Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/GDfWU49yzJcOvVZqqc7jbz-LZjI.roa
File: GDfWU49yzJcOvVZqqc7jbz-LZjI.roa (raw, json)
Hash identifier: BCQOXw88siMH9uEvtL3dcN8Jya0N8i9DDZftkesXdPc=
Subject key identifier: 18:37:D6:53:8F:72:CC:97:0E:BD:56:6A:A9:CE:E3:6F:3F:8B:66:32
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 01857246C44657F8F9B4CAB0B0656E6A2B14
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/GDfWU49yzJcOvVZqqc7jbz-LZjI.roa
Signing time: Mon 02 Jan 2023 11:38:38 +0000
ROA not before: Mon 02 Jan 2023 11:38:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 192.81.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c4:46:57:f8:f9:b4:ca:b0:b0:65:6e:6a:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Jan 2 11:38:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1837d6538f72cc970ebd566aa9cee36f3f8b6632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:51:94:3c:a4:4c:38:9e:41:98:11:4d:9d:
52:de:6b:03:25:9a:b1:4b:c5:b7:45:d5:82:b6:15:
16:d0:cc:dc:0d:75:b0:86:27:91:95:79:92:98:d5:
78:a1:64:3c:a3:37:6e:ae:1b:76:82:d2:f9:27:e1:
b4:b3:26:09:c8:6a:55:70:7a:7d:94:50:c7:4e:4b:
5f:86:51:f8:2d:ab:0b:b6:b7:13:38:89:f6:46:44:
57:0f:43:18:4a:c4:e6:5f:7b:00:ac:ec:23:b7:71:
c4:d9:19:ef:4a:6c:f6:49:4f:5e:98:b4:f9:e8:0b:
df:70:06:9d:d2:3b:e5:61:86:a4:dc:1e:51:e4:9e:
d6:26:2b:88:55:e8:b7:41:e2:d1:39:98:64:e6:36:
34:01:63:77:41:ed:54:4d:1e:04:ea:b8:69:5b:22:
2f:0b:68:64:a1:bb:f7:79:ee:ad:37:06:d3:d1:54:
c9:5b:e7:26:23:a5:cb:7f:f1:c7:f8:2f:bd:3a:14:
09:7e:df:f5:e1:e9:4c:56:1e:ff:8f:f7:08:e1:cf:
9e:07:8a:af:34:6d:7c:8d:d5:7f:6d:43:67:88:fe:
30:bd:a1:23:0e:c4:7c:19:07:57:0c:81:43:5f:35:
c6:f2:8a:b0:99:e8:42:6b:78:d9:2f:70:27:55:c8:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:D6:53:8F:72:CC:97:0E:BD:56:6A:A9:CE:E3:6F:3F:8B:66:32
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/GDfWU49yzJcOvVZqqc7jbz-LZjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.81.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:dd:a8:c6:d6:97:60:9c:cb:dc:3b:d1:d4:a8:dd:fc:54:02:
ec:41:15:f3:2f:48:a8:81:71:c4:61:51:f5:2e:ab:44:7f:fe:
b4:aa:b0:a8:d0:c2:2b:d1:79:a7:e5:cc:3d:c2:34:54:7a:de:
40:59:ec:0f:50:84:53:47:1a:f4:d3:45:0a:f5:ee:7e:88:41:
3b:ab:88:19:23:cc:5b:35:73:62:3f:76:c6:fc:12:c7:89:86:
b4:65:fa:ed:a6:26:03:79:c1:8d:4e:05:6e:bc:fa:a2:3d:fd:
bb:10:8c:08:ff:e7:80:d6:cb:45:7e:43:cf:26:86:ec:28:e4:
57:fc:70:12:74:74:bf:07:d4:1d:6c:a3:41:41:b5:4d:6f:f1:
f5:92:e2:e3:00:4f:87:d4:c6:7f:ec:94:c7:0f:fb:82:25:ec:
08:cd:5c:b8:d3:59:86:58:e9:00:b6:51:da:5b:48:b5:ca:e7:
51:e3:e8:11:b0:86:46:41:66:85:b7:3c:25:7c:cd:e7:2e:a8:
80:88:c5:c5:86:7a:04:4a:3c:53:4b:57:46:45:9c:5d:24:b1:
99:c7:70:3e:d1:65:f2:ec:89:dc:36:f5:6a:3e:cb:4a:49:e5:
36:c4:ea:0d:aa:97:32:a2:a9:93:b6:ec:d2:13:19:61:cd:9e:
97:57:01:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRsRGV/j5tMqwsGVuaisUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjI5MzIxMmQyNWQ0ODYzZTM4NmI5YzQ4MGRkYzliZTcz
ODEyNGYwHhcNMjMwMTAyMTEzODM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODM3ZDY1MzhmNzJjYzk3MGViZDU2NmFhOWNlZTM2ZjNmOGI2NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq5RlDykTDieQZgRTZ1S3msDJZqx
S8W3RdWCthUW0MzcDXWwhieRlXmSmNV4oWQ8ozdurht2gtL5J+G0syYJyGpVcHp9
lFDHTktfhlH4LasLtrcTOIn2RkRXD0MYSsTmX3sArOwjt3HE2RnvSmz2SU9emLT5
6AvfcAad0jvlYYak3B5R5J7WJiuIVei3QeLROZhk5jY0AWN3Qe1UTR4E6rhpWyIv
C2hkobv3ee6tNwbT0VTJW+cmI6XLf/HH+C+9OhQJft/14elMVh7/j/cI4c+eB4qv
NG18jdV/bUNniP4wvaEjDsR8GQdXDIFDXzXG8oqwmehCa3jZL3AnVcgqeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBg31lOPcsyXDr1WaqnO428/i2YyMB8GA1UdIwQY
MBaAFG3ykyEtJdSGPjhrnEgN3JvnOBJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYt
ZjQwMDQwMmI1MzZjLzEvR0RmV1U0OXl6SmNPdlZacXFjN2piei1MWmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZWNiOGEtZDc2My00NjQyLTgwMzYtZjQwMDQwMmI1MzZj
LzEvYmZLVElTMGwxSVktT0d1Y1NBM2NtLWM0RWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFF5MA0G
CSqGSIb3DQEBCwUAA4IBAQCN3ajG1pdgnMvcO9HUqN38VALsQRXzL0iogXHEYVH1
LqtEf/60qrCo0MIr0Xmn5cw9wjRUet5AWewPUIRTRxr000UK9e5+iEE7q4gZI8xb
NXNiP3bG/BLHiYa0ZfrtpiYDecGNTgVuvPqiPf27EIwI/+eA1stFfkPPJobsKORX
/HASdHS/B9QdbKNBQbVNb/H1kuLjAE+H1MZ/7JTHD/uCJewIzVy401mGWOkAtlHa
W0i1yudR4+gRsIZGQWaFtzwlfM3nLqiAiMXFhnoESjxTS1dGRZxdJLGZx3A+0WXy
7IncNvVqPstKSeU2xOoNqpcyoqmTtuzSExlhzZ6XVwEY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org