Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pOU7FlluEJFbFAM4SsvTywp_Ago.roa
File: pOU7FlluEJFbFAM4SsvTywp_Ago.roa (raw, json)
Hash identifier: K7cA2+rq8ytrgatYu/I271Qn1szm2blXb5sbOxGVkyI=
Subject key identifier: A4:E5:3B:16:59:6E:10:91:5B:14:03:38:4A:CB:D3:CB:0A:7F:02:0A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185F7E796B442DB572BD0C7A908D5AFFED8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pOU7FlluEJFbFAM4SsvTywp_Ago.roa
Signing time: Sat 28 Jan 2023 10:23:47 +0000
ROA not before: Sat 28 Jan 2023 10:23:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 213.32.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:e7:96:b4:42:db:57:2b:d0:c7:a9:08:d5:af:fe:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 28 10:23:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4e53b16596e10915b1403384acbd3cb0a7f020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:66:86:d4:52:bb:bc:6c:98:1a:45:e0:ad:
a3:b4:75:4a:d0:dd:f3:1f:60:56:06:74:3a:56:c8:
d3:f3:b2:28:b1:78:dd:15:4f:ad:0e:30:55:e6:ac:
37:4c:c0:55:e7:f5:65:7d:52:85:6e:61:81:d9:18:
b3:e9:20:ff:b8:e3:8e:5f:c0:5e:c4:cb:a4:f8:a9:
16:2f:fa:78:4e:85:18:72:db:7b:97:99:0b:c3:8a:
08:f5:52:a7:fc:da:e8:f8:cd:6a:4b:2f:ac:86:c7:
ed:0b:69:9d:d7:8a:0b:4e:10:76:51:8e:f4:fe:ef:
1e:98:6e:88:4f:65:a2:a6:bf:12:c2:e8:f8:f1:9e:
c7:e5:68:28:02:3b:a8:15:b1:95:1b:cc:9a:87:7e:
86:84:62:ca:d6:7c:05:bf:55:2d:40:05:b9:eb:ec:
b2:1b:14:64:07:37:49:91:25:4b:df:78:b6:ac:93:
00:72:eb:99:6d:83:9a:61:b4:4d:50:f2:58:b2:d7:
ba:04:f5:19:32:40:12:5c:f0:5a:42:7d:11:dc:db:
dd:bd:43:81:18:7c:f7:55:d7:99:a8:62:d1:41:d1:
81:16:c0:49:f8:d1:e2:22:9a:3f:a2:44:58:43:06:
78:73:22:13:48:56:e3:03:8d:97:1c:f4:56:76:14:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:3B:16:59:6E:10:91:5B:14:03:38:4A:CB:D3:CB:0A:7F:02:0A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pOU7FlluEJFbFAM4SsvTywp_Ago.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.32.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:eb:6c:b8:fb:b9:44:79:e6:03:ff:04:66:82:a9:c5:70:54:
ed:cb:d5:eb:18:67:41:de:1d:8c:aa:38:9d:05:91:a4:15:13:
50:24:ae:fc:f8:e9:bb:b4:05:21:b7:68:a8:b5:9c:c1:de:18:
05:d9:c9:06:a2:d4:d8:48:d6:fe:86:a6:d0:37:23:18:62:66:
a6:f2:8b:86:91:74:40:f8:05:44:43:20:6d:f9:ca:b5:3e:c0:
ba:33:87:c7:f7:f3:17:96:89:fc:81:1d:c0:6e:33:1f:e2:ac:
00:d7:14:dc:e5:cb:04:aa:62:2b:bc:6b:ed:30:37:c1:91:4b:
af:7b:af:4f:a8:48:71:78:e1:94:ac:26:25:a9:39:f3:43:61:
23:b4:e0:9e:53:6f:b5:f4:5e:8e:2b:44:7c:f6:58:53:bd:46:
37:98:2b:26:3a:8b:77:15:ec:73:96:c1:45:3f:08:58:1b:8e:
75:8b:b9:79:eb:f4:b7:a1:36:20:73:9d:f4:f4:45:82:5c:08:
1b:ae:9b:93:3c:9b:76:21:51:94:33:3d:af:48:0f:1b:ad:dd:
a4:b5:cc:15:24:93:56:2f:62:ea:a5:93:f5:8f:b7:5a:f3:12:
1f:25:fb:9b:dc:a4:3f:45:5f:c4:ea:4a:4d:b8:f7:cc:89:74:
61:32:92:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYX355a0QttXK9DHqQjVr/7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTI4MTAyMzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGU1M2IxNjU5NmUxMDkxNWIxNDAzMzg0YWNiZDNjYjBhN2YwMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCBmhtRSu7xsmBpF4K2jtHVK0N3z
H2BWBnQ6VsjT87IosXjdFU+tDjBV5qw3TMBV5/VlfVKFbmGB2Riz6SD/uOOOX8Be
xMuk+KkWL/p4ToUYctt7l5kLw4oI9VKn/Nro+M1qSy+shsftC2md14oLThB2UY70
/u8emG6IT2Wipr8Swuj48Z7H5WgoAjuoFbGVG8yah36GhGLK1nwFv1UtQAW56+yy
GxRkBzdJkSVL33i2rJMAcuuZbYOaYbRNUPJYste6BPUZMkASXPBaQn0R3NvdvUOB
GHz3VdeZqGLRQdGBFsBJ+NHiIpo/okRYQwZ4cyITSFbjA42XHPRWdhQ/+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKTlOxZZbhCRWxQDOErL08sKfwIKMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcE9VN0ZsbHVFSkZiRkFNNFNzdlR5d3BfQWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SD7MA0G
CSqGSIb3DQEBCwUAA4IBAQBH62y4+7lEeeYD/wRmgqnFcFTty9XrGGdB3h2Mqjid
BZGkFRNQJK78+Om7tAUht2iotZzB3hgF2ckGotTYSNb+hqbQNyMYYmam8ouGkXRA
+AVEQyBt+cq1PsC6M4fH9/MXlon8gR3AbjMf4qwA1xTc5csEqmIrvGvtMDfBkUuv
e69PqEhxeOGUrCYlqTnzQ2EjtOCeU2+19F6OK0R89lhTvUY3mCsmOot3FexzlsFF
PwhYG451i7l56/S3oTYgc5309EWCXAgbrpuTPJt2IVGUMz2vSA8brd2ktcwVJJNW
L2LqpZP1j7da8xIfJfub3KQ/RV/E6kpNuPfMiXRhMpKW
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org