Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/oKy1f59CXPgSZE-cm_oSb8iKJHk.roa
File: oKy1f59CXPgSZE-cm_oSb8iKJHk.roa (raw, json)
Hash identifier: koI511+4m9IEjjGUtxMZBgdQXuB9GxAhf0u3a4z7w+0=
Subject key identifier: A0:AC:B5:7F:9F:42:5C:F8:12:64:4F:9C:9B:FA:12:6F:C8:8A:24:79
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 01856FC2652A8FBE0D86F31B86283689E224
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/oKy1f59CXPgSZE-cm_oSb8iKJHk.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.7.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:65:2a:8f:be:0d:86:f3:1b:86:28:36:89:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0acb57f9f425cf812644f9c9bfa126fc88a2479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:09:4c:0c:9f:d3:11:b5:2b:5b:d6:69:f0:
0e:3e:4f:da:10:4b:be:ad:04:a9:51:d6:64:5c:ec:
6e:e6:1a:7f:56:38:bb:c9:5f:8a:4a:f1:9e:94:8e:
d7:ed:5c:34:5a:90:ab:f2:0c:a8:52:fc:b9:4d:6c:
3d:04:af:bf:cc:58:45:78:7a:52:19:f9:07:b3:4f:
45:ec:f5:6a:ea:9d:b5:31:c0:26:b7:ae:25:67:98:
1d:7d:1d:26:cf:2f:40:fe:5d:d5:c2:c5:6f:59:f7:
fb:23:2e:3c:2a:c4:7c:9c:67:b2:73:04:5e:ee:d2:
82:99:9f:cc:c9:28:cd:9b:0d:f5:e5:14:7b:26:6f:
b9:00:6c:16:84:6c:cf:c7:af:57:d0:d8:4f:ea:28:
67:65:94:76:51:73:01:0a:e3:cd:13:e3:dd:9d:29:
43:a6:4f:c6:0c:cf:c1:c6:11:d5:df:62:3a:cb:6d:
cf:77:f5:2a:02:12:86:1b:36:2e:a8:45:26:f6:07:
e9:f9:89:0e:5a:bc:a4:36:52:81:a3:03:50:94:07:
4d:d9:d2:00:8a:25:df:f7:2d:08:30:f4:bf:ca:f5:
eb:2f:e8:c5:84:3a:98:46:dd:3c:2c:c9:1a:76:01:
f1:33:5f:44:a3:01:11:8b:51:4c:6c:b9:c2:b1:03:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:B5:7F:9F:42:5C:F8:12:64:4F:9C:9B:FA:12:6F:C8:8A:24:79
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/oKy1f59CXPgSZE-cm_oSb8iKJHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1d:07:ce:aa:0d:34:4c:16:bc:eb:a9:3e:83:98:14:d7:fd:
32:65:8b:a1:ee:7a:47:c4:a2:be:ac:34:8a:09:7c:c6:8f:44:
c0:0c:7c:f7:a8:33:86:67:9d:2c:1f:54:6d:3a:4f:91:ed:7c:
9a:8b:7c:16:73:33:c0:97:e7:6e:b6:5e:ba:5d:a1:3b:62:f9:
53:35:8d:4c:58:bb:22:69:b7:e5:b9:c7:79:6d:9a:61:25:7f:
23:59:1c:a3:46:ef:ca:fc:82:d4:3b:cf:9c:dc:4e:a5:ea:cf:
a9:40:fa:65:fe:22:11:50:49:a0:5a:18:ed:d5:d0:78:2e:9d:
2c:19:a8:41:5b:f0:dc:6e:02:85:47:dd:f9:31:f0:15:fc:f6:
35:d7:88:59:ce:e7:b8:78:68:c4:e0:3f:a3:38:65:f0:58:85:
9a:72:4d:05:a1:ce:02:eb:92:46:d4:6b:a0:ad:39:b4:45:96:
bc:a6:1d:99:5d:6b:5d:f1:79:51:8f:6d:47:cb:d5:2a:e3:af:
18:d5:6e:e4:d0:8a:58:72:b9:24:b2:ee:20:28:8e:be:2d:61:
5b:d1:99:b7:9c:f5:37:8e:ef:b2:ba:30:23:de:b4:3b:09:37:
05:52:f8:9a:4f:6e:e8:a3:72:80:12:13:0d:97:16:a2:12:22:
c6:f0:d1:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwmUqj74NhvMbhig2ieIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxN2NjMzdmMWVkODFhYzM3YjIwZmFmMGY0MmM0MWFiODA4
ZjEzYzEwHhcNMjMwMTAxMjM1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGFjYjU3ZjlmNDI1Y2Y4MTI2NDRmOWM5YmZhMTI2ZmM4OGEyNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/wJTAyf0xG1K1vWafAOPk/aEEu+
rQSpUdZkXOxu5hp/Vji7yV+KSvGelI7X7Vw0WpCr8gyoUvy5TWw9BK+/zFhFeHpS
GfkHs09F7PVq6p21McAmt64lZ5gdfR0mzy9A/l3VwsVvWff7Iy48KsR8nGeycwRe
7tKCmZ/MySjNmw315RR7Jm+5AGwWhGzPx69X0NhP6ihnZZR2UXMBCuPNE+PdnSlD
pk/GDM/BxhHV32I6y23Pd/UqAhKGGzYuqEUm9gfp+YkOWrykNlKBowNQlAdN2dIA
iiXf9y0IMPS/yvXrL+jFhDqYRt08LMkadgHxM19EowERi1FMbLnCsQNfiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCstX+fQlz4EmRPnJv6Em/IiiR5MB8GA1UdIwQY
MBaAFMF8w38e2BrDeyD68PQsQauAjxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQt
NmQwN2Q3ZjFhNzAxLzEvb0t5MWY1OUNYUGdTWkUtY21fb1NiOGlLSkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQtNmQwN2Q3ZjFhNzAx
LzEvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQeAMA0G
CSqGSIb3DQEBCwUAA4IBAQBaHQfOqg00TBa866k+g5gU1/0yZYuh7npHxKK+rDSK
CXzGj0TADHz3qDOGZ50sH1RtOk+R7Xyai3wWczPAl+dutl66XaE7YvlTNY1MWLsi
abflucd5bZphJX8jWRyjRu/K/ILUO8+c3E6l6s+pQPpl/iIRUEmgWhjt1dB4Lp0s
GahBW/DcbgKFR935MfAV/PY114hZzue4eGjE4D+jOGXwWIWack0Foc4C65JG1Gug
rTm0RZa8ph2ZXWtd8XlRj21Hy9Uq468Y1W7k0IpYcrkksu4gKI6+LWFb0Zm3nPU3
ju+yujAj3rQ7CTcFUviaT27oo3KAEhMNlxaiEiLG8NHj
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:37 2024 by rpki-client on console-ams.rpki-client.org