Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/rmGZ8NLp0SU6LumiYl93vbhKYXc.roa
File: rmGZ8NLp0SU6LumiYl93vbhKYXc.roa (raw, json)
Hash identifier: vBAZNxNLNn6aToGOTNU6X99csWqmIXPGDNSXCmdglkQ=
Subject key identifier: AE:61:99:F0:D2:E9:D1:25:3A:2E:E9:A2:62:5F:77:BD:B8:4A:61:77
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 01856D93D764A3F24970E3B6DF463E10B812
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/rmGZ8NLp0SU6LumiYl93vbhKYXc.roa
Signing time: Sun 01 Jan 2023 13:44:43 +0000
ROA not before: Sun 01 Jan 2023 13:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42855
IP address blocks: 84.54.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d7:64:a3:f2:49:70:e3:b6:df:46:3e:10:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 13:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae6199f0d2e9d1253a2ee9a2625f77bdb84a6177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:36:d9:c5:5a:3d:6b:83:be:c0:64:2a:be:1c:
d3:cc:ae:e9:0b:71:25:cc:e1:c8:9c:11:aa:c4:d2:
37:0d:6c:f9:25:89:3b:2c:a8:a1:2e:72:2f:fa:56:
61:2a:5e:76:ce:48:8c:98:56:80:34:ee:83:94:d2:
2e:15:14:ec:79:e2:58:49:39:86:c4:07:9a:b0:78:
ee:91:2c:84:7e:ba:73:82:32:18:27:87:00:25:44:
86:0a:91:b1:8a:10:5e:d9:b7:72:47:f3:a9:98:01:
0c:a3:06:32:ef:3f:ee:3d:dc:3d:80:94:c5:13:70:
4e:b9:27:75:3d:c7:62:43:ea:18:f3:03:85:db:36:
32:19:6e:a1:13:0e:22:55:4f:c4:2e:1b:a1:eb:56:
95:50:21:52:f6:03:58:38:02:97:aa:eb:50:95:ba:
47:2d:0c:42:95:aa:49:c7:5e:72:15:02:31:01:e3:
c7:d0:29:0e:45:8e:38:a5:d3:56:a6:2e:35:1e:8f:
91:11:b4:4c:3e:ee:13:41:18:4c:cc:75:86:13:15:
16:4e:ff:53:bb:27:dd:59:f2:7a:fd:dc:67:be:70:
41:0d:9a:74:82:d8:29:67:7b:7c:27:ba:95:21:6e:
9b:fb:61:e5:2c:d2:21:4c:3a:a7:37:ff:27:67:ed:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:61:99:F0:D2:E9:D1:25:3A:2E:E9:A2:62:5F:77:BD:B8:4A:61:77
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/rmGZ8NLp0SU6LumiYl93vbhKYXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fa:ae:1e:e6:22:c8:95:5c:e2:20:77:e1:61:d6:fe:1a:f0:
d9:dc:13:21:80:c2:20:43:9b:31:29:43:b5:c8:4e:3d:4a:ca:
57:49:5b:ba:e4:aa:0a:dc:11:84:b6:75:d7:5c:8d:58:44:d2:
5e:58:e7:bb:70:9b:5c:64:89:c0:8d:94:71:64:f5:fa:66:2c:
4a:3c:5b:a5:c4:b3:20:50:68:77:4a:7f:c1:20:49:ea:b4:96:
34:f7:cb:2c:33:7e:ee:41:9a:bf:e2:7e:c0:39:38:33:14:21:
26:03:3b:80:b4:52:81:50:76:53:a6:40:db:f3:75:6f:c9:f5:
e0:81:1a:52:dc:31:a4:55:6c:bb:db:a8:65:5d:68:d9:0c:b8:
1b:44:53:d5:6c:5d:38:16:a4:fc:6a:e9:d8:f9:cd:3f:f4:2f:
ef:cd:b4:5c:79:b7:a7:c4:24:14:76:8d:1b:b5:50:e9:eb:3d:
28:48:89:ce:7b:76:e9:b3:98:1d:0e:43:3f:7b:18:68:84:6c:
d4:92:27:31:61:70:0b:c2:a0:16:9e:14:e1:87:50:a3:4a:1f:
be:d2:e9:8b:a8:b8:ce:b3:15:16:e2:9a:3f:8b:ff:71:58:d5:
ec:40:0c:65:a5:3e:59:2e:79:2f:97:df:8b:72:6f:15:34:de:
fa:dd:73:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtk9dko/JJcOO230Y+ELgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1
ZmY0ODUwHhcNMjMwMTAxMTM0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTYxOTlmMGQyZTlkMTI1M2EyZWU5YTI2MjVmNzdiZGI4NGE2MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTbZxVo9a4O+wGQqvhzTzK7pC3El
zOHInBGqxNI3DWz5JYk7LKihLnIv+lZhKl52zkiMmFaANO6DlNIuFRTseeJYSTmG
xAeasHjukSyEfrpzgjIYJ4cAJUSGCpGxihBe2bdyR/OpmAEMowYy7z/uPdw9gJTF
E3BOuSd1PcdiQ+oY8wOF2zYyGW6hEw4iVU/ELhuh61aVUCFS9gNYOAKXqutQlbpH
LQxClapJx15yFQIxAePH0CkORY44pdNWpi41Ho+REbRMPu4TQRhMzHWGExUWTv9T
uyfdWfJ6/dxnvnBBDZp0gtgpZ3t8J7qVIW6b+2HlLNIhTDqnN/8nZ+1UdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5hmfDS6dElOi7pomJfd724SmF3MB8GA1UdIwQY
MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt
NTdlMWQ1YjcyYjJkLzEvcm1HWjhOTHAwU1U2THVtaVlsOTN2YmhLWVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk
LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDa4MA0G
CSqGSIb3DQEBCwUAA4IBAQC7+q4e5iLIlVziIHfhYdb+GvDZ3BMhgMIgQ5sxKUO1
yE49SspXSVu65KoK3BGEtnXXXI1YRNJeWOe7cJtcZInAjZRxZPX6ZixKPFulxLMg
UGh3Sn/BIEnqtJY098ssM37uQZq/4n7AOTgzFCEmAzuAtFKBUHZTpkDb83VvyfXg
gRpS3DGkVWy726hlXWjZDLgbRFPVbF04FqT8aunY+c0/9C/vzbRcebenxCQUdo0b
tVDp6z0oSInOe3bps5gdDkM/exhohGzUkicxYXALwqAWnhThh1CjSh++0umLqLjO
sxUW4po/i/9xWNXsQAxlpT5ZLnkvl9+Lcm8VNN763XOx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org