Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/1-TvOao5hfdSeSK-b8A-6N4gZCEE.roa
File: 1-TvOao5hfdSeSK-b8A-6N4gZCEE.roa (raw, json)
Hash identifier: J2P0v5bzHJVzgL62XaZZRu1a6P1fXsg9Enp7Dbz0Wf4=
Subject key identifier: F9:3B:CE:6A:8E:61:7D:D4:9E:48:AF:9B:F0:0F:BA:37:88:19:08:41
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 01856C413E9B0A08451A6078345AE5056BCA
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/1-TvOao5hfdSeSK-b8A-6N4gZCEE.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 141.87.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3e:9b:0a:08:45:1a:60:78:34:5a:e5:05:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f93bce6a8e617dd49e48af9bf00fba3788190841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:06:04:e8:1a:80:2f:78:8f:c3:77:80:b2:
a6:27:19:04:a0:72:3d:75:ea:5b:9d:2c:e8:92:f3:
26:10:a2:51:59:88:ff:ef:c3:2b:84:16:33:ad:56:
92:3a:4f:56:5d:fa:a7:ef:df:db:70:46:28:49:80:
19:b4:56:f8:b7:41:05:57:67:d3:9f:24:b7:d5:a0:
15:94:88:5e:25:3d:2c:71:78:72:32:1f:22:fa:b3:
a9:f0:b2:62:df:29:24:a8:ad:f2:ca:43:88:09:0b:
5a:7d:66:ad:d1:97:9f:3c:c6:e8:81:3c:6d:38:12:
c9:3c:80:ed:92:89:bc:d1:3f:0b:3f:e2:4c:10:5d:
10:bd:9d:27:92:88:1d:b5:f4:41:65:a5:85:2c:81:
33:18:39:70:ef:0e:dd:34:2d:72:54:07:e2:29:7f:
89:53:74:ab:70:33:14:5e:04:57:56:03:a9:bc:a7:
80:41:26:cf:7c:2a:81:aa:ba:50:de:87:50:75:28:
c4:46:8b:a1:f6:82:49:6b:bc:66:61:ff:73:e2:71:
37:6d:92:37:6a:49:98:83:58:82:7e:d5:b8:93:90:
7f:21:2c:27:fc:97:c3:d9:28:f1:43:d2:92:34:e7:
fc:75:ed:bc:87:e5:ef:66:e0:00:3e:bb:ba:fa:d9:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3B:CE:6A:8E:61:7D:D4:9E:48:AF:9B:F0:0F:BA:37:88:19:08:41
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/1-TvOao5hfdSeSK-b8A-6N4gZCEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:eb:ea:16:93:5b:8c:6f:0d:1f:93:55:64:da:9a:84:e4:02:
60:c8:f2:a5:3e:07:74:92:b3:68:6f:33:26:09:93:1c:f6:2a:
a2:c3:02:70:87:c6:6f:3b:df:5d:f6:10:fe:90:02:44:23:8c:
1b:b4:51:ae:a5:d4:33:81:94:6c:8f:5f:11:41:4b:53:e3:ca:
32:82:fb:63:c5:28:a8:62:77:de:b4:e5:dd:64:8e:82:b0:28:
fd:2f:18:dc:da:3d:f6:5e:e0:80:a2:ac:ac:74:35:f4:8d:64:
1c:78:4c:d3:01:ac:6b:dd:0d:32:26:89:86:39:f6:82:c5:1a:
87:df:4b:7d:4b:c0:ba:ed:19:35:6a:13:22:96:1a:ee:53:b0:
0f:f8:62:b6:06:1e:d7:3c:b6:be:c3:da:ba:58:56:5e:d1:63:
7c:41:51:b2:ff:c7:56:d4:e6:24:28:25:83:b7:9b:1f:c1:f7:
f2:99:35:f7:e4:47:46:67:8b:b6:57:0c:a2:79:ea:55:0c:f0:
6a:82:25:32:9e:f1:1d:17:95:14:0e:bf:eb:af:29:4f:05:53:
79:47:6b:c4:23:ae:99:61:83:36:30:d0:ea:09:a1:0f:71:3b:
6d:97:0a:a3:48:0d:20:10:5c:24:c4:a0:64:9f:d2:34:c6:06:
aa:08:e0:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsQT6bCghFGmB4NFrlBWvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjMwMTAxMDczNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNiY2U2YThlNjE3ZGQ0OWU0OGFmOWJmMDBmYmEzNzg4MTkwODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi4GBOgagC94j8N3gLKmJxkEoHI9
depbnSzokvMmEKJRWYj/78MrhBYzrVaSOk9WXfqn79/bcEYoSYAZtFb4t0EFV2fT
nyS31aAVlIheJT0scXhyMh8i+rOp8LJi3ykkqK3yykOICQtafWat0ZefPMbogTxt
OBLJPIDtkom80T8LP+JMEF0QvZ0nkogdtfRBZaWFLIEzGDlw7w7dNC1yVAfiKX+J
U3SrcDMUXgRXVgOpvKeAQSbPfCqBqrpQ3odQdSjERouh9oJJa7xmYf9z4nE3bZI3
akmYg1iCftW4k5B/ISwn/JfD2SjxQ9KSNOf8de28h+XvZuAAPru6+tnUgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPk7zmqOYX3Unkivm/APujeIGQhBMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvMS1Udk9hbzVoZmRTZVNLLWI4QS02TjRnWkNFRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjMvZGY1YmFkLWFjNTktNDEzZS05YWQwLTU5OTVhZThhY2I5
Zi8xL2VhSFBHcWo3eE9NemVHYy12UVUyU0lEaXFSOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAI1XMA0G
CSqGSIb3DQEBCwUAA4IBAQAA6+oWk1uMbw0fk1Vk2pqE5AJgyPKlPgd0krNobzMm
CZMc9iqiwwJwh8ZvO99d9hD+kAJEI4wbtFGupdQzgZRsj18RQUtT48oygvtjxSio
YnfetOXdZI6CsCj9Lxjc2j32XuCAoqysdDX0jWQceEzTAaxr3Q0yJomGOfaCxRqH
30t9S8C67Rk1ahMilhruU7AP+GK2Bh7XPLa+w9q6WFZe0WN8QVGy/8dW1OYkKCWD
t5sfwffymTX35EdGZ4u2VwyieepVDPBqgiUynvEdF5UUDr/rrylPBVN5R2vEI66Z
YYM2MNDqCaEPcTttlwqjSA0gEFwkxKBkn9I0xgaqCOAy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:34 2024 by rpki-client on console-ams.rpki-client.org