Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/cKlWByVHXZ3JVDdArvClogCAE1A.roa
File: cKlWByVHXZ3JVDdArvClogCAE1A.roa (raw, json)
Hash identifier: S+GaeWxEEYSDSbc+tveOh2wr3OzxBh7+cglwr/6U5gc=
Subject key identifier: 70:A9:56:07:25:47:5D:9D:C9:54:37:40:AE:F0:A5:A2:00:80:13:50
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0185711553D9E8EEFB61A7593689CA068C80
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/cKlWByVHXZ3JVDdArvClogCAE1A.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197600
IP address blocks: 157.25.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:53:d9:e8:ee:fb:61:a7:59:36:89:ca:06:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70a9560725475d9dc9543740aef0a5a200801350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:5e:9a:03:87:04:af:f6:41:5f:80:f3:09:
13:9c:a1:db:08:22:78:dd:f0:65:d3:ba:49:ec:ce:
07:07:b5:46:b3:c8:eb:54:62:e8:7a:01:ec:e6:bf:
3c:66:83:47:a9:94:fc:9d:6c:ae:ee:1e:2e:b1:f4:
e1:af:ea:e3:bb:9c:97:3e:10:97:1f:9a:fd:1d:00:
e7:99:fc:62:18:97:b5:f0:f0:47:f2:5a:0b:d9:52:
d8:bb:6f:e6:44:12:ae:fc:79:e6:19:0e:65:5d:f9:
28:01:a3:a2:ab:4c:46:ff:46:ca:83:d6:1b:b7:2e:
92:d6:0a:e7:05:5c:52:17:69:65:ee:cb:c8:9b:85:
d8:68:bb:52:9c:b5:dd:93:c9:f3:b2:48:be:e5:cf:
27:08:a3:84:da:8f:18:05:87:1c:87:a2:c0:bf:65:
83:34:d3:da:67:a9:9c:fa:5d:cb:1d:c3:9f:e7:ec:
bc:0b:45:a4:98:8f:d7:91:6f:b0:86:d9:fa:3e:d5:
5a:fc:e7:97:64:0f:81:5f:80:c6:53:d2:e6:ae:fd:
01:7f:a5:bc:6d:ec:83:9a:39:f7:6d:da:c1:9f:23:
30:7a:7b:3c:29:e6:38:7c:80:98:2e:90:49:8a:2e:
f6:1c:b2:c6:f7:bd:38:d5:dc:2f:57:72:69:e0:75:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:56:07:25:47:5D:9D:C9:54:37:40:AE:F0:A5:A2:00:80:13:50
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/cKlWByVHXZ3JVDdArvClogCAE1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.123.0/24
Signature Algorithm: sha256WithRSAEncryption
62:36:92:21:70:2f:30:a1:31:17:7f:91:67:a1:45:73:30:12:
32:4f:5f:33:bb:62:86:d0:e5:fb:4b:e5:ae:0f:8d:63:a1:48:
ac:23:5c:8c:9e:69:26:c7:8a:8c:ff:ea:d0:8d:9f:5e:79:bc:
a0:ba:39:7a:a6:72:63:26:81:01:86:6c:81:cf:9f:1c:45:ad:
f0:2d:63:42:ef:4e:51:27:bd:25:40:ff:1d:72:eb:15:0c:ab:
54:bc:da:df:43:01:96:bf:4d:c7:29:4e:0b:2e:e2:41:43:1f:
14:c6:86:02:2d:c7:05:0b:ab:f8:55:a0:0c:79:9e:36:2b:5d:
d4:28:bc:46:8a:37:01:c0:a1:6c:cd:0d:4c:4d:ea:4c:33:25:
cc:cb:bd:c0:4e:bd:e1:c5:75:57:82:d9:2c:2e:e3:60:c7:5f:
cf:55:a5:17:c0:ce:4e:5f:a5:40:25:6a:99:7d:e2:2e:a6:a1:
f6:13:19:73:1b:36:dc:52:5a:36:2d:c3:bf:4d:54:68:1f:61:
8d:88:4c:ab:bd:b2:74:bd:1e:a6:a6:97:8d:af:dd:3a:94:ca:
89:99:5a:10:58:b7:82:a9:ea:82:72:f2:6d:76:1d:c6:89:09:
c7:37:7c:b8:f5:0a:ca:01:18:82:ea:fd:12:5b:dd:f1:cf:57:
9b:75:00:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxFVPZ6O77YadZNonKBoyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjMwMTAyMDYwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGE5NTYwNzI1NDc1ZDlkYzk1NDM3NDBhZWYwYTVhMjAwODAxMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbtemgOHBK/2QV+A8wkTnKHbCCJ4
3fBl07pJ7M4HB7VGs8jrVGLoegHs5r88ZoNHqZT8nWyu7h4usfThr+rju5yXPhCX
H5r9HQDnmfxiGJe18PBH8loL2VLYu2/mRBKu/HnmGQ5lXfkoAaOiq0xG/0bKg9Yb
ty6S1grnBVxSF2ll7svIm4XYaLtSnLXdk8nzski+5c8nCKOE2o8YBYcch6LAv2WD
NNPaZ6mc+l3LHcOf5+y8C0WkmI/XkW+whtn6PtVa/OeXZA+BX4DGU9Lmrv0Bf6W8
beyDmjn3bdrBnyMwens8KeY4fICYLpBJii72HLLG97041dwvV3Jp4HXNfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHCpVgclR12dyVQ3QK7wpaIAgBNQMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvY0tsV0J5VkhYWjNKVkRkQXJ2Q2xvZ0NBRTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRl7MA0G
CSqGSIb3DQEBCwUAA4IBAQBiNpIhcC8woTEXf5FnoUVzMBIyT18zu2KG0OX7S+Wu
D41joUisI1yMnmkmx4qM/+rQjZ9eebygujl6pnJjJoEBhmyBz58cRa3wLWNC705R
J70lQP8dcusVDKtUvNrfQwGWv03HKU4LLuJBQx8UxoYCLccFC6v4VaAMeZ42K13U
KLxGijcBwKFszQ1MTepMMyXMy73ATr3hxXVXgtksLuNgx1/PVaUXwM5OX6VAJWqZ
feIupqH2ExlzGzbcUlo2LcO/TVRoH2GNiEyrvbJ0vR6mppeNr906lMqJmVoQWLeC
qeqCcvJtdh3GiQnHN3y49QrKARiC6v0SW93xz1ebdQBq
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-fra.rpki-client.org