Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/mK8rVSRY_pkw3x64jVrMFFHCxfw.roa
File: mK8rVSRY_pkw3x64jVrMFFHCxfw.roa (raw, json)
Hash identifier: 34du5a9V0N0zeI3+v0C/+Z1owSvzUFqEBoosrTDbX7A=
Subject key identifier: 98:AF:2B:55:24:58:FE:99:30:DF:1E:B8:8D:5A:CC:14:51:C2:C5:FC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA9384308340D83BA88CDA2E324308
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/mK8rVSRY_pkw3x64jVrMFFHCxfw.roa
Signing time: Tue 02 Jan 2024 10:31:37 +0000
ROA not before: Tue 02 Jan 2024 10:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 94.241.136.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:93:84:30:83:40:d8:3b:a8:8c:da:2e:32:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98af2b552458fe9930df1eb88d5acc1451c2c5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:49:f2:7f:41:8b:94:4c:b1:7d:4d:bd:92:
7d:2e:bf:36:c9:bd:ff:79:12:2c:0f:76:bf:28:69:
2b:6b:de:cd:cb:65:4a:1e:b7:b0:6b:85:4d:54:80:
a3:eb:39:f6:e5:8f:74:41:16:c3:b2:bd:89:2d:7a:
4e:99:25:98:a2:34:08:a1:bc:07:aa:3b:6d:4a:cb:
e3:42:ed:c1:fa:46:53:3d:06:a2:c3:c4:8e:9f:ef:
ba:7b:56:65:2b:5d:8d:c2:79:04:04:ef:86:1f:66:
91:43:e3:55:26:b2:d5:67:3b:96:91:29:a4:2d:df:
03:b8:ff:a3:d5:c1:c8:b4:25:ad:06:db:7a:bf:e0:
0e:ca:43:d2:4b:cb:36:ce:44:7e:09:de:dc:af:aa:
d1:7e:92:b6:3e:df:24:a5:3a:85:80:3c:cc:df:7e:
91:2f:df:b8:8a:1d:8e:a0:a4:46:6d:70:14:13:6d:
0c:5f:fd:d1:c8:e9:9a:7f:79:c7:fc:5b:5d:b4:f3:
31:9d:c0:41:89:fa:25:bf:88:45:2c:2f:46:4c:c4:
97:13:ae:83:e3:89:f5:a9:56:26:66:fa:b7:d0:3c:
e3:e7:63:2e:97:22:4b:6e:a8:19:a7:50:c2:14:c2:
48:bf:a2:90:f0:65:a2:74:ba:45:0a:da:3f:76:f1:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:2B:55:24:58:FE:99:30:DF:1E:B8:8D:5A:CC:14:51:C2:C5:FC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/mK8rVSRY_pkw3x64jVrMFFHCxfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:97:54:f9:ce:82:12:9f:2d:a1:94:78:94:bd:ac:4a:04:99:
8d:ab:b3:89:03:0d:3e:6f:12:44:83:c7:1c:6d:71:d4:f3:9d:
83:e9:a6:2c:e4:a2:93:db:89:db:1a:fe:74:41:ea:90:77:16:
ce:f3:45:46:bb:3e:e3:7f:75:b6:11:a0:ab:a1:af:21:be:35:
ef:13:0f:31:00:0f:a9:b4:74:84:20:ed:a8:c5:b3:93:8d:86:
50:b6:72:fa:d0:0f:b9:19:91:0b:dd:be:6a:48:4e:30:c1:22:
7f:59:d2:e8:ba:4a:0b:e0:01:f7:d3:1c:8c:99:80:d5:c3:13:
56:5a:b6:44:d2:38:74:79:3e:df:2d:ad:20:54:6f:54:c0:d9:
ae:5a:ff:57:1c:98:0f:cb:95:da:ea:ea:dd:88:7b:8f:b1:22:
ec:f3:9a:43:1e:af:68:5f:cc:b9:6a:96:70:03:97:25:7d:9f:
9c:e5:ae:06:e3:a0:d0:f3:f6:48:57:ca:81:f4:3e:d2:21:e9:
de:4e:52:90:81:f2:70:d8:dd:2c:8d:b7:c6:cd:17:e7:a9:4c:
92:fd:84:19:d2:36:48:60:26:22:6c:8e:ca:39:e1:04:89:55:
7b:b9:07:b4:a1:dc:9e:30:bc:70:fa:61:f7:41:63:9c:20:61:
7f:99:dc:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJupOEMINA2DuojNouMkMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMTAyMTAzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGFmMmI1NTI0NThmZTk5MzBkZjFlYjg4ZDVhY2MxNDUxYzJjNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKVJ8n9Bi5RMsX1NvZJ9Lr82yb3/
eRIsD3a/KGkra97Ny2VKHrewa4VNVICj6zn25Y90QRbDsr2JLXpOmSWYojQIobwH
qjttSsvjQu3B+kZTPQaiw8SOn++6e1ZlK12NwnkEBO+GH2aRQ+NVJrLVZzuWkSmk
Ld8DuP+j1cHItCWtBtt6v+AOykPSS8s2zkR+Cd7cr6rRfpK2Pt8kpTqFgDzM336R
L9+4ih2OoKRGbXAUE20MX/3RyOmaf3nH/FtdtPMxncBBifolv4hFLC9GTMSXE66D
44n1qVYmZvq30Dzj52MulyJLbqgZp1DCFMJIv6KQ8GWidLpFCto/dvEyiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJivK1UkWP6ZMN8euI1azBRRwsX8MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvbUs4clZTUllfcGt3M3g2NGpWck1GRkhDeGZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvGIMA0G
CSqGSIb3DQEBCwUAA4IBAQBtl1T5zoISny2hlHiUvaxKBJmNq7OJAw0+bxJEg8cc
bXHU852D6aYs5KKT24nbGv50QeqQdxbO80VGuz7jf3W2EaCroa8hvjXvEw8xAA+p
tHSEIO2oxbOTjYZQtnL60A+5GZEL3b5qSE4wwSJ/WdLoukoL4AH30xyMmYDVwxNW
WrZE0jh0eT7fLa0gVG9UwNmuWv9XHJgPy5Xa6urdiHuPsSLs85pDHq9oX8y5apZw
A5clfZ+c5a4G46DQ8/ZIV8qB9D7SIeneTlKQgfJw2N0sjbfGzRfnqUyS/YQZ0jZI
YCYibI7KOeEEiVV7uQe0odyeMLxw+mH3QWOcIGF/mdyh
-----END CERTIFICATE-----
Generated at Wed Jan 3 22:35:28 2024 by rpki-client on console-ams.rpki-client.org