Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/2s84RxY7Bo0HmvjC4c5ITXiXVJw.roa
File: 2s84RxY7Bo0HmvjC4c5ITXiXVJw.roa (raw, json)
Hash identifier: 72BXLWGU/X9J7svF0Tm83g3DBRPPBRAF76tL/aHZOxs=
Subject key identifier: DA:CF:38:47:16:3B:06:8D:07:9A:F8:C2:E1:CE:48:4D:78:97:54:9C
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018CCA29B9688E3C60D5F6166BD7730B27CB
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/2s84RxY7Bo0HmvjC4c5ITXiXVJw.roa
Signing time: Tue 02 Jan 2024 12:33:01 +0000
ROA not before: Tue 02 Jan 2024 12:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36113
IP address blocks: 202.50.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 20:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b9:68:8e:3c:60:d5:f6:16:6b:d7:73:0b:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 2 12:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dacf3847163b068d079af8c2e1ce484d7897549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:ba:ee:1c:52:88:02:7e:66:7e:ab:7c:5b:
2d:63:29:f6:74:99:87:2f:69:f4:c1:aa:1a:29:a6:
4f:b6:d9:11:24:17:51:42:92:2a:97:f9:ce:61:d7:
4d:c3:d8:17:0f:5d:fe:7c:6b:2e:11:1e:3d:c5:0e:
77:0f:53:11:98:5e:3a:55:c7:1c:96:5f:2b:a4:80:
d9:ee:53:30:d9:f9:ad:1d:f7:49:dd:2c:5a:6e:9a:
c3:60:73:d1:a5:7a:7a:f6:48:c4:7f:c4:a1:f5:30:
bb:16:70:2d:0d:f3:1d:d0:77:3e:b4:7d:49:89:38:
35:73:3d:b6:24:ef:75:eb:14:69:e4:87:ff:b1:53:
94:4e:6c:15:90:93:77:50:9d:b6:49:1e:fd:d5:1e:
b8:aa:a3:59:d6:92:40:9d:e4:03:c2:6a:0b:57:bb:
43:48:15:56:d8:80:87:eb:34:c4:29:fa:12:2a:dd:
81:9b:e0:c0:6e:cf:ca:5c:d0:75:23:15:05:1e:15:
b4:9c:c9:c7:6e:ff:a6:14:a8:75:68:3f:cb:ba:45:
a2:70:a2:59:10:ea:18:a1:d9:68:04:27:55:39:41:
08:11:4f:da:c8:19:ef:bf:eb:9b:fe:98:23:fa:83:
1c:1f:bd:46:62:8c:fd:f8:20:c4:1e:25:53:2c:d7:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:38:47:16:3B:06:8D:07:9A:F8:C2:E1:CE:48:4D:78:97:54:9C
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/2s84RxY7Bo0HmvjC4c5ITXiXVJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d9:90:51:6b:82:90:e4:42:70:49:d4:ec:f7:ca:e0:c2:26:
cc:ab:4b:4e:2c:58:06:05:ee:dd:b9:4b:e3:b2:fb:4d:7f:bc:
68:cd:d8:42:29:08:a8:a5:55:fb:20:a2:17:7d:1c:ec:5b:6f:
bd:60:f1:d6:45:a5:11:57:0e:02:52:a2:94:4d:17:64:b3:92:
0e:d0:aa:15:19:62:6f:97:b7:94:61:fc:79:d1:d9:79:0f:a7:
ae:41:0b:5d:2b:c2:44:12:d4:2c:13:3c:e0:23:51:e5:65:9b:
a3:0e:6c:a7:aa:63:5a:e8:11:a0:95:f3:4d:a8:f9:4c:2e:38:
18:e1:cf:3b:b7:c5:70:3f:50:0e:35:c8:10:9d:46:86:5a:59:
00:23:0b:4a:32:e3:4d:a5:94:27:b9:75:9c:77:1e:c5:bd:0d:
99:a0:23:fd:6b:48:fb:ab:a9:aa:11:e8:48:98:c4:35:b1:54:
62:fd:42:6c:a2:65:d6:e9:d7:30:7b:47:44:c1:c6:37:7e:92:
cd:67:4a:34:6a:07:3d:13:95:a6:d7:78:0e:3f:7c:83:38:c9:
7c:8b:db:80:b9:9b:3d:aa:99:b5:48:24:ce:e4:06:aa:de:5f:
a4:52:44:10:e4:53:09:3e:d6:8d:d8:ad:f1:12:79:3c:ae:e9:
35:78:7e:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKblojjxg1fYWa9dzCyfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjQwMTAyMTIzMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWNmMzg0NzE2M2IwNjhkMDc5YWY4YzJlMWNlNDg0ZDc4OTc1NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjy67hxSiAJ+Zn6rfFstYyn2dJmH
L2n0waoaKaZPttkRJBdRQpIql/nOYddNw9gXD13+fGsuER49xQ53D1MRmF46Vccc
ll8rpIDZ7lMw2fmtHfdJ3SxabprDYHPRpXp69kjEf8Sh9TC7FnAtDfMd0Hc+tH1J
iTg1cz22JO916xRp5If/sVOUTmwVkJN3UJ22SR791R64qqNZ1pJAneQDwmoLV7tD
SBVW2ICH6zTEKfoSKt2Bm+DAbs/KXNB1IxUFHhW0nMnHbv+mFKh1aD/LukWicKJZ
EOoYodloBCdVOUEIEU/ayBnvv+ub/pgj+oMcH71GYoz9+CDEHiVTLNdfwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrPOEcWOwaNB5r4wuHOSE14l1ScMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvMnM4NFJ4WTdCbzBIbXZqQzRjNUlUWGlYVkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjL9MA0G
CSqGSIb3DQEBCwUAA4IBAQCi2ZBRa4KQ5EJwSdTs98rgwibMq0tOLFgGBe7duUvj
svtNf7xozdhCKQiopVX7IKIXfRzsW2+9YPHWRaURVw4CUqKUTRdks5IO0KoVGWJv
l7eUYfx50dl5D6euQQtdK8JEEtQsEzzgI1HlZZujDmynqmNa6BGglfNNqPlMLjgY
4c87t8VwP1AONcgQnUaGWlkAIwtKMuNNpZQnuXWcdx7FvQ2ZoCP9a0j7q6mqEehI
mMQ1sVRi/UJsomXW6dcwe0dEwcY3fpLNZ0o0agc9E5Wm13gOP3yDOMl8i9uAuZs9
qpm1SCTO5Aaq3l+kUkQQ5FMJPtaN2K3xEnk8ruk1eH4R
Generated at Sun Apr 7 21:49:44 2024 by rpki-client on console-fra.rpki-client.org