Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/REP7lrAVfbhqws-jk8E_6MSKXRI.roa
File: REP7lrAVfbhqws-jk8E_6MSKXRI.roa (raw, json)
Hash identifier: oDsWPJ1AfkTXpSGEHfttj9C8IgIvn0/5WSux/kSs1o0=
Subject key identifier: 44:43:FB:96:B0:15:7D:B8:6A:C2:CF:A3:93:C1:3F:E8:C4:8A:5D:12
Certificate issuer: /CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
Certificate serial: 018571153F8D016B7E53F38F2D407CEFB744
Authority key identifier: 5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/REP7lrAVfbhqws-jk8E_6MSKXRI.roa
Signing time: Mon 02 Jan 2023 06:04:55 +0000
ROA not before: Mon 02 Jan 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:3f:8d:01:6b:7e:53:f3:8f:2d:40:7c:ef:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
Validity
Not Before: Jan 2 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4443fb96b0157db86ac2cfa393c13fe8c48a5d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:aa:09:6e:7a:af:58:b4:e4:87:5c:32:54:
bc:0a:f1:00:4d:99:55:4d:75:99:5c:87:9c:b3:6b:
dd:2b:6c:9c:32:f8:74:20:3d:7c:a4:09:b7:be:bd:
20:2d:bf:c2:89:1a:2d:f8:03:ac:32:ff:1e:e3:70:
72:99:03:03:a3:3b:ae:84:1e:47:dc:83:76:63:cd:
91:d6:88:0d:60:bb:03:e4:03:09:bf:79:eb:8c:2d:
f4:83:37:45:a1:ae:e1:8d:5e:55:93:67:e5:9f:3b:
f0:b7:e4:e3:5a:d3:f8:4e:c2:23:14:fe:11:bc:f9:
28:28:9e:4f:12:f0:3d:f4:bf:28:22:d0:e3:ab:87:
9a:35:59:0a:0e:14:cb:a9:7a:22:c5:4f:c2:4f:55:
77:c9:19:dc:fc:3e:96:00:8f:0c:bb:6d:6b:6e:9a:
80:6e:d1:c9:93:d9:c1:ae:a0:29:85:6a:93:ff:07:
5c:ec:72:1f:b5:e3:fc:01:fd:5b:1e:ba:7d:2a:ed:
a7:e9:c0:21:62:31:78:5b:4e:ca:80:1a:ef:0a:9e:
d0:12:0c:04:93:80:6a:85:f4:04:f9:2e:77:51:b1:
ae:35:dc:d9:41:f9:ab:4b:3c:63:90:ae:06:c9:bc:
2e:30:9a:ee:e0:57:6a:43:55:d3:5b:c7:74:08:cf:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:43:FB:96:B0:15:7D:B8:6A:C2:CF:A3:93:C1:3F:E8:C4:8A:5D:12
X509v3 Authority Key Identifier:
keyid:5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/REP7lrAVfbhqws-jk8E_6MSKXRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.81.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:db:2c:48:82:7a:33:d6:b8:1d:e2:4e:a9:c9:3a:34:f3:de:
fc:f5:2b:27:56:cf:ab:8f:a2:67:6c:40:46:f0:3d:c9:12:9a:
09:4a:83:21:64:92:c3:de:3b:0e:4b:e7:a2:b5:30:87:bd:93:
a0:9d:d8:15:96:4c:81:cd:23:b6:2f:0a:55:96:41:b0:60:6e:
4f:e7:57:d1:97:4b:97:a3:6c:6a:7b:da:71:28:ee:ef:07:1f:
ab:c6:8c:be:4f:99:7f:75:bb:23:bf:6b:27:53:db:39:e9:c9:
23:4c:cd:21:56:0e:e6:38:d5:e2:55:6d:38:fd:cd:b2:05:01:
0b:b6:18:50:77:f6:6c:5f:93:ff:bc:d4:f1:1f:93:4d:5d:a0:
4c:5d:52:ac:1a:19:87:f8:df:70:2a:cb:01:17:75:fe:db:30:
e6:ab:4b:b5:88:65:eb:ff:e6:fb:5d:43:50:c2:7c:d4:fa:2b:
64:cf:d3:30:9e:ad:2d:bb:c1:7f:18:17:94:6c:ac:9f:b6:88:
66:f1:fa:b2:bb:76:b0:f2:86:a3:47:2c:98:74:bd:21:66:30:
25:fd:38:5d:0e:31:70:14:18:ec:42:fc:5d:72:4d:27:c0:20:
c4:7b:e7:c8:32:d8:53:fd:12:53:01:85:eb:c4:fb:31:32:56:
89:88:94:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxFT+NAWt+U/OPLUB877dEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzk2OTAxMjM3Y2Y2MWFhZDBiNzkzYjcyNWVmOGJkMGU1
ZTkzN2IwHhcNMjMwMTAyMDYwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQzZmI5NmIwMTU3ZGI4NmFjMmNmYTM5M2MxM2ZlOGM0OGE1ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX+qCW56r1i05IdcMlS8CvEATZlV
TXWZXIecs2vdK2ycMvh0ID18pAm3vr0gLb/CiRot+AOsMv8e43BymQMDozuuhB5H
3IN2Y82R1ogNYLsD5AMJv3nrjC30gzdFoa7hjV5Vk2flnzvwt+TjWtP4TsIjFP4R
vPkoKJ5PEvA99L8oItDjq4eaNVkKDhTLqXoixU/CT1V3yRnc/D6WAI8Mu21rbpqA
btHJk9nBrqAphWqT/wdc7HIfteP8Af1bHrp9Ku2n6cAhYjF4W07KgBrvCp7QEgwE
k4BqhfQE+S53UbGuNdzZQfmrSzxjkK4GybwuMJru4FdqQ1XTW8d0CM/fwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERD+5awFX24asLPo5PBP+jEil0SMB8GA1UdIwQY
MBaAFFvJaQEjfPYarQt5O3Je+L0OXpN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhscEFTTjg5aHF0QzNrN2NsNzR2UTVlazNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYWVkOWQtNGEwNC00MGE4LTgyNGQt
MjQ4ZDIwNTBlMDM5LzEvUkVQN2xyQVZmYmhxd3Mtams4RV82TVNLWFJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zYWVkOWQtNGEwNC00MGE4LTgyNGQtMjQ4ZDIwNTBlMDM5
LzEvVzhscEFTTjg5aHF0QzNrN2NsNzR2UTVlazNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpRMA0G
CSqGSIb3DQEBCwUAA4IBAQDB2yxIgnoz1rgd4k6pyTo089789SsnVs+rj6JnbEBG
8D3JEpoJSoMhZJLD3jsOS+eitTCHvZOgndgVlkyBzSO2LwpVlkGwYG5P51fRl0uX
o2xqe9pxKO7vBx+rxoy+T5l/dbsjv2snU9s56ckjTM0hVg7mONXiVW04/c2yBQEL
thhQd/ZsX5P/vNTxH5NNXaBMXVKsGhmH+N9wKssBF3X+2zDmq0u1iGXr/+b7XUNQ
wnzU+itkz9Mwnq0tu8F/GBeUbKyftohm8fqyu3aw8oajRyyYdL0hZjAl/ThdDjFw
FBjsQvxdck0nwCDEe+fIMthT/RJTAYXrxPsxMlaJiJTD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org