Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/gWwXZ0eEJwIJHhATXU6XzNTv7GA.roa
File: gWwXZ0eEJwIJHhATXU6XzNTv7GA.roa (raw, json)
Hash identifier: wairOTvKgp+RDVgf/bnw3jcXN5DJFiPMq367cVGlF9k=
Subject key identifier: 81:6C:17:67:47:84:27:02:09:1E:10:13:5D:4E:97:CC:D4:EF:EC:60
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 0187E744B46FF9801F9CC191DD901C93D872
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/gWwXZ0eEJwIJHhATXU6XzNTv7GA.roa
Signing time: Thu 04 May 2023 14:57:32 +0000
ROA not before: Thu 04 May 2023 14:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33844
IP address blocks: 84.252.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:44:b4:6f:f9:80:1f:9c:c1:91:dd:90:1c:93:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: May 4 14:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=816c176747842702091e10135d4e97ccd4efec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:99:2b:60:9f:ad:64:7e:fc:9d:32:2e:b0:
51:07:01:ae:0c:81:e9:b5:bc:47:b5:fa:f0:96:bc:
11:99:e8:18:c9:7a:2e:aa:08:29:bf:56:e2:45:eb:
d3:1f:42:80:d0:1e:75:58:4c:c8:dd:81:24:09:d1:
ae:89:58:1e:58:3a:2f:98:6e:77:b5:cb:a5:d5:a5:
6d:f3:e9:31:84:6e:dc:db:e8:1d:c0:12:53:ee:b1:
25:bb:b5:4c:01:0d:e6:85:80:1d:be:64:b8:65:8c:
de:6b:d9:81:dc:3a:1a:f6:bc:61:79:28:bf:bb:a3:
7a:9c:81:77:43:2a:49:1f:b4:99:7f:09:8d:f8:67:
a1:82:bf:2d:9b:cd:ad:ba:47:23:64:ef:03:76:b4:
65:26:3f:f2:48:6d:3d:42:f9:89:0a:c5:06:eb:af:
3e:6d:55:1a:40:07:de:87:73:4a:07:a4:f7:01:2c:
00:a4:da:00:77:30:e5:57:f8:8d:aa:d4:ce:ac:11:
6f:88:77:55:c5:d7:5f:fa:7a:1d:df:ff:37:41:4f:
ea:58:e2:6a:7b:40:d9:3b:f7:71:59:95:99:cf:1d:
8f:4a:99:01:4f:0c:6f:90:a7:d6:87:56:aa:e5:78:
b3:f5:96:3b:b4:3d:13:25:f4:8d:b5:40:3c:a7:ef:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:17:67:47:84:27:02:09:1E:10:13:5D:4E:97:CC:D4:EF:EC:60
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/gWwXZ0eEJwIJHhATXU6XzNTv7GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.148.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9d:c5:fe:83:fd:3a:41:d7:c8:7c:c9:68:18:a2:31:62:ba:
e8:51:4a:ff:e0:0d:d4:6a:ca:80:bf:05:aa:8c:08:77:32:d6:
e6:14:cf:80:59:e6:15:59:5f:9a:be:6e:75:5c:e1:dc:d7:bc:
3c:d5:ea:8b:d3:79:50:ee:4d:f0:8c:40:7b:95:1a:73:af:02:
14:3d:9e:93:f7:7b:f5:fa:fb:86:a8:1c:72:a8:af:79:91:b5:
a2:ba:48:87:06:b0:08:fd:70:53:f3:f7:d7:b7:c4:53:e2:cf:
90:fc:cf:0e:40:88:28:19:58:fc:fd:72:d0:b4:79:1e:45:a2:
28:3d:d9:7c:ae:69:0e:da:d8:84:1b:1c:39:da:44:32:fe:bd:
58:61:90:e0:70:78:b0:9f:d3:70:c5:b4:7d:14:9f:7e:7f:3b:
81:5d:7f:a3:f9:b8:64:10:18:60:a2:66:df:4c:d0:af:55:cb:
0a:47:26:3a:7a:2b:88:ec:0b:2d:b3:e3:5a:1d:0b:05:b9:5c:
83:57:5b:f4:0d:2f:9e:fb:a4:f2:e8:2d:fc:ca:92:42:67:39:
ec:3d:f2:36:ee:24:d8:84:3a:f0:f4:7c:06:60:af:38:70:06:
18:63:ab:31:97:b1:0a:27:d7:7c:bf:79:a3:31:c9:c0:f6:3e:
91:de:7a:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfnRLRv+YAfnMGR3ZAck9hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk
NThjNDYwHhcNMjMwNTA0MTQ1NzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTZjMTc2NzQ3ODQyNzAyMDkxZTEwMTM1ZDRlOTdjY2Q0ZWZlYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHeZK2CfrWR+/J0yLrBRBwGuDIHp
tbxHtfrwlrwRmegYyXouqggpv1biRevTH0KA0B51WEzI3YEkCdGuiVgeWDovmG53
tcul1aVt8+kxhG7c2+gdwBJT7rElu7VMAQ3mhYAdvmS4ZYzea9mB3Doa9rxheSi/
u6N6nIF3QypJH7SZfwmN+Gehgr8tm82tukcjZO8DdrRlJj/ySG09QvmJCsUG668+
bVUaQAfeh3NKB6T3ASwApNoAdzDlV/iNqtTOrBFviHdVxddf+nod3/83QU/qWOJq
e0DZO/dxWZWZzx2PSpkBTwxvkKfWh1aq5Xiz9ZY7tD0TJfSNtUA8p+/tjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFsF2dHhCcCCR4QE11Ol8zU7+xgMB8GA1UdIwQY
MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt
N2QxNmI5MGRiZTcyLzEvZ1d3WFowZUVKd0lKSGhBVFhVNlh6TlR2N0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy
LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPyUMA0G
CSqGSIb3DQEBCwUAA4IBAQBjncX+g/06QdfIfMloGKIxYrroUUr/4A3UasqAvwWq
jAh3MtbmFM+AWeYVWV+avm51XOHc17w81eqL03lQ7k3wjEB7lRpzrwIUPZ6T93v1
+vuGqBxyqK95kbWiukiHBrAI/XBT8/fXt8RT4s+Q/M8OQIgoGVj8/XLQtHkeRaIo
Pdl8rmkO2tiEGxw52kQy/r1YYZDgcHiwn9NwxbR9FJ9+fzuBXX+j+bhkEBhgombf
TNCvVcsKRyY6eiuI7Asts+NaHQsFuVyDV1v0DS+e+6Ty6C38ypJCZznsPfI27iTY
hDrw9HwGYK84cAYYY6sxl7EKJ9d8v3mjMcnA9j6R3nqA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:26 2024 by rpki-client on console-ams.rpki-client.org