Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/xmj06uxQvWTc812k6cc4lbL6jTc.roa
File: xmj06uxQvWTc812k6cc4lbL6jTc.roa (raw, json)
Hash identifier: OtmA4lHXquCHSrEJRUGoMLdc5LVZ+U8ShdW2rQULKBs=
Subject key identifier: C6:68:F4:EA:EC:50:BD:64:DC:F3:5D:A4:E9:C7:38:95:B2:FA:8D:37
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018B0571C46EDDAB720B9564DC7DCC9A1AA7
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/xmj06uxQvWTc812k6cc4lbL6jTc.roa
Signing time: Fri 06 Oct 2023 14:43:43 +0000
ROA not before: Fri 06 Oct 2023 14:43:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.50.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:71:c4:6e:dd:ab:72:0b:95:64:dc:7d:cc:9a:1a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Oct 6 14:43:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c668f4eaec50bd64dcf35da4e9c73895b2fa8d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:04:e2:dc:a8:28:b5:b5:23:21:88:cd:b3:
e1:59:77:94:e4:29:5a:96:b6:df:fe:40:29:6f:79:
fa:29:59:9e:ab:50:41:75:e6:c4:13:44:88:0d:8b:
a6:b6:6e:c5:08:12:ba:05:e3:d1:ef:2a:6c:5d:d2:
75:25:92:e7:c7:19:42:8e:5a:7a:78:2a:03:80:70:
b2:6b:82:d5:fc:3c:64:c6:25:2b:e5:2c:c7:af:ce:
59:fd:02:c2:9b:7f:d8:f8:14:23:45:04:4f:40:27:
4c:31:71:a1:f8:65:b0:65:4e:97:c1:5d:e5:4e:23:
b6:82:7d:a6:63:c1:80:25:ff:32:fd:3a:53:ae:d0:
23:6e:8b:0b:e8:3b:c6:68:44:5b:aa:49:82:d9:97:
22:29:15:dd:3d:34:95:85:32:00:0e:3e:38:7e:07:
7c:95:3b:9e:3c:22:f6:d8:85:02:20:86:04:d0:47:
a1:3e:7e:79:27:e1:91:43:82:ad:8e:d7:bf:f2:9d:
45:f8:b6:7d:fa:20:4c:4a:9a:d3:3b:ba:b1:47:2a:
42:11:6e:69:f2:9e:39:94:4d:9d:37:37:5e:6d:45:
6c:fb:9d:13:24:8f:17:e0:18:aa:16:96:92:55:b9:
4a:ec:ea:db:bb:d3:c3:3b:04:4d:2f:19:4c:be:b1:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:68:F4:EA:EC:50:BD:64:DC:F3:5D:A4:E9:C7:38:95:B2:FA:8D:37
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/xmj06uxQvWTc812k6cc4lbL6jTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
64:62:b0:de:b0:eb:86:81:6f:5b:2a:a2:70:9c:27:2a:a5:ad:
a0:40:69:a6:55:55:fe:54:0f:33:2b:69:bf:0e:2d:98:b3:25:
5d:95:16:25:db:f3:63:60:db:70:fc:4b:3f:82:fe:38:ce:6f:
6e:5b:ad:60:03:e8:ef:fe:82:96:8d:2f:61:e0:fa:63:20:87:
01:3f:19:24:77:03:3f:ec:6d:48:3c:3b:e2:f4:ef:35:ed:66:
5e:31:e7:c6:c8:81:5e:f2:db:64:0d:f4:c4:da:4f:28:5a:07:
a3:16:1f:50:ba:ab:2e:d2:96:05:bc:39:f2:6e:7d:a4:51:a1:
e2:9f:17:62:5a:56:e0:99:42:7a:38:50:5c:a5:88:a5:e7:6e:
79:63:57:45:2d:f8:44:06:57:c9:50:22:ba:98:ec:a4:a8:ad:
53:2c:99:12:53:31:9b:7b:a0:6f:2b:98:28:88:d5:5c:5b:fe:
9a:2a:b9:30:d9:a2:5d:4d:6f:a4:ff:05:2a:3e:75:ac:db:10:
f5:93:1b:a0:46:19:57:08:af:b2:8b:73:70:8b:61:5a:7a:45:
77:58:9b:8e:b3:b4:bc:12:8b:af:f4:82:66:d8:64:ff:7d:6b:
f0:44:3c:db:c7:8f:95:91:ed:60:dd:0d:5c:ce:4d:0d:29:63:
aa:3d:f8:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsFccRu3atyC5Vk3H3MmhqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjMxMDA2MTQ0MzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjY4ZjRlYWVjNTBiZDY0ZGNmMzVkYTRlOWM3Mzg5NWIyZmE4ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslME4tyoKLW1IyGIzbPhWXeU5Cla
lrbf/kApb3n6KVmeq1BBdebEE0SIDYumtm7FCBK6BePR7ypsXdJ1JZLnxxlCjlp6
eCoDgHCya4LV/DxkxiUr5SzHr85Z/QLCm3/Y+BQjRQRPQCdMMXGh+GWwZU6XwV3l
TiO2gn2mY8GAJf8y/TpTrtAjbosL6DvGaERbqkmC2ZciKRXdPTSVhTIADj44fgd8
lTuePCL22IUCIIYE0EehPn55J+GRQ4Ktjte/8p1F+LZ9+iBMSprTO7qxRypCEW5p
8p45lE2dNzdebUVs+50TJI8X4BiqFpaSVblK7Orbu9PDOwRNLxlMvrFCuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZo9OrsUL1k3PNdpOnHOJWy+o03MB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEveG1qMDZ1eFF2V1RjODEyazZjYzRsYkw2alRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjL9MA0G
CSqGSIb3DQEBCwUAA4IBAQBkYrDesOuGgW9bKqJwnCcqpa2gQGmmVVX+VA8zK2m/
Di2YsyVdlRYl2/NjYNtw/Es/gv44zm9uW61gA+jv/oKWjS9h4PpjIIcBPxkkdwM/
7G1IPDvi9O817WZeMefGyIFe8ttkDfTE2k8oWgejFh9Quqsu0pYFvDnybn2kUaHi
nxdiWlbgmUJ6OFBcpYil5255Y1dFLfhEBlfJUCK6mOykqK1TLJkSUzGbe6BvK5go
iNVcW/6aKrkw2aJdTW+k/wUqPnWs2xD1kxugRhlXCK+yi3Nwi2FaekV3WJuOs7S8
Eouv9IJm2GT/fWvwRDzbx4+Vke1g3Q1czk0NKWOqPfhz
-----END CERTIFICATE-----
Generated at Fri Oct 6 16:09:56 2023 by rpki-client on console-ams.rpki-client.org