Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VWYIhixbwybElxrwi3BewdlBUNo.roa
File: VWYIhixbwybElxrwi3BewdlBUNo.roa (raw, json)
Hash identifier: NOs5wI/id+U/nK4ySiRFK3+SHX2HIHagJS9C7onFKPg=
Subject key identifier: 55:66:08:86:2C:5B:C3:26:C4:97:1A:F0:8B:70:5E:C1:D9:41:50:DA
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DCDEC7F4F6C8EC4994E54271C7D76
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VWYIhixbwybElxrwi3BewdlBUNo.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61022
IP address blocks: 80.121.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cd:ec:7f:4f:6c:8e:c4:99:4e:54:27:1c:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556608862c5bc326c4971af08b705ec1d94150da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:23:07:44:6e:8a:9e:c5:4b:88:a1:f7:55:
2b:a3:13:58:28:49:be:59:cd:81:b3:86:1e:c5:3d:
7a:bd:3a:2e:04:4b:00:53:bd:92:a3:44:c2:3c:cc:
58:20:09:34:ac:7a:ae:d4:e1:a5:97:41:d5:ad:54:
07:b6:78:3f:48:d4:f1:f2:17:39:fc:66:99:dc:91:
d2:bb:f3:1c:20:2b:66:28:75:48:c0:ca:69:78:5b:
85:1c:ec:02:66:48:9b:6e:0c:98:be:9e:17:55:d8:
91:4d:0e:1a:f7:27:e6:63:15:58:98:df:d4:85:31:
54:d9:f4:7c:91:2d:14:ff:ae:c3:ca:96:11:0c:9a:
0d:03:c2:70:23:70:c4:e6:71:e4:25:0f:b4:ce:fc:
ac:b2:17:da:ce:ee:27:c2:fc:9e:6d:0e:ff:cc:33:
84:7a:bc:0a:ae:1e:2d:6a:86:41:9e:e9:03:36:ef:
e7:cb:76:b2:04:bb:9c:f1:96:d2:0a:a1:09:9a:20:
4c:c7:8e:6f:af:59:5b:4b:69:2a:4f:e8:b9:c5:1e:
7c:da:09:21:44:67:ab:13:ab:43:ed:62:78:13:f6:
7a:87:fe:b9:80:02:c9:25:a6:60:0c:82:4f:17:1e:
1b:7b:f9:19:12:db:da:29:f0:2b:27:84:1e:70:a2:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:66:08:86:2C:5B:C3:26:C4:97:1A:F0:8B:70:5E:C1:D9:41:50:DA
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VWYIhixbwybElxrwi3BewdlBUNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.121.202.0/24
Signature Algorithm: sha256WithRSAEncryption
27:35:f8:f1:88:17:00:6e:ee:88:58:13:02:0b:e6:42:06:96:
f4:d6:aa:ae:ad:c9:fe:a3:84:46:3c:30:dd:91:06:eb:08:3a:
ed:e4:18:2e:1d:7e:01:fc:b6:ef:67:a2:3c:6c:29:50:7d:cd:
4c:0b:0f:7c:63:15:77:a1:85:cb:22:e4:ab:0d:d2:7f:83:c6:
47:25:ad:5a:84:99:0a:0d:d5:93:49:0d:14:fd:6e:46:e0:c7:
79:8f:5b:bc:d4:9e:d6:8f:e1:bd:11:b2:76:2e:e2:08:c2:5b:
ee:72:01:f6:4b:5a:ab:72:9c:da:d2:ec:39:99:d2:41:70:16:
34:18:32:7c:3f:e7:68:86:36:8b:7d:c1:cb:09:6d:05:88:74:
e5:a4:9c:2e:a5:06:ed:d5:73:e7:00:14:bc:4e:b6:02:4a:0b:
71:a5:52:21:16:5a:d1:4c:a0:bb:14:56:9c:a8:51:56:36:01:
a7:de:2f:ee:f3:b9:c4:cb:cc:7c:66:fe:8a:f6:69:44:aa:0e:
b9:10:68:cf:47:41:fe:05:e0:a6:75:95:38:ef:39:74:c3:f8:
b4:c5:32:1e:e0:be:60:b9:d0:d5:84:37:ac:3d:d2:19:05:56:
1b:c9:0a:64:1f:28:b3:5d:e5:31:4d:c5:ae:f3:e7:2b:da:b6:
55:f5:33:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXc3sf09sjsSZTlQnHH12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTY2MDg4NjJjNWJjMzI2YzQ5NzFhZjA4YjcwNWVjMWQ5NDE1MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgjB0Ruip7FS4ih91UroxNYKEm+
Wc2Bs4YexT16vTouBEsAU72So0TCPMxYIAk0rHqu1OGll0HVrVQHtng/SNTx8hc5
/GaZ3JHSu/McICtmKHVIwMppeFuFHOwCZkibbgyYvp4XVdiRTQ4a9yfmYxVYmN/U
hTFU2fR8kS0U/67DypYRDJoNA8JwI3DE5nHkJQ+0zvysshfazu4nwvyebQ7/zDOE
erwKrh4taoZBnukDNu/ny3ayBLuc8ZbSCqEJmiBMx45vr1lbS2kqT+i5xR582gkh
RGerE6tD7WJ4E/Z6h/65gALJJaZgDIJPFx4be/kZEtvaKfArJ4QecKKbZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVmCIYsW8MmxJca8ItwXsHZQVDaMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvVldZSWhpeGJ3eWJFbHhyd2kzQmV3ZGxCVU5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHnKMA0G
CSqGSIb3DQEBCwUAA4IBAQAnNfjxiBcAbu6IWBMCC+ZCBpb01qqurcn+o4RGPDDd
kQbrCDrt5BguHX4B/LbvZ6I8bClQfc1MCw98YxV3oYXLIuSrDdJ/g8ZHJa1ahJkK
DdWTSQ0U/W5G4Md5j1u81J7Wj+G9EbJ2LuIIwlvucgH2S1qrcpza0uw5mdJBcBY0
GDJ8P+dohjaLfcHLCW0FiHTlpJwupQbt1XPnABS8TrYCSgtxpVIhFlrRTKC7FFac
qFFWNgGn3i/u87nEy8x8Zv6K9mlEqg65EGjPR0H+BeCmdZU47zl0w/i0xTIe4L5g
udDVhDesPdIZBVYbyQpkHyizXeUxTcWu8+cr2rZV9TM3
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:49 2024 by rpki-client on console-ams.rpki-client.org