Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3N_It5pMuW5CQI9V2nO-Kb63_Ck.roa
File: 3N_It5pMuW5CQI9V2nO-Kb63_Ck.roa (raw, json)
Hash identifier: +VYxCwh8glP82CyEnpNsgn/RA8BbNPU9xY6LSbdK0eM=
Subject key identifier: DC:DF:C8:B7:9A:4C:B9:6E:42:40:8F:55:DA:73:BE:29:BE:B7:FC:29
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01856D419579D90C3AECD361E850024E59ED
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3N_It5pMuW5CQI9V2nO-Kb63_Ck.roa
Signing time: Sun 01 Jan 2023 12:14:52 +0000
ROA not before: Sun 01 Jan 2023 12:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44647
IP address blocks: 209.16.140.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 14 Feb 2023 23:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:95:79:d9:0c:3a:ec:d3:61:e8:50:02:4e:59:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 12:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcdfc8b79a4cb96e42408f55da73be29beb7fc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:20:71:75:90:1f:15:0b:45:f4:31:e3:23:
90:b5:7d:e6:bb:32:a3:0d:35:a5:af:38:8b:32:2e:
ad:c6:63:68:ce:7e:53:5f:7b:bf:6d:1f:e2:09:39:
bb:f5:6d:1e:fc:13:ba:6a:14:69:2e:60:1f:e5:82:
00:f1:8a:e1:c5:0e:50:9e:3c:34:35:3a:01:8a:45:
3b:0e:00:05:e9:32:6c:ea:98:f7:53:c4:c2:e4:5c:
75:70:69:57:93:b0:8c:bf:23:8c:59:5a:9f:ce:ad:
8c:83:d8:ac:75:9f:6e:6e:43:48:74:c8:00:19:5c:
6d:0d:a8:c4:35:fd:3a:6f:f6:3f:0c:87:a7:ef:ec:
2d:80:a7:59:2d:f7:53:40:37:64:ae:e0:75:d2:21:
43:1f:0b:c0:77:15:49:7b:8a:f5:c4:4c:71:9d:a9:
aa:87:e7:98:fd:66:2c:d3:81:d8:ac:89:7d:d2:7d:
22:76:d6:0e:e7:49:7b:80:f0:2b:65:6e:de:32:f4:
5b:0a:d3:af:d3:33:b2:e2:10:f0:28:6c:8b:e9:ff:
37:18:92:53:c8:14:c9:08:ae:56:aa:a8:1f:c2:ed:
cf:d0:79:72:71:b3:64:ba:02:22:ec:3f:a1:96:21:
df:4e:2e:f1:65:7d:40:6c:ad:1a:b2:e8:08:7b:d7:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:C8:B7:9A:4C:B9:6E:42:40:8F:55:DA:73:BE:29:BE:B7:FC:29
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3N_It5pMuW5CQI9V2nO-Kb63_Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.16.140.0/23
Signature Algorithm: sha256WithRSAEncryption
00:47:37:bf:fd:37:ac:aa:7d:b8:7f:50:ac:11:6a:a4:4a:95:
f7:78:24:3e:8b:46:08:f5:e9:04:74:87:be:52:08:77:e4:5d:
2c:18:21:f6:4a:13:7a:09:66:fe:85:02:94:9f:71:36:bd:f1:
61:b6:e8:65:36:39:ee:5e:ab:9a:ff:70:9d:11:e9:f6:00:59:
9d:f5:eb:93:cc:ef:1b:22:23:29:7d:9b:b8:f5:ab:d2:a3:fa:
37:c1:24:ec:fe:80:54:e9:ff:77:33:95:ff:2e:42:cf:b0:1d:
a1:a6:e7:9a:47:25:f2:68:47:e7:fe:05:75:0e:ad:e7:8b:80:
35:37:bd:ba:b6:16:d3:74:2a:73:d9:63:fe:1f:e8:4b:90:cd:
bd:e6:65:87:0b:3a:dc:89:b8:26:b6:b0:01:72:47:15:46:c3:
b1:0b:77:81:fb:e0:a7:0c:24:0a:b1:45:e3:18:e7:db:34:02:
52:4c:1a:1b:b7:0e:7c:8c:a5:91:6c:1d:75:49:b2:4b:41:ad:
19:28:ba:a1:4b:84:fe:1a:40:7e:db:43:ec:32:77:19:72:2d:
51:53:b1:e5:85:31:33:7d:b8:b2:31:47:d8:b8:12:0e:6b:54:
f4:03:bb:8d:a8:18:a6:1a:26:6a:49:24:a5:b7:64:dc:1d:3b:
e2:c4:a0:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtQZV52Qw67NNh6FACTlntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjMwMTAxMTIxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2RmYzhiNzlhNGNiOTZlNDI0MDhmNTVkYTczYmUyOWJlYjdmYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqAgcXWQHxULRfQx4yOQtX3muzKj
DTWlrziLMi6txmNozn5TX3u/bR/iCTm79W0e/BO6ahRpLmAf5YIA8YrhxQ5Qnjw0
NToBikU7DgAF6TJs6pj3U8TC5Fx1cGlXk7CMvyOMWVqfzq2Mg9isdZ9ubkNIdMgA
GVxtDajENf06b/Y/DIen7+wtgKdZLfdTQDdkruB10iFDHwvAdxVJe4r1xExxnamq
h+eY/WYs04HYrIl90n0idtYO50l7gPArZW7eMvRbCtOv0zOy4hDwKGyL6f83GJJT
yBTJCK5Wqqgfwu3P0HlycbNkugIi7D+hliHfTi7xZX1AbK0asugIe9cOqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNzfyLeaTLluQkCPVdpzvim+t/wpMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvM05fSXQ1cE11VzVDUUk5VjJuTy1LYjYzX0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RCMMA0G
CSqGSIb3DQEBCwUAA4IBAQAARze//Tesqn24f1CsEWqkSpX3eCQ+i0YI9ekEdIe+
Ugh35F0sGCH2ShN6CWb+hQKUn3E2vfFhtuhlNjnuXqua/3CdEen2AFmd9euTzO8b
IiMpfZu49avSo/o3wSTs/oBU6f93M5X/LkLPsB2hpueaRyXyaEfn/gV1Dq3ni4A1
N726thbTdCpz2WP+H+hLkM295mWHCzrcibgmtrABckcVRsOxC3eB++CnDCQKsUXj
GOfbNAJSTBobtw58jKWRbB11SbJLQa0ZKLqhS4T+GkB+20PsMncZci1RU7HlhTEz
fbiyMUfYuBIOa1T0A7uNqBimGiZqSSSlt2TcHTvixKBw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org