Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/nO7pNOAiwIfkaVpgChNgldcrOks.roa
File: nO7pNOAiwIfkaVpgChNgldcrOks.roa (raw, json)
Hash identifier: WHpxGQa3T08iE34oHqwZsbzPdziYMfng9D3ON7BnFpM=
Subject key identifier: 9C:EE:E9:34:E0:22:C0:87:E4:69:5A:60:0A:13:60:95:D7:2B:3A:4B
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DC97E0700CB585F2C4E3533973B2B
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/nO7pNOAiwIfkaVpgChNgldcrOks.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39285
IP address blocks: 80.121.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c9:7e:07:00:cb:58:5f:2c:4e:35:33:97:3b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ceee934e022c087e4695a600a136095d72b3a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:d8:e3:64:2a:55:21:d7:39:46:b6:42:f5:
9b:9a:d4:ae:59:52:85:90:a9:b3:f9:0d:a6:35:5b:
37:44:c6:26:63:08:97:7f:67:d5:e3:ae:94:40:80:
f9:e8:fc:e4:fe:e1:be:17:56:1a:72:4f:c5:7e:12:
aa:5f:3f:8f:f8:d7:14:e5:86:58:25:b0:9d:df:52:
6e:d4:7b:7e:85:fd:79:84:89:61:0c:aa:28:ac:c3:
57:6d:9f:e3:77:67:c2:79:a4:2f:3e:f4:bc:3f:68:
bc:de:7e:91:ed:47:0b:65:69:c8:c4:99:62:78:ee:
4c:f4:c9:9f:cc:4c:b3:94:24:99:4c:34:45:f1:f0:
e3:9c:26:79:d4:72:84:48:d8:37:e2:55:de:02:76:
62:64:7a:64:65:3a:e2:65:51:b8:c0:c2:3e:69:55:
54:f9:40:8f:7e:c4:da:1f:24:0e:ba:c3:77:e3:2b:
c8:3a:c9:4c:14:1d:e3:78:f6:36:ff:3b:2c:39:73:
64:9f:2d:41:99:85:42:71:5b:2f:65:87:6d:d9:fc:
fb:55:3e:29:ee:b0:3f:2d:c7:e4:5b:07:bd:78:bc:
e1:33:c4:d5:5e:83:49:e9:5e:11:f4:e0:7c:bc:f9:
6c:d1:24:10:54:2d:27:ac:86:11:f2:58:7c:c1:cb:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:E9:34:E0:22:C0:87:E4:69:5A:60:0A:13:60:95:D7:2B:3A:4B
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/nO7pNOAiwIfkaVpgChNgldcrOks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.121.205.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7c:40:14:ba:ef:01:1d:c4:ed:1b:50:69:e7:a0:31:ef:dd:
a8:91:25:d1:1f:bd:2e:5d:90:28:22:5b:26:f8:45:1a:0f:42:
e0:d1:74:ac:6a:80:a0:ff:05:86:fd:28:bc:60:74:36:53:1e:
f4:0e:ea:87:5b:e7:8e:a6:e4:00:b7:be:ae:f6:62:f0:ba:07:
2b:d2:94:3f:5c:b5:5b:f7:88:59:0d:af:13:63:9f:8f:f6:c1:
2d:f0:15:c6:c7:20:00:da:1f:c8:29:52:6f:0d:cf:0b:cd:f9:
9a:24:ca:62:1b:17:60:cf:1b:32:dd:74:83:34:3b:f5:76:ca:
04:f8:3d:7c:45:bf:2b:87:d6:b4:ff:66:6a:cf:63:5e:43:3e:
39:1d:5a:1e:40:d7:c5:5d:d6:11:38:a7:3c:f4:12:54:99:ed:
5d:b9:60:a4:38:c3:84:f7:ef:6a:92:33:3f:77:d9:9e:07:66:
49:9b:54:37:07:b7:7a:6f:fc:fa:5b:cc:db:18:72:f7:00:3b:
ae:16:50:c3:8f:cd:d4:3a:f9:d7:ab:48:16:ee:a4:78:90:98:
ac:ea:5c:18:4e:ab:30:0c:c1:4e:ac:a3:b1:89:2c:53:35:38:
fc:27:19:4b:d7:55:e6:84:c6:e5:cc:b3:c8:d3:41:54:46:bc:
fb:ae:6e:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcl+BwDLWF8sTjUzlzsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2VlZTkzNGUwMjJjMDg3ZTQ2OTVhNjAwYTEzNjA5NWQ3MmIzYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDrY42QqVSHXOUa2QvWbmtSuWVKF
kKmz+Q2mNVs3RMYmYwiXf2fV466UQID56Pzk/uG+F1Yack/FfhKqXz+P+NcU5YZY
JbCd31Ju1Ht+hf15hIlhDKoorMNXbZ/jd2fCeaQvPvS8P2i83n6R7UcLZWnIxJli
eO5M9MmfzEyzlCSZTDRF8fDjnCZ51HKESNg34lXeAnZiZHpkZTriZVG4wMI+aVVU
+UCPfsTaHyQOusN34yvIOslMFB3jePY2/zssOXNkny1BmYVCcVsvZYdt2fz7VT4p
7rA/LcfkWwe9eLzhM8TVXoNJ6V4R9OB8vPls0SQQVC0nrIYR8lh8wcu2DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJzu6TTgIsCH5GlaYAoTYJXXKzpLMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvbk83cE5PQWl3SWZrYVZwZ0NoTmdsZGNyT2tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHnNMA0G
CSqGSIb3DQEBCwUAA4IBAQCUfEAUuu8BHcTtG1Bp56Ax792okSXRH70uXZAoIlsm
+EUaD0Lg0XSsaoCg/wWG/Si8YHQ2Ux70DuqHW+eOpuQAt76u9mLwugcr0pQ/XLVb
94hZDa8TY5+P9sEt8BXGxyAA2h/IKVJvDc8LzfmaJMpiGxdgzxsy3XSDNDv1dsoE
+D18Rb8rh9a0/2Zqz2NeQz45HVoeQNfFXdYROKc89BJUme1duWCkOMOE9+9qkjM/
d9meB2ZJm1Q3B7d6b/z6W8zbGHL3ADuuFlDDj83UOvnXq0gW7qR4kJis6lwYTqsw
DMFOrKOxiSxTNTj8JxlL11XmhMblzLPI00FURrz7rm4P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org