Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/rqZKb1QtDhHSUqDzWEe9Bm7-Imk.roa
File: rqZKb1QtDhHSUqDzWEe9Bm7-Imk.roa (raw, json)
Hash identifier: Z9zaAUGsdQdSGFE8K9yjAdcaukIIgIoPSso65wL0C3E=
Subject key identifier: AE:A6:4A:6F:54:2D:0E:11:D2:52:A0:F3:58:47:BD:06:6E:FE:22:69
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 01857079B296A534D71BFB9E47AD266C8171
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/rqZKb1QtDhHSUqDzWEe9Bm7-Imk.roa
Signing time: Mon 02 Jan 2023 03:15:01 +0000
ROA not before: Mon 02 Jan 2023 03:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 209.127.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 09:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b2:96:a5:34:d7:1b:fb:9e:47:ad:26:6c:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jan 2 03:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea64a6f542d0e11d252a0f35847bd066efe2269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:2e:03:5e:be:5a:4d:ab:73:e8:c7:32:15:
b7:7d:9e:86:42:dc:a0:00:97:15:b5:a9:3d:c2:aa:
5e:d1:99:7e:85:a4:ce:5d:80:59:fc:25:0f:71:cc:
6a:f1:4c:9f:60:2b:0b:87:63:e1:90:6a:44:d1:43:
c4:01:03:9e:5a:d2:e8:98:0f:bd:c5:15:4b:3c:51:
05:0a:aa:16:c7:80:33:e1:b9:e7:74:27:1b:fa:fd:
60:96:b5:6e:6f:1e:96:cc:67:9e:3c:19:ff:63:a4:
7b:e7:ae:92:5c:6e:67:28:a6:25:a0:ce:70:2e:d5:
88:60:91:d3:fb:12:bd:4a:1a:3a:d0:5a:64:0e:f5:
fd:78:3a:62:72:e7:02:b1:1a:18:dc:b3:17:a7:64:
ab:8f:bf:c9:83:1e:c8:65:0c:4d:d0:03:f9:9c:cc:
a6:4f:6d:89:42:80:87:bc:ef:e5:a8:12:99:e1:53:
6e:9a:e7:91:ca:35:59:3f:d4:dc:69:80:e6:3b:d2:
b2:b6:5d:4e:7a:f2:8c:e4:73:13:d6:25:d1:3a:37:
68:5d:8a:fb:7f:6f:41:be:68:b7:d9:a0:e7:fa:dd:
29:be:cb:02:0d:54:f8:64:07:6d:e2:f4:c5:85:ef:
96:af:a6:1a:4d:39:e3:ca:84:06:09:05:47:e5:e3:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:4A:6F:54:2D:0E:11:D2:52:A0:F3:58:47:BD:06:6E:FE:22:69
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/rqZKb1QtDhHSUqDzWEe9Bm7-Imk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
24:45:6a:c2:b4:82:cb:5f:e1:19:ee:9d:3f:87:31:65:f8:d8:
5a:64:fe:c1:bd:2d:14:26:9b:a4:ce:c2:9e:ee:24:dd:d6:53:
c8:86:ff:eb:e4:28:4b:12:3d:6b:f8:d0:2d:4a:4c:89:62:c1:
3e:53:c9:33:f1:32:79:32:eb:2d:cf:52:e6:f9:20:0f:76:f7:
2e:b2:fe:bb:85:17:7a:f7:9d:2e:38:68:af:39:e2:0b:48:26:
2c:5f:aa:8c:ad:ac:b2:a3:43:fa:5f:37:a0:67:5e:0c:3c:d6:
a1:70:41:2a:57:1a:41:e7:94:b1:ba:73:a3:22:df:5b:cd:37:
a1:b1:76:a6:bb:75:a0:e7:86:ed:86:1b:33:b3:f8:e3:12:ce:
f5:77:43:d2:1b:7a:fd:1a:a8:68:68:db:ac:3a:74:36:2a:fc:
c8:0b:16:4d:e8:1b:7a:38:0e:6c:01:b5:65:92:cc:d8:ca:ab:
cc:ba:24:d5:7f:5d:88:84:76:23:04:8c:24:a5:4d:b4:50:1e:
c4:22:a0:b3:ef:55:6b:55:97:a3:9b:0b:fd:d1:e5:2b:f8:d3:
d1:7c:5f:34:c8:24:a1:04:9e:c3:11:59:eb:85:ab:e4:16:c0:
e7:14:49:39:70:69:d4:8b:a1:43:56:2f:c3:f3:06:cd:9e:5f:
16:79:5b:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwebKWpTTXG/ueR60mbIFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjMwMTAyMDMxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWE2NGE2ZjU0MmQwZTExZDI1MmEwZjM1ODQ3YmQwNjZlZmUyMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwcuA16+Wk2rc+jHMhW3fZ6GQtyg
AJcVtak9wqpe0Zl+haTOXYBZ/CUPccxq8UyfYCsLh2PhkGpE0UPEAQOeWtLomA+9
xRVLPFEFCqoWx4Az4bnndCcb+v1glrVubx6WzGeePBn/Y6R7566SXG5nKKYloM5w
LtWIYJHT+xK9Sho60FpkDvX9eDpicucCsRoY3LMXp2Srj7/Jgx7IZQxN0AP5nMym
T22JQoCHvO/lqBKZ4VNumueRyjVZP9TcaYDmO9Kytl1OevKM5HMT1iXROjdoXYr7
f29Bvmi32aDn+t0pvssCDVT4ZAdt4vTFhe+Wr6YaTTnjyoQGCQVH5eOPEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6mSm9ULQ4R0lKg81hHvQZu/iJpMB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvcnFaS2IxUXREaEhTVXFEeldFZTlCbTctSW1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/cMA0G
CSqGSIb3DQEBCwUAA4IBAQAkRWrCtILLX+EZ7p0/hzFl+NhaZP7BvS0UJpukzsKe
7iTd1lPIhv/r5ChLEj1r+NAtSkyJYsE+U8kz8TJ5Mustz1Lm+SAPdvcusv67hRd6
950uOGivOeILSCYsX6qMrayyo0P6XzegZ14MPNahcEEqVxpB55SxunOjIt9bzTeh
sXamu3Wg54bthhszs/jjEs71d0PSG3r9GqhoaNusOnQ2KvzICxZN6Bt6OA5sAbVl
kszYyqvMuiTVf12IhHYjBIwkpU20UB7EIqCz71VrVZejmwv90eUr+NPRfF80yCSh
BJ7DEVnrhavkFsDnFEk5cGnUi6FDVi/D8wbNnl8WeVvq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org