Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1klcc5JcGTsbBV2Rb5DPqssSc_I.roa
File: 1klcc5JcGTsbBV2Rb5DPqssSc_I.roa (raw, json)
Hash identifier: wMTk4hp9IqELZ/JLQAsfE8mrTaW4J0+lx1iOiWReliA=
Subject key identifier: D6:49:5C:73:92:5C:19:3B:1B:05:5D:91:6F:90:CF:AA:CB:12:73:F2
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A573EC0335E6182CDD6A338A4AF3AA249
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1klcc5JcGTsbBV2Rb5DPqssSc_I.roa
Signing time: Sat 02 Sep 2023 18:54:04 +0000
ROA not before: Sat 02 Sep 2023 18:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205663
IP address blocks: 176.105.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 18:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:3e:c0:33:5e:61:82:cd:d6:a3:38:a4:af:3a:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 2 18:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6495c73925c193b1b055d916f90cfaacb1273f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:a8:e0:c3:72:d7:51:b2:67:47:18:a1:1c:
b9:6b:45:96:9e:a3:e8:cc:3f:71:61:61:c2:bb:58:
b1:31:02:85:af:16:dc:e3:36:49:15:4f:99:42:25:
79:b1:67:08:11:f8:51:56:15:92:7b:66:a0:95:c5:
77:8a:03:16:bf:a6:4f:50:41:9e:18:59:03:92:b7:
87:e4:d4:ba:b4:32:64:3a:02:49:b6:4e:16:19:35:
ac:5b:93:9d:e3:2e:bf:de:0d:97:a6:f1:45:45:34:
61:48:8e:db:81:b1:6f:66:96:97:1b:fd:9a:1a:db:
b5:24:d7:e5:3a:b7:8b:d2:78:54:7f:fe:99:a8:18:
34:e2:5b:cb:f4:06:33:b3:60:7e:0b:7b:a6:ec:06:
9c:33:b9:dc:19:26:67:dc:12:33:8c:07:df:c0:05:
88:77:e4:f3:1a:fb:91:9e:6a:ad:63:7a:e6:fb:40:
af:81:39:d6:70:ea:da:76:bc:fc:b0:6c:bd:bd:98:
ce:a1:08:49:19:a6:59:37:a1:10:d7:1e:31:04:10:
ef:b0:63:16:d6:6b:81:1a:06:a0:f2:16:8d:6f:ea:
e0:91:48:a0:15:fd:48:d1:d2:23:70:df:34:a8:c6:
f1:c2:83:ba:c6:c8:d4:eb:17:9c:3d:39:cb:2e:43:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:5C:73:92:5C:19:3B:1B:05:5D:91:6F:90:CF:AA:CB:12:73:F2
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1klcc5JcGTsbBV2Rb5DPqssSc_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:78:d3:29:a6:6f:7e:63:c4:fc:7e:d7:34:5d:1c:de:c5:76:
60:57:6a:a7:f6:99:7e:e7:09:09:a6:26:2c:25:2d:f3:23:af:
46:e2:4e:7d:c8:c7:03:3f:7a:4d:25:2e:d4:2a:96:ee:e9:40:
b5:9a:82:7d:bd:22:9e:35:df:04:43:d3:b8:d4:ef:f9:5c:45:
34:51:92:f9:9c:2b:10:fd:ce:80:1e:fc:db:34:de:fc:e2:04:
45:53:70:1f:75:aa:56:f8:19:dc:2f:bb:8c:7d:57:8c:e4:84:
f9:ce:09:1d:58:e2:42:81:d8:13:66:8f:b5:41:1d:ee:ce:83:
67:2d:b7:3a:29:48:ac:80:28:05:9d:3f:f7:9d:37:86:53:71:
f5:7b:a4:08:55:b6:3b:5b:b6:2e:c8:cd:88:89:2e:73:e1:5d:
84:3b:25:72:37:c1:a6:c0:e2:26:3a:b0:b8:23:ee:06:e9:01:
37:cf:fb:d3:b4:e5:17:21:f7:fd:8f:42:34:ef:b7:bb:e3:98:
22:cd:6f:c7:48:39:8c:9e:98:34:2b:be:6b:d9:92:56:ea:02:
b4:f2:d0:c6:2e:56:42:84:13:72:53:f8:7a:fc:4a:4d:ce:b9:
0e:55:b1:39:fe:bd:e7:c2:55:c5:65:be:34:56:c4:6b:88:cc:
85:ee:34:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpXPsAzXmGCzdajOKSvOqJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwOTAyMTg1NDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjQ5NWM3MzkyNWMxOTNiMWIwNTVkOTE2ZjkwY2ZhYWNiMTI3M2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSeo4MNy11GyZ0cYoRy5a0WWnqPo
zD9xYWHCu1ixMQKFrxbc4zZJFU+ZQiV5sWcIEfhRVhWSe2aglcV3igMWv6ZPUEGe
GFkDkreH5NS6tDJkOgJJtk4WGTWsW5Od4y6/3g2XpvFFRTRhSI7bgbFvZpaXG/2a
Gtu1JNflOreL0nhUf/6ZqBg04lvL9AYzs2B+C3um7AacM7ncGSZn3BIzjAffwAWI
d+TzGvuRnmqtY3rm+0CvgTnWcOradrz8sGy9vZjOoQhJGaZZN6EQ1x4xBBDvsGMW
1muBGgag8haNb+rgkUigFf1I0dIjcN80qMbxwoO6xsjU6xecPTnLLkPZJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZJXHOSXBk7GwVdkW+Qz6rLEnPyMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvMWtsY2M1SmNHVHNiQlYyUmI1RFBxc3NTY19JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGnnMA0G
CSqGSIb3DQEBCwUAA4IBAQAfeNMppm9+Y8T8ftc0XRzexXZgV2qn9pl+5wkJpiYs
JS3zI69G4k59yMcDP3pNJS7UKpbu6UC1moJ9vSKeNd8EQ9O41O/5XEU0UZL5nCsQ
/c6AHvzbNN784gRFU3AfdapW+BncL7uMfVeM5IT5zgkdWOJCgdgTZo+1QR3uzoNn
Lbc6KUisgCgFnT/3nTeGU3H1e6QIVbY7W7YuyM2IiS5z4V2EOyVyN8GmwOImOrC4
I+4G6QE3z/vTtOUXIff9j0I077e745gizW/HSDmMnpg0K75r2ZJW6gK08tDGLlZC
hBNyU/h6/EpNzrkOVbE5/r3nwlXFZb40VsRriMyF7jQ6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org