Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Wi8HquokJSK5VhDpt1jw3cgvvrk.roa
File: Wi8HquokJSK5VhDpt1jw3cgvvrk.roa (raw, json)
Hash identifier: C55F+cY1xl6HDzv26PZrGB5CSfN5fVNtDQiRpX/5noc=
Subject key identifier: 5A:2F:07:AA:EA:24:25:22:B9:56:10:E9:B7:58:F0:DD:C8:2F:BE:B9
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 01856CB833E284CA98385D7AEF08AAD4CB66
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Wi8HquokJSK5VhDpt1jw3cgvvrk.roa
Signing time: Sun 01 Jan 2023 09:44:49 +0000
ROA not before: Sun 01 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29320
IP address blocks: 128.0.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:33:e2:84:ca:98:38:5d:7a:ef:08:aa:d4:cb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jan 1 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a2f07aaea242522b95610e9b758f0ddc82fbeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:c2:2f:b9:37:de:86:84:a7:b6:a2:2f:4a:
e1:1f:02:23:05:21:33:90:09:68:bd:45:b1:10:c1:
ce:96:f0:28:70:be:ea:95:eb:ac:04:ae:87:e4:d5:
50:94:24:36:56:d8:1d:97:26:ab:00:02:c6:49:c7:
0e:ab:f4:b3:90:50:9d:ca:c9:a8:e4:5e:c6:be:c7:
79:20:dd:b4:00:4a:c8:28:a6:36:2a:e5:ea:26:94:
ce:7b:8c:91:42:e9:59:9c:2f:2b:90:d0:32:77:b9:
3e:a2:d4:2c:5f:66:f0:f5:e6:99:ff:50:bb:79:d0:
e3:be:ca:4a:92:35:5d:c1:8f:5f:7e:b2:b1:f8:b2:
8c:e3:da:25:48:c2:e5:e8:8b:de:17:10:c0:22:91:
d6:a4:81:cd:e4:a6:26:d1:f2:8a:47:44:8c:3c:89:
5c:84:be:2e:76:f5:e5:28:43:1c:d3:82:03:71:46:
bd:98:9c:de:04:a4:07:54:06:bf:1f:b8:d9:9f:21:
e4:f3:9b:b1:db:bd:c1:42:f0:29:0b:4d:40:8a:0f:
5a:87:b5:1b:2b:4e:d6:d9:34:06:7e:5c:49:c6:33:
91:37:18:27:01:dc:68:a6:c3:3d:f8:9d:7a:3b:d8:
5a:e2:74:7d:ce:37:2e:c5:3f:d0:df:9e:e4:29:79:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:07:AA:EA:24:25:22:B9:56:10:E9:B7:58:F0:DD:C8:2F:BE:B9
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Wi8HquokJSK5VhDpt1jw3cgvvrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:41:3d:b4:69:2c:ac:77:64:19:78:0f:b5:cf:1b:a1:3c:16:
25:58:1d:b0:de:91:37:8a:ed:91:31:90:d1:59:36:5c:f8:b3:
d5:bd:69:84:62:95:f3:88:f3:4e:bf:cd:fe:a2:17:92:4a:8e:
9a:cd:cc:b3:35:00:47:8d:85:8c:20:ee:44:4f:08:fe:e7:a7:
bb:3c:d9:60:f2:7b:fe:52:15:ed:31:ef:32:c1:60:9e:5c:02:
b7:2c:e1:20:0c:92:ec:2d:2c:26:5a:72:53:af:66:dd:38:7d:
1f:5c:5a:e6:77:ab:59:15:93:53:41:f9:8e:2a:4f:c6:5b:b1:
b9:aa:cb:28:cc:26:4e:e0:bd:c3:5a:b6:6f:e0:c1:85:8c:d2:
ff:74:ec:37:b9:6d:db:60:f5:4d:dc:c9:74:88:ce:16:9d:c4:
23:bf:cc:5f:5c:fc:de:8e:60:c7:d4:d4:e8:b7:8c:f0:9b:df:
b0:0f:af:67:b1:06:42:bd:04:76:43:29:7f:c4:eb:53:9c:12:
de:0c:f1:eb:46:f4:00:13:a0:e6:b7:d5:47:9c:77:44:75:14:
12:5e:40:f7:ac:88:11:00:fe:af:0f:fd:54:95:b2:a2:44:48:
31:38:fc:22:41:1f:ec:9b:a6:03:72:d9:29:bc:46:94:24:0e:
ca:9e:20:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsuDPihMqYOF167wiq1MtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi
MWUwMDkwHhcNMjMwMTAxMDk0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTJmMDdhYWVhMjQyNTIyYjk1NjEwZTliNzU4ZjBkZGM4MmZiZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vXCL7k33oaEp7aiL0rhHwIjBSEz
kAlovUWxEMHOlvAocL7qleusBK6H5NVQlCQ2VtgdlyarAALGSccOq/SzkFCdysmo
5F7Gvsd5IN20AErIKKY2KuXqJpTOe4yRQulZnC8rkNAyd7k+otQsX2bw9eaZ/1C7
edDjvspKkjVdwY9ffrKx+LKM49olSMLl6IveFxDAIpHWpIHN5KYm0fKKR0SMPIlc
hL4udvXlKEMc04IDcUa9mJzeBKQHVAa/H7jZnyHk85ux273BQvApC01Aig9ah7Ub
K07W2TQGflxJxjORNxgnAdxopsM9+J16O9ha4nR9zjcuxT/Q357kKXk3pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFovB6rqJCUiuVYQ6bdY8N3IL765MB8GA1UdIwQY
MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt
Y2IxMWJjNWIyZjFiLzEvV2k4SHF1b2tKU0s1VmhEcHQxanczY2d2dnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi
LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgABoMA0G
CSqGSIb3DQEBCwUAA4IBAQAeQT20aSysd2QZeA+1zxuhPBYlWB2w3pE3iu2RMZDR
WTZc+LPVvWmEYpXziPNOv83+oheSSo6azcyzNQBHjYWMIO5ETwj+56e7PNlg8nv+
UhXtMe8ywWCeXAK3LOEgDJLsLSwmWnJTr2bdOH0fXFrmd6tZFZNTQfmOKk/GW7G5
qssozCZO4L3DWrZv4MGFjNL/dOw3uW3bYPVN3Ml0iM4WncQjv8xfXPzejmDH1NTo
t4zwm9+wD69nsQZCvQR2Qyl/xOtTnBLeDPHrRvQAE6Dmt9VHnHdEdRQSXkD3rIgR
AP6vD/1UlbKiREgxOPwiQR/sm6YDctkpvEaUJA7KniBi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:53 2024 by rpki-client on console-ams.rpki-client.org