Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/7ey_F5ImqQ1ADv6ipx_eYWSZhJg.roa
File: 7ey_F5ImqQ1ADv6ipx_eYWSZhJg.roa (raw, json)
Hash identifier: AxfFrSn4tbPmXc15EVvXKSU71a8iVkinbHHI+rm3XwE=
Subject key identifier: ED:EC:BF:17:92:26:A9:0D:40:0E:FE:A2:A7:1F:DE:61:64:99:84:98
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01856F0B5B21171CBE28E86D9674C5997495
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/7ey_F5ImqQ1ADv6ipx_eYWSZhJg.roa
Signing time: Sun 01 Jan 2023 20:34:53 +0000
ROA not before: Sun 01 Jan 2023 20:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5b:21:17:1c:be:28:e8:6d:96:74:c5:99:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jan 1 20:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edecbf179226a90d400efea2a71fde6164998498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:6b:e1:d4:e8:9a:86:98:4b:54:aa:46:2c:
31:e9:6e:22:9f:5e:85:a1:a3:45:b2:cf:64:ab:20:
ec:66:f8:cf:22:c3:be:22:c4:81:87:79:7e:27:10:
66:e0:44:83:82:d9:e6:b4:9a:fc:31:3c:bd:cf:93:
98:22:4c:96:b6:92:b0:be:f6:7d:c8:4f:ff:48:40:
8e:3e:e2:2c:7e:62:ee:fe:8f:cb:c7:1f:d6:1e:eb:
0a:93:86:c1:02:42:b9:2d:8b:d9:d3:31:78:32:e7:
23:08:59:b9:ee:99:8b:70:2e:53:4c:6f:d2:80:7e:
a9:f4:00:34:44:89:b6:2a:52:8c:9e:11:f8:a7:c8:
c3:73:ca:95:30:4a:16:09:bc:61:a6:38:08:32:eb:
0a:62:29:dd:4a:20:9f:22:34:31:12:5e:b5:ac:6e:
89:cf:eb:6a:d6:d7:ef:6d:13:55:30:03:a7:23:4d:
b3:a5:61:60:22:13:4b:6d:9d:07:c3:30:30:7d:02:
45:5b:8c:32:55:87:13:d0:6f:68:69:20:9b:34:62:
6c:05:56:6f:e9:04:7f:04:fb:5a:5f:d5:69:05:d3:
a6:25:c0:3f:02:ba:bf:a2:e8:1e:8e:59:4d:a2:9b:
0f:05:90:62:07:d0:a0:5e:c0:85:6b:8e:14:43:91:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EC:BF:17:92:26:A9:0D:40:0E:FE:A2:A7:1F:DE:61:64:99:84:98
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/7ey_F5ImqQ1ADv6ipx_eYWSZhJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:9a:53:49:ff:83:9b:1f:e1:01:39:37:cf:ab:42:30:29:19:
aa:01:c9:e2:27:13:28:dc:9b:4c:b6:49:7f:cf:ce:cd:b7:a3:
ff:d6:1c:9d:1b:65:66:77:30:06:b9:c4:a3:ff:3a:2f:ee:cb:
09:db:e1:02:88:48:4e:fe:54:a6:95:e5:09:d9:38:04:b8:20:
ce:42:37:ea:e7:2d:fc:28:8c:66:33:7c:54:4e:9e:fc:42:73:
6c:38:0c:9a:1b:8d:b9:24:ef:c5:f8:95:4b:b3:b4:ef:f8:af:
68:9d:f9:07:1f:c6:6b:d4:52:ff:8e:ad:4e:14:fb:b5:36:66:
b7:51:d3:9b:21:cb:d2:2d:f2:c9:d5:92:a5:0b:cf:f7:53:06:
3d:b6:0c:58:b1:42:48:a1:cf:81:8e:fa:53:26:0b:2d:53:90:
22:3f:38:24:80:02:18:ae:3b:e8:58:61:cd:40:c0:c7:42:4d:
7d:59:59:2e:c4:bc:d8:9b:7a:20:83:e5:19:7e:85:8d:f2:46:
26:1c:76:48:3b:06:3f:a2:00:b6:c5:06:4f:cb:1b:ef:71:77:
48:65:be:4f:6c:fd:2d:28:d1:f0:79:41:6d:41:66:07:99:1d:
93:bf:1a:56:c2:7c:92:6c:b6:8a:cc:a3:0d:91:15:ee:48:3d:
51:da:17:a6
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVvC1shFxy+KOhtlnTFmXSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh
ZDQzNDIwHhcNMjMwMTAxMjAzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGVjYmYxNzkyMjZhOTBkNDAwZWZlYTJhNzFmZGU2MTY0OTk4NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQpr4dTomoaYS1SqRiwx6W4in16F
oaNFss9kqyDsZvjPIsO+IsSBh3l+JxBm4ESDgtnmtJr8MTy9z5OYIkyWtpKwvvZ9
yE//SECOPuIsfmLu/o/Lxx/WHusKk4bBAkK5LYvZ0zF4MucjCFm57pmLcC5TTG/S
gH6p9AA0RIm2KlKMnhH4p8jDc8qVMEoWCbxhpjgIMusKYindSiCfIjQxEl61rG6J
z+tq1tfvbRNVMAOnI02zpWFgIhNLbZ0HwzAwfQJFW4wyVYcT0G9oaSCbNGJsBVZv
6QR/BPtaX9VpBdOmJcA/Arq/ougejllNopsPBZBiB9CgXsCFa44UQ5EEVwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFO3svxeSJqkNQA7+oqcf3mFkmYSYMB8GA1UdIwQY
MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvN2V5X0Y1SW1xUTFBRHY2aXB4X2VZV1NaaEpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgWgwDQYJ
KoZIhvcNAQELBQADggEBAByaU0n/g5sf4QE5N8+rQjApGaoByeInEyjcm0y2SX/P
zs23o//WHJ0bZWZ3MAa5xKP/Oi/uywnb4QKISE7+VKaV5QnZOAS4IM5CN+rnLfwo
jGYzfFROnvxCc2w4DJobjbkk78X4lUuztO/4r2id+QcfxmvUUv+OrU4U+7U2ZrdR
05shy9It8snVkqULz/dTBj22DFixQkihz4GO+lMmCy1TkCI/OCSAAhiuO+hYYc1A
wMdCTX1ZWS7EvNibeiCD5Rl+hY3yRiYcdkg7Bj+iALbFBk/LG+9xd0hlvk9s/S0o
0fB5QW1BZgeZHZO/GlbCfJJstorMow2RFe5IPVHaF6Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-fra.rpki-client.org