Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/o7xVKJeuXUNt37AHs0s7PWGZSZc.roa
File: o7xVKJeuXUNt37AHs0s7PWGZSZc.roa (raw, json)
Hash identifier: sH6RPCdgidU69eeUZxlNMGFWOrlSdpGWm09BbCzDohk=
Subject key identifier: A3:BC:55:28:97:AE:5D:43:6D:DF:B0:07:B3:4B:3B:3D:61:99:49:97
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 01856EB906ED939CFFEB51A7DDD793ED2172
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/o7xVKJeuXUNt37AHs0s7PWGZSZc.roa
Signing time: Sun 01 Jan 2023 19:04:57 +0000
ROA not before: Sun 01 Jan 2023 19:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59690
IP address blocks: 176.124.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:06:ed:93:9c:ff:eb:51:a7:dd:d7:93:ed:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Jan 1 19:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3bc552897ae5d436ddfb007b34b3b3d61994997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:db:e4:e3:80:4f:83:0d:57:0b:b3:b6:3c:
5a:eb:46:a9:40:5c:4d:da:77:4e:cf:1e:6b:c0:b5:
3d:dd:d4:91:c1:3f:64:92:71:5b:0d:5e:72:bc:f7:
68:49:1f:86:dc:f7:c6:57:47:61:fa:c1:13:3f:c0:
fb:e6:bf:ec:c3:3c:66:c2:a8:aa:5d:8a:28:aa:ea:
f3:a6:22:b2:a0:d7:ff:36:04:e1:0f:84:78:56:7d:
4f:e6:17:cd:81:39:78:74:e6:38:ec:c7:5d:6a:2f:
a0:09:69:04:df:15:a1:6a:cf:fb:30:bf:ec:88:d7:
fe:1b:75:a1:0e:01:89:fa:90:00:39:4c:3e:e7:56:
55:e3:51:95:91:88:9a:7d:4e:4f:a7:31:68:ff:c3:
d3:4d:1a:06:0e:09:e0:a9:7c:d1:d5:04:c5:c1:0f:
48:1c:24:16:50:e6:07:1e:55:c5:9c:17:f6:7c:96:
70:b0:9d:17:4f:3b:11:7a:71:7d:a5:0c:c1:d5:be:
32:c1:eb:f3:a4:5e:49:db:ff:66:14:f8:5b:ca:a6:
4e:c1:52:94:3a:18:63:2b:3f:e6:d3:e2:0f:a0:0d:
e8:57:6c:ff:45:a7:67:c5:f7:65:e4:59:e3:fb:d2:
c1:63:c6:57:a8:6a:b0:56:e2:b8:cb:f1:d8:37:e9:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:55:28:97:AE:5D:43:6D:DF:B0:07:B3:4B:3B:3D:61:99:49:97
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/o7xVKJeuXUNt37AHs0s7PWGZSZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.252.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6a:b4:dc:5e:7f:96:1c:f3:96:73:38:02:35:58:48:2b:84:
9a:a7:0f:12:38:b9:0a:b1:d6:d5:1d:12:f4:27:0a:cb:d3:eb:
20:4d:d8:bd:58:52:61:e3:35:c3:ee:5c:93:73:52:85:9a:32:
26:6b:1e:14:33:2a:15:fe:6b:14:39:5b:9f:a4:1c:56:63:ed:
75:37:0d:d8:a3:b6:45:d6:92:2d:7d:aa:6e:8b:03:47:fc:f2:
28:d7:1a:f2:65:54:6c:52:4a:5e:4e:1e:4b:3d:56:1f:ea:c7:
fd:fd:ef:43:18:30:83:0b:86:48:62:6b:96:6e:d4:a6:73:f9:
a0:29:73:2c:cf:9f:8e:b0:11:d7:c4:44:58:5b:44:cc:05:84:
7d:30:6d:76:ab:2d:73:97:cd:a1:2e:66:88:ed:f9:05:7e:82:
28:b5:bb:78:dc:fb:6b:15:fe:6e:6c:a3:42:94:c6:7a:74:ad:
e5:7e:05:d6:e2:ee:7f:d9:eb:51:24:d4:b9:60:8a:1d:d0:ef:
ce:0e:e5:6e:09:82:78:cf:db:03:cf:f1:0a:5b:15:ba:55:c2:
94:2b:8b:48:3a:6c:51:1d:d5:80:aa:ff:29:45:67:35:46:4a:
56:82:7c:98:ef:3b:03:49:42:d7:49:9c:50:de:40:0b:ee:50:
82:a8:96:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuQbtk5z/61Gn3deT7SFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm
ZWU4ZmIwHhcNMjMwMTAxMTkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2JjNTUyODk3YWU1ZDQzNmRkZmIwMDdiMzRiM2IzZDYxOTk0OTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5zb5OOAT4MNVwuztjxa60apQFxN
2ndOzx5rwLU93dSRwT9kknFbDV5yvPdoSR+G3PfGV0dh+sETP8D75r/swzxmwqiq
XYooqurzpiKyoNf/NgThD4R4Vn1P5hfNgTl4dOY47Mddai+gCWkE3xWhas/7ML/s
iNf+G3WhDgGJ+pAAOUw+51ZV41GVkYiafU5PpzFo/8PTTRoGDgngqXzR1QTFwQ9I
HCQWUOYHHlXFnBf2fJZwsJ0XTzsRenF9pQzB1b4ywevzpF5J2/9mFPhbyqZOwVKU
OhhjKz/m0+IPoA3oV2z/Radnxfdl5Fnj+9LBY8ZXqGqwVuK4y/HYN+nvWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKO8VSiXrl1Dbd+wB7NLOz1hmUmXMB8GA1UdIwQY
MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt
YjdhYjY4NmMwNzZlLzEvbzd4VktKZXVYVU50MzdBSHMwczdQV0daU1pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl
LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHz8MA0G
CSqGSIb3DQEBCwUAA4IBAQA1arTcXn+WHPOWczgCNVhIK4Sapw8SOLkKsdbVHRL0
JwrL0+sgTdi9WFJh4zXD7lyTc1KFmjImax4UMyoV/msUOVufpBxWY+11Nw3Yo7ZF
1pItfapuiwNH/PIo1xryZVRsUkpeTh5LPVYf6sf9/e9DGDCDC4ZIYmuWbtSmc/mg
KXMsz5+OsBHXxERYW0TMBYR9MG12qy1zl82hLmaI7fkFfoIotbt43PtrFf5ubKNC
lMZ6dK3lfgXW4u5/2etRJNS5YIod0O/ODuVuCYJ4z9sDz/EKWxW6VcKUK4tIOmxR
HdWAqv8pRWc1RkpWgnyY7zsDSULXSZxQ3kAL7lCCqJYf
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org