Pl_7KJSgcAPDieE2LA_Vw.roa (raw, json)
Hash identifier: Ojj+tClyC4igoRyiHh+B5zODSHKRoFIIowI8WE7svCo=
Subject key identifier: 6B:4F:91:63:63:E5:FF:B2:89:4A:07:00:3C:38:9E:13:62:C0:FD:5C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01860E558AB3C5A0D7797C0BA73EA2C679D5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/a0-RY2Pl_7KJSgcAPDieE2LA_Vw.roa
Signing time: Wed 01 Feb 2023 18:55:32 +0000
ROA not before: Wed 01 Feb 2023 18:55:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 5.57.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Aug 2023 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:55:8a:b3:c5:a0:d7:79:7c:0b:a7:3e:a2:c6:79:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 1 18:55:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4f916363e5ffb2894a07003c389e1362c0fd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:17:d5:14:fe:8e:b3:8f:94:6c:6e:c9:b0:
09:c6:d6:e5:c6:6a:72:02:c2:0c:61:39:cd:94:5a:
c1:b1:70:2b:be:f9:ab:14:9d:80:d2:71:5d:bf:cc:
da:2b:c0:16:6b:37:71:d0:15:81:e7:ba:88:48:3c:
4b:24:6d:9d:df:2d:73:6c:75:12:40:e0:a3:49:ad:
e8:2b:2a:6a:cc:ff:4e:70:93:a7:bb:2e:30:f0:42:
0c:b1:cc:fc:01:f6:00:bc:3a:13:c1:4f:99:5f:49:
04:93:21:9e:a8:69:94:57:8a:f1:40:7d:9d:23:28:
bb:16:d8:00:a3:e3:1d:6b:f6:5f:ea:f1:d0:07:39:
96:29:64:43:13:99:19:14:85:0b:93:1f:a2:50:69:
d7:75:5d:c6:c8:69:90:8f:d4:da:54:32:27:57:d2:
f4:27:6a:91:7f:4d:e8:9c:4a:6d:17:48:7f:fa:e1:
d8:96:9f:15:d9:08:85:89:dc:d1:05:5b:8f:0d:ab:
a9:70:cf:67:89:f8:fd:0c:55:84:71:e0:29:a7:d4:
af:b1:7f:d8:fd:83:af:7c:c2:da:3a:5a:80:06:6b:
f5:39:15:36:2c:e0:36:4c:55:a1:e5:d7:20:b3:c8:
bd:9c:c5:16:70:cd:b5:54:73:2b:dc:8b:51:b3:36:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:91:63:63:E5:FF:B2:89:4A:07:00:3C:38:9E:13:62:C0:FD:5C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/a0-RY2Pl_7KJSgcAPDieE2LA_Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.39.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4b:36:c3:e1:90:82:0c:ed:0e:fc:9a:bd:cb:c1:e9:91:f7:
c0:d0:a4:82:8b:86:ee:02:b4:12:24:04:6d:fd:41:2d:a5:18:
16:10:7a:a7:7a:72:8e:cc:c3:3c:55:ec:f1:b9:7b:35:c7:9c:
9b:57:ad:90:4d:f5:46:8a:06:bb:41:44:c6:aa:98:2f:ca:ff:
70:8a:77:af:9d:1a:e9:9b:53:4f:30:ea:7d:24:ff:cd:74:c8:
8f:38:4d:51:8a:58:1a:53:7d:79:f5:02:1a:7a:03:ff:55:15:
cf:62:a8:58:4f:38:5f:8e:1e:e2:a8:fa:32:9e:c8:89:06:9c:
cc:9b:36:5d:b6:7f:e9:51:9e:f1:40:6e:a0:8f:e7:63:3c:22:
8b:73:05:5a:f3:92:65:7c:4b:cd:80:ad:4c:31:aa:3b:38:ca:
ef:d0:3e:01:91:f6:7c:d6:c5:69:2a:6f:63:d0:1b:b9:9e:cf:
76:60:dd:c7:5d:f8:7d:9e:48:e7:a2:ec:09:4d:48:be:10:2b:
e4:e7:b8:09:56:95:95:87:bd:90:ef:20:ff:39:5c:3e:f2:7b:
8f:01:e6:86:d2:78:cc:35:8e:c2:de:9b:36:59:33:93:24:19:
46:a9:16:94:7d:cb:32:a4:f8:2b:be:64:e3:55:24:d3:bf:13:
99:c5:b8:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYOVYqzxaDXeXwLpz6ixnnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMjAxMTg1NTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjRmOTE2MzYzZTVmZmIyODk0YTA3MDAzYzM4OWUxMzYyYzBmZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNQX1RT+jrOPlGxuybAJxtblxmpy
AsIMYTnNlFrBsXArvvmrFJ2A0nFdv8zaK8AWazdx0BWB57qISDxLJG2d3y1zbHUS
QOCjSa3oKypqzP9OcJOnuy4w8EIMscz8AfYAvDoTwU+ZX0kEkyGeqGmUV4rxQH2d
Iyi7FtgAo+Mda/Zf6vHQBzmWKWRDE5kZFIULkx+iUGnXdV3GyGmQj9TaVDInV9L0
J2qRf03onEptF0h/+uHYlp8V2QiFidzRBVuPDaupcM9nifj9DFWEceApp9SvsX/Y
/YOvfMLaOlqABmv1ORU2LOA2TFWh5dcgs8i9nMUWcM21VHMr3ItRszYdoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtPkWNj5f+yiUoHADw4nhNiwP1cMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvYTAtUlkyUGxfN0tKU2djQVBEaWVFMkxBX1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTknMA0G
CSqGSIb3DQEBCwUAA4IBAQC9SzbD4ZCCDO0O/Jq9y8HpkffA0KSCi4buArQSJARt
/UEtpRgWEHqnenKOzMM8VezxuXs1x5ybV62QTfVGiga7QUTGqpgvyv9winevnRrp
m1NPMOp9JP/NdMiPOE1RilgaU3159QIaegP/VRXPYqhYTzhfjh7iqPoynsiJBpzM
mzZdtn/pUZ7xQG6gj+djPCKLcwVa85JlfEvNgK1MMao7OMrv0D4BkfZ81sVpKm9j
0Bu5ns92YN3HXfh9nkjnouwJTUi+ECvk57gJVpWVh72Q7yD/OVw+8nuPAeaG0njM
NY7C3ps2WTOTJBlGqRaUfcsypPgrvmTjVSTTvxOZxbi4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:29 2024 by rpki-client on console-fra.rpki-client.org