Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/R6BlVW6lj9ZWVKHkNtpyTN95OKU.roa
File: R6BlVW6lj9ZWVKHkNtpyTN95OKU.roa (raw, json)
Hash identifier: 5BWC04ohPO7UJ5Gu86KsVVyLvBbET99MXk8t7rcKud8=
Subject key identifier: 47:A0:65:55:6E:A5:8F:D6:56:54:A1:E4:36:DA:72:4C:DF:79:38:A5
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 018BF26F981ED0EAA412772C7B62128CDB95
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/R6BlVW6lj9ZWVKHkNtpyTN95OKU.roa
Signing time: Tue 21 Nov 2023 15:11:21 +0000
ROA not before: Tue 21 Nov 2023 15:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38237
IP address blocks: 123.253.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:6f:98:1e:d0:ea:a4:12:77:2c:7b:62:12:8c:db:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Nov 21 15:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a065556ea58fd65654a1e436da724cdf7938a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:70:54:52:74:75:c5:3d:c1:e9:b1:3b:c3:24:
a9:7a:9f:9c:4b:e1:70:b7:59:3e:3b:79:c2:d7:3e:
6f:0a:1b:43:d6:cc:19:ae:8e:54:18:48:07:27:34:
fc:05:8c:e5:6c:dd:14:9d:b5:a1:f9:e2:e4:9b:0a:
f8:e2:3c:23:a3:ab:c4:b4:83:02:d9:a3:83:7a:10:
29:fd:ae:b5:fb:ac:9b:d5:80:ce:36:36:6d:0c:eb:
86:32:6d:25:ae:f6:f9:99:07:27:a6:5b:d3:25:1f:
f9:29:7e:4e:c4:7e:a1:13:ba:e2:fe:95:28:13:29:
d3:ee:5c:3e:7e:45:df:fc:24:1f:ad:77:f7:68:aa:
e5:f0:9b:de:6f:54:c9:4b:19:fa:35:c6:c8:7f:b1:
55:5a:62:32:bd:42:0f:89:6b:b3:cf:36:40:98:30:
83:38:7a:dd:6c:59:ee:c6:96:79:1f:62:86:9e:56:
b7:7a:de:2f:ab:a3:ba:ba:2c:86:67:a4:84:7b:0c:
97:4e:d6:b0:ea:f1:c2:76:9a:c1:b6:61:63:67:df:
87:c8:71:63:ae:6b:3b:65:42:46:2e:41:7c:18:cc:
e3:a8:6e:7f:18:a4:9c:93:01:57:0f:ea:a7:5f:20:
51:aa:db:0f:af:74:0b:85:d5:09:54:01:63:88:43:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:65:55:6E:A5:8F:D6:56:54:A1:E4:36:DA:72:4C:DF:79:38:A5
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/R6BlVW6lj9ZWVKHkNtpyTN95OKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b0:1d:10:62:a2:24:9d:f2:cf:fc:82:01:38:39:8f:ce:a0:
78:25:99:b7:84:db:cf:78:30:aa:04:48:96:6e:58:6a:46:58:
40:89:f6:aa:49:0d:0c:d6:6f:2c:ca:5b:02:6c:85:5c:98:cd:
d5:ef:73:45:05:f7:b2:e2:db:e8:e0:53:d6:b7:72:74:0d:25:
97:3e:fc:b7:dc:c2:85:8f:d3:24:48:9d:67:a2:73:97:00:ce:
d0:1d:15:9b:52:0b:5b:65:1e:53:88:0a:2d:36:43:66:78:35:
40:2d:67:74:bc:6d:29:f1:a5:70:93:e9:c5:52:c7:91:34:a2:
48:be:9e:4b:18:5a:46:5d:69:34:fd:4c:4b:3d:a3:37:25:f4:
60:3c:8d:10:7b:4e:6f:5f:20:6a:f4:fb:d1:9c:7c:24:71:6c:
57:b0:82:c8:7b:9f:c2:60:90:e0:2f:23:ee:92:75:5c:ac:ef:
69:2e:ea:79:31:df:2b:8a:ff:8a:cb:99:98:b3:fd:31:f4:5f:
a1:34:23:3d:4d:e9:98:57:28:e0:0b:7a:2d:0d:c3:6d:06:31:
c1:7a:7c:3a:4e:58:66:29:69:43:bd:97:20:3d:04:79:a0:d8:
a7:77:2e:aa:91:32:10:ec:56:c2:e0:b8:bb:c5:65:01:6c:df:
c9:3d:5e:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvyb5ge0OqkEncse2ISjNuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj
MTZkZDAwHhcNMjMxMTIxMTUxMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2EwNjU1NTZlYTU4ZmQ2NTY1NGExZTQzNmRhNzI0Y2RmNzkzOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63BUUnR1xT3B6bE7wySpep+cS+Fw
t1k+O3nC1z5vChtD1swZro5UGEgHJzT8BYzlbN0UnbWh+eLkmwr44jwjo6vEtIMC
2aODehAp/a61+6yb1YDONjZtDOuGMm0lrvb5mQcnplvTJR/5KX5OxH6hE7ri/pUo
EynT7lw+fkXf/CQfrXf3aKrl8Jveb1TJSxn6NcbIf7FVWmIyvUIPiWuzzzZAmDCD
OHrdbFnuxpZ5H2KGnla3et4vq6O6uiyGZ6SEewyXTtaw6vHCdprBtmFjZ9+HyHFj
rms7ZUJGLkF8GMzjqG5/GKSckwFXD+qnXyBRqtsPr3QLhdUJVAFjiENVSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEegZVVupY/WVlSh5DbackzfeTilMB8GA1UdIwQY
MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt
NjJkNDJmZTZmZDNjLzEvUjZCbFZXNmxqOVpXVktIa050cHlUTjk1T0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj
LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe/1oMA0G
CSqGSIb3DQEBCwUAA4IBAQCxsB0QYqIknfLP/IIBODmPzqB4JZm3hNvPeDCqBEiW
blhqRlhAifaqSQ0M1m8sylsCbIVcmM3V73NFBfey4tvo4FPWt3J0DSWXPvy33MKF
j9MkSJ1nonOXAM7QHRWbUgtbZR5TiAotNkNmeDVALWd0vG0p8aVwk+nFUseRNKJI
vp5LGFpGXWk0/UxLPaM3JfRgPI0Qe05vXyBq9PvRnHwkcWxXsILIe5/CYJDgLyPu
knVcrO9pLup5Md8riv+Ky5mYs/0x9F+hNCM9TemYVyjgC3otDcNtBjHBenw6Tlhm
KWlDvZcgPQR5oNindy6qkTIQ7FbC4Li7xWUBbN/JPV7E
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:51 2024 by rpki-client on console-ams.rpki-client.org