Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/A8cV3BF2kfcSl4PnjGWoPb_CYqo.roa
File: A8cV3BF2kfcSl4PnjGWoPb_CYqo.roa (raw, json)
Hash identifier: HADpYnuc+PzIAjuKkl8O4bZ0AO8nJ+DlPjlhNgGEa9I=
Subject key identifier: 03:C7:15:DC:11:76:91:F7:12:97:83:E7:8C:65:A8:3D:BF:C2:62:AA
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01856E6FABD30DCEA683E233B96A6D55C894
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/A8cV3BF2kfcSl4PnjGWoPb_CYqo.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57707
IP address blocks: 5.59.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ab:d3:0d:ce:a6:83:e2:33:b9:6a:6d:55:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03c715dc117691f7129783e78c65a83dbfc262aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:c3:ef:1b:21:e0:1e:fa:cf:19:60:01:1a:
b4:a9:b3:d7:7b:b4:15:34:2f:d6:bb:c8:09:32:c2:
5a:bd:9c:94:58:55:3e:36:ee:9c:bc:b3:29:ce:28:
d8:e5:d7:f7:df:0a:a4:69:28:e8:43:e3:a8:10:1b:
bc:ad:f9:57:50:c2:4f:89:6a:0e:44:f9:93:0b:19:
c1:86:13:47:b2:f0:26:28:4d:00:9c:ad:ee:27:85:
ca:2a:ac:5b:8c:4d:4e:0f:e8:86:e0:4e:3b:09:2c:
8f:de:b0:99:8a:10:2d:ae:1a:5e:30:b5:2f:11:15:
bb:eb:80:ca:af:9a:bc:61:61:a7:a5:82:94:c0:1e:
33:26:ce:1b:8b:df:db:e7:6f:47:bc:b5:ad:96:32:
74:68:e6:6f:52:69:85:82:d7:b4:f4:cc:fb:a8:11:
2c:cf:92:d9:eb:45:8e:28:9c:29:41:e1:58:44:34:
43:dc:05:56:de:16:64:4a:93:d9:37:87:7e:0e:c8:
72:47:45:00:69:02:b2:20:af:d0:60:e7:b7:5c:56:
0b:f2:70:81:c6:3b:ba:a5:de:1e:a5:63:cf:b0:67:
2b:2c:e4:3d:ac:88:71:67:93:25:65:fe:ca:e0:db:
48:8f:6c:f0:e6:fe:82:4d:54:bc:53:92:db:d8:59:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:15:DC:11:76:91:F7:12:97:83:E7:8C:65:A8:3D:BF:C2:62:AA
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/A8cV3BF2kfcSl4PnjGWoPb_CYqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:3d:ba:05:67:66:da:36:df:0d:a2:2c:42:41:7e:9d:45:86:
73:dc:51:9a:57:4d:eb:80:39:36:1d:c7:d9:91:19:80:b1:7a:
57:bd:f1:52:e9:83:52:55:d7:97:e6:65:bc:7d:21:34:f9:9f:
27:20:08:ba:2e:f2:84:a7:3b:a6:53:dc:fc:2e:87:90:5f:45:
15:e7:a2:b2:28:c3:13:45:25:cd:ef:da:90:b8:75:92:a7:21:
b3:74:21:7b:bf:16:90:22:13:3d:6b:14:a1:98:91:9c:da:6a:
30:63:4a:e3:06:3b:ca:6d:dc:b8:1d:b7:aa:14:10:d1:17:b9:
00:aa:18:9e:03:d6:e7:8c:4a:0e:fb:78:1e:86:d9:d7:7e:0d:
54:ff:88:da:72:3a:71:3c:a0:91:80:7f:68:2c:56:90:19:cc:
17:b4:ee:62:18:4d:3f:fa:5c:f1:53:17:46:13:74:c2:0c:15:
0d:3f:c8:44:5b:92:a4:ee:e6:fb:53:83:73:ec:75:43:85:f3:
4f:35:74:6c:86:1c:56:42:e7:17:5c:db:15:e7:19:47:dc:f8:
35:ce:5a:b5:7b:e1:67:f9:2a:79:6d:ae:80:92:be:56:98:7d:
31:5e:fe:6f:a9:c4:52:11:97:d8:0c:5f:0e:b6:8c:38:25:e0:
40:09:be:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVub6vTDc6mg+IzuWptVciUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjMwMTAxMTc0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2M3MTVkYzExNzY5MWY3MTI5NzgzZTc4YzY1YTgzZGJmYzI2MmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg27D7xsh4B76zxlgARq0qbPXe7QV
NC/Wu8gJMsJavZyUWFU+Nu6cvLMpzijY5df33wqkaSjoQ+OoEBu8rflXUMJPiWoO
RPmTCxnBhhNHsvAmKE0AnK3uJ4XKKqxbjE1OD+iG4E47CSyP3rCZihAtrhpeMLUv
ERW764DKr5q8YWGnpYKUwB4zJs4bi9/b529HvLWtljJ0aOZvUmmFgte09Mz7qBEs
z5LZ60WOKJwpQeFYRDRD3AVW3hZkSpPZN4d+DshyR0UAaQKyIK/QYOe3XFYL8nCB
xju6pd4epWPPsGcrLOQ9rIhxZ5MlZf7K4NtIj2zw5v6CTVS8U5Lb2FnRtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPHFdwRdpH3EpeD54xlqD2/wmKqMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvQThjVjNCRjJrZmNTbDRQbmpHV29QYl9DWXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTthMA0G
CSqGSIb3DQEBCwUAA4IBAQCmPboFZ2baNt8NoixCQX6dRYZz3FGaV03rgDk2HcfZ
kRmAsXpXvfFS6YNSVdeX5mW8fSE0+Z8nIAi6LvKEpzumU9z8LoeQX0UV56KyKMMT
RSXN79qQuHWSpyGzdCF7vxaQIhM9axShmJGc2mowY0rjBjvKbdy4HbeqFBDRF7kA
qhieA9bnjEoO+3gehtnXfg1U/4jacjpxPKCRgH9oLFaQGcwXtO5iGE0/+lzxUxdG
E3TCDBUNP8hEW5Kk7ub7U4Nz7HVDhfNPNXRshhxWQucXXNsV5xlH3Pg1zlq1e+Fn
+Sp5ba6Akr5WmH0xXv5vqcRSEZfYDF8Otow4JeBACb6Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:52 2024 by rpki-client on console-ams.rpki-client.org