Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/d6jR7PqRJiKjnS8l1_2JhoikFTw.roa
File: d6jR7PqRJiKjnS8l1_2JhoikFTw.roa (raw, json)
Hash identifier: entK1X9ckwXk/eOqsyoL5hQn1i5VSLPDsTAzp+KGtKc=
Subject key identifier: 77:A8:D1:EC:FA:91:26:22:A3:9D:2F:25:D7:FD:89:86:88:A4:15:3C
Certificate issuer: /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial: 01856BD361B22AA39777C73CE5761D46F794
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/d6jR7PqRJiKjnS8l1_2JhoikFTw.roa
Signing time: Sun 01 Jan 2023 05:34:53 +0000
ROA not before: Sun 01 Jan 2023 05:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39296
IP address blocks: 195.250.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:61:b2:2a:a3:97:77:c7:3c:e5:76:1d:46:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Validity
Not Before: Jan 1 05:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77a8d1ecfa912622a39d2f25d7fd898688a4153c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:02:84:cb:61:26:e4:10:6f:37:4f:6e:67:
6f:af:0d:9e:9a:dd:eb:b6:b8:51:f6:73:75:9d:a4:
6b:da:0f:f8:40:6a:43:f8:e7:bb:24:68:17:4b:91:
e1:0a:99:25:2e:3a:3b:04:de:77:a6:de:5c:b3:c9:
2b:94:f9:ae:43:ed:bc:58:c1:52:f4:7a:d1:66:49:
df:50:07:69:7c:b7:c0:97:ed:88:bb:f5:1e:65:5f:
8a:4d:43:0f:11:46:35:c5:72:0d:c6:e2:4d:f8:ba:
66:4b:f5:ca:f6:08:e5:0f:b4:7e:94:7a:55:88:c0:
f8:49:5e:ec:c7:23:2c:b6:ed:de:25:9c:41:12:60:
90:22:98:37:93:6e:dc:45:c6:44:57:88:2e:47:75:
4f:05:6c:c4:f1:b1:64:7c:6a:f1:9a:68:0d:e8:ae:
9f:0c:ba:fa:1e:32:90:4c:19:75:5e:b6:a2:43:cf:
7a:d6:45:00:77:1e:1b:ab:8e:d2:33:b1:d4:9b:ac:
dc:7e:96:48:91:85:fd:13:e3:af:06:16:a0:98:2f:
0b:7a:e4:1a:f8:2f:08:84:a4:31:13:00:5c:9e:53:
5c:a2:28:30:4e:cf:4d:1a:b7:28:4a:4c:c3:56:94:
9d:8c:67:7f:30:eb:82:6a:e0:0e:27:7a:25:47:78:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:D1:EC:FA:91:26:22:A3:9D:2F:25:D7:FD:89:86:88:A4:15:3C
X509v3 Authority Key Identifier:
keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/d6jR7PqRJiKjnS8l1_2JhoikFTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.52.0/24
Signature Algorithm: sha256WithRSAEncryption
21:54:63:95:8a:ef:80:0f:17:29:e5:e4:8d:74:93:4d:99:e6:
97:30:ab:09:8b:99:94:fe:4b:49:2f:ac:43:79:32:8d:d1:f6:
93:74:f9:ed:4e:a5:62:93:a2:b7:c5:17:f2:16:ad:a9:92:f7:
37:c2:d5:e5:eb:bb:10:7b:28:5f:e8:26:6b:e2:84:6c:af:21:
63:7a:68:30:06:81:ba:22:ed:dc:b2:16:09:ca:01:bd:f9:32:
46:df:4e:de:f5:da:81:84:ac:94:63:95:dd:6b:d5:67:17:23:
e6:8a:63:a4:d8:45:15:2b:23:80:d1:74:76:33:10:5d:90:6e:
2e:45:f0:73:64:20:82:3f:1f:89:49:86:fb:c3:68:41:8d:da:
f3:ec:e3:d9:ff:b9:1c:75:83:e6:95:25:01:17:af:81:16:51:
12:30:76:5d:73:77:a4:b0:f9:ff:31:52:d3:a4:34:2e:72:28:
85:8b:e7:08:64:5c:69:ac:e4:74:c8:62:86:ef:61:c1:93:53:
c6:0a:77:3b:4c:6c:c8:92:19:27:20:37:89:83:66:0b:c6:48:
83:5d:0f:07:31:6e:aa:6c:e7:af:67:dd:c1:c7:08:ae:a8:2d:
17:36:20:5b:d1:d2:03:5a:54:30:9b:0e:e3:2a:7e:1f:9a:45:
e4:fc:d7:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr02GyKqOXd8c85XYdRveUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTJmMzhiNTViZmMxMzdiYjllZDAyNmZhMDAzM2VlZjhm
YTdkNTAwHhcNMjMwMTAxMDUzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2E4ZDFlY2ZhOTEyNjIyYTM5ZDJmMjVkN2ZkODk4Njg4YTQxNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdQChMthJuQQbzdPbmdvrw2emt3r
trhR9nN1naRr2g/4QGpD+Oe7JGgXS5HhCpklLjo7BN53pt5cs8krlPmuQ+28WMFS
9HrRZknfUAdpfLfAl+2Iu/UeZV+KTUMPEUY1xXINxuJN+LpmS/XK9gjlD7R+lHpV
iMD4SV7sxyMstu3eJZxBEmCQIpg3k27cRcZEV4guR3VPBWzE8bFkfGrxmmgN6K6f
DLr6HjKQTBl1XraiQ8961kUAdx4bq47SM7HUm6zcfpZIkYX9E+OvBhagmC8LeuQa
+C8IhKQxEwBcnlNcoigwTs9NGrcoSkzDVpSdjGd/MOuCauAOJ3olR3h+0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHeo0ez6kSYio50vJdf9iYaIpBU8MB8GA1UdIwQY
MBaAFLmS84tVv8E3u57QJvoAM+74+n1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQt
OWJjM2U1NmY3YWY3LzEvZDZqUjdQcVJKaUtqblM4bDFfMkpob2lrRlR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQtOWJjM2U1NmY3YWY3
LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/o0MA0G
CSqGSIb3DQEBCwUAA4IBAQAhVGOViu+ADxcp5eSNdJNNmeaXMKsJi5mU/ktJL6xD
eTKN0faTdPntTqVik6K3xRfyFq2pkvc3wtXl67sQeyhf6CZr4oRsryFjemgwBoG6
Iu3cshYJygG9+TJG307e9dqBhKyUY5Xda9VnFyPmimOk2EUVKyOA0XR2MxBdkG4u
RfBzZCCCPx+JSYb7w2hBjdrz7OPZ/7kcdYPmlSUBF6+BFlESMHZdc3eksPn/MVLT
pDQuciiFi+cIZFxprOR0yGKG72HBk1PGCnc7TGzIkhknIDeJg2YLxkiDXQ8HMW6q
bOevZ93BxwiuqC0XNiBb0dIDWlQwmw7jKn4fmkXk/NdB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:23 2024 by rpki-client on console-ams.rpki-client.org