Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/yzAtEkl2pCM0_inYIn_cNme-_D0.roa
File: yzAtEkl2pCM0_inYIn_cNme-_D0.roa (raw, json)
Hash identifier: jIn7qPWRk1pYVObUkc10UR+XZIGejqWp8Y956m20Zak=
Subject key identifier: CB:30:2D:12:49:76:A4:23:34:FE:29:D8:22:7F:DC:36:67:BE:FC:3D
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 018CCA99AE93A5BA066DA8EA94A9E5C0CB40
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/yzAtEkl2pCM0_inYIn_cNme-_D0.roa
Signing time: Tue 02 Jan 2024 14:35:18 +0000
ROA not before: Tue 02 Jan 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41743
IP address blocks: 176.115.136.0/24 maxlen: 24
176.115.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 16 Jan 2024 15:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:ae:93:a5:ba:06:6d:a8:ea:94:a9:e5:c0:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jan 2 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb302d124976a42334fe29d8227fdc3667befc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1a:46:9b:6f:ac:84:a5:62:0d:12:48:a4:e7:
31:75:4c:9d:fd:52:5a:fd:c7:ac:c0:b1:09:0f:10:
a7:f5:13:6f:86:51:fb:b5:c0:0d:a2:72:3e:be:7e:
51:0c:a1:5d:8a:e0:42:f1:8b:88:46:d8:9f:58:61:
6d:5e:b1:5e:ab:49:d9:4f:0b:59:9d:7e:2d:6e:14:
2f:90:20:cd:4e:69:d9:41:be:ac:56:c0:2e:37:50:
04:dd:a4:9d:4a:e4:36:ff:93:12:c8:f2:4e:9b:26:
f0:ae:da:ee:a3:74:a4:7e:4f:ac:e2:56:b3:e2:fb:
1f:74:7c:df:89:0c:e2:2d:a7:de:00:6c:58:ce:f7:
b7:ac:8e:54:c1:44:6e:cd:e5:58:af:c3:d6:eb:e2:
4d:c0:1d:75:4b:2e:f3:56:65:35:f8:01:88:cb:cb:
a0:8a:8a:e9:07:73:a1:16:fa:c7:93:3c:b3:ed:8f:
3a:75:63:a0:e3:aa:6f:64:5d:9b:4a:d6:dd:46:47:
13:0b:f6:48:01:67:db:72:38:e6:39:8f:04:53:51:
b1:90:1c:fe:5e:4f:47:cf:13:e3:6a:e3:f3:fb:c8:
88:91:bf:6e:8a:0b:f7:04:39:b6:0a:ca:ba:b8:14:
1e:c0:fe:34:7d:79:11:8f:9b:57:68:4d:ea:23:40:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:2D:12:49:76:A4:23:34:FE:29:D8:22:7F:DC:36:67:BE:FC:3D
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/yzAtEkl2pCM0_inYIn_cNme-_D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.136.0/21
Signature Algorithm: sha256WithRSAEncryption
47:bc:18:e4:2b:74:41:66:4f:ea:ac:af:cd:bc:cd:2e:a7:12:
d5:4e:f7:05:9e:38:99:17:44:ae:0f:48:49:c5:e0:9d:03:aa:
a6:a3:96:5e:2f:43:c1:f4:42:85:cf:c0:4a:e9:6a:74:5a:cf:
93:2b:ab:ca:f4:c8:c3:82:8f:73:27:ac:79:c4:35:08:f1:ce:
2e:36:b4:8d:0a:72:44:5d:ad:ad:01:14:7d:ce:e3:3f:14:bc:
aa:53:11:50:1d:31:d5:f7:d5:f5:3e:3c:a1:e7:e4:34:25:c4:
0a:c8:0f:b3:b2:04:31:c0:e0:ce:eb:89:6e:31:dd:fd:d7:bf:
37:73:c2:62:97:33:de:06:77:b7:15:25:52:3b:c0:0c:7e:44:
92:42:29:9f:7d:89:ad:a1:c9:90:38:7c:f1:c8:9a:08:be:cf:
3c:f8:eb:51:73:c2:99:d1:98:f6:07:64:9f:44:c0:a7:2c:76:
19:34:72:f2:54:b3:d7:ad:cd:f5:b5:b1:e2:53:5e:3b:c9:e9:
54:a6:4e:26:7a:85:fc:d9:19:bc:0a:21:f2:53:ef:4c:c2:ae:
98:08:4e:66:00:1d:ce:73:bf:b5:b1:3c:53:40:59:00:26:05:
be:ae:c8:75:fc:08:e4:d7:6a:f1:a8:8d:42:a5:ca:59:22:34:
a1:5e:f1:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKma6TpboGbajqlKnlwMtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1
ZDBhNTEwHhcNMjQwMTAyMTQzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjMwMmQxMjQ5NzZhNDIzMzRmZTI5ZDgyMjdmZGMzNjY3YmVmYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBpGm2+shKViDRJIpOcxdUyd/VJa
/ceswLEJDxCn9RNvhlH7tcANonI+vn5RDKFdiuBC8YuIRtifWGFtXrFeq0nZTwtZ
nX4tbhQvkCDNTmnZQb6sVsAuN1AE3aSdSuQ2/5MSyPJOmybwrtruo3Skfk+s4laz
4vsfdHzfiQziLafeAGxYzve3rI5UwURuzeVYr8PW6+JNwB11Sy7zVmU1+AGIy8ug
iorpB3OhFvrHkzyz7Y86dWOg46pvZF2bStbdRkcTC/ZIAWfbcjjmOY8EU1GxkBz+
Xk9HzxPjauPz+8iIkb9uigv3BDm2Csq6uBQewP40fXkRj5tXaE3qI0A8UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMswLRJJdqQjNP4p2CJ/3DZnvvw9MB8GA1UdIwQY
MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt
Mjc5OTA2ZWI1Yzg1LzEveXpBdEVrbDJwQ00wX2luWUluX2NObWUtX0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1
LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHOIMA0G
CSqGSIb3DQEBCwUAA4IBAQBHvBjkK3RBZk/qrK/NvM0upxLVTvcFnjiZF0SuD0hJ
xeCdA6qmo5ZeL0PB9EKFz8BK6Wp0Ws+TK6vK9MjDgo9zJ6x5xDUI8c4uNrSNCnJE
Xa2tARR9zuM/FLyqUxFQHTHV99X1Pjyh5+Q0JcQKyA+zsgQxwODO64luMd391783
c8JilzPeBne3FSVSO8AMfkSSQimffYmtocmQOHzxyJoIvs88+OtRc8KZ0Zj2B2Sf
RMCnLHYZNHLyVLPXrc31tbHiU147yelUpk4meoX82Rm8CiHyU+9Mwq6YCE5mAB3O
c7+1sTxTQFkAJgW+rsh1/Ajk12rxqI1CpcpZIjShXvFQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org