Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/V1XbT3WJVOUwdobgqG8wrANlr80.roa
File: V1XbT3WJVOUwdobgqG8wrANlr80.roa (raw, json)
Hash identifier: 9sVJI2G6ay8Cg2Pn3WJpR6P9N6rGJBtfiek3YeJwPWE=
Subject key identifier: 57:55:DB:4F:75:89:54:E5:30:76:86:E0:A8:6F:30:AC:03:65:AF:CD
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0187AD45BD36D71392B3F2798E0C8090748F
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/V1XbT3WJVOUwdobgqG8wrANlr80.roa
Signing time: Sun 23 Apr 2023 08:40:41 +0000
ROA not before: Sun 23 Apr 2023 08:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.58.54.0/24 maxlen: 32
5.180.194.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ad:45:bd:36:d7:13:92:b3:f2:79:8e:0c:80:90:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Apr 23 08:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5755db4f758954e5307686e0a86f30ac0365afcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:e6:b5:0b:8c:cd:9e:cd:f2:3d:96:03:aa:
57:da:a7:d2:75:95:97:f8:b8:5c:fb:30:9a:3e:28:
e6:5c:29:98:5c:71:a9:28:99:d8:03:d2:1c:eb:c1:
4a:17:1d:fa:d3:35:4a:0a:a0:7e:23:32:21:59:de:
d9:bc:c4:ee:f1:a2:77:84:f1:a6:47:ec:9c:01:fe:
86:51:79:bc:43:b3:0f:4c:3c:21:4b:01:4e:d3:bb:
ae:af:ff:90:e7:02:e3:6a:22:45:19:06:36:26:63:
43:88:5b:06:50:55:d8:5c:b4:d3:ef:92:15:6c:da:
7c:79:6b:90:59:57:8b:56:e7:d1:c6:81:70:9f:36:
3c:29:e7:c3:15:fa:37:e9:7a:ca:06:e0:b9:c1:39:
22:d0:79:85:be:6f:9a:36:20:46:88:8a:0f:66:7d:
4a:e7:57:41:49:3e:0a:5f:66:ed:d9:a8:e1:90:cc:
f5:58:8d:39:93:d6:dd:94:fb:b6:f3:09:9e:57:4c:
9e:13:e0:f3:89:ba:7d:c7:f1:74:cf:5e:29:a7:a3:
33:5e:9a:9c:0c:d3:26:c3:7c:2c:0f:cc:ef:eb:5c:
ff:10:21:a1:cf:e6:e3:65:c0:3d:43:bb:2a:f0:ba:
4e:0f:6e:21:fa:44:10:01:f8:f2:99:35:a5:7c:df:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:DB:4F:75:89:54:E5:30:76:86:E0:A8:6F:30:AC:03:65:AF:CD
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/V1XbT3WJVOUwdobgqG8wrANlr80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.54.0/24
5.180.194.0/23
Signature Algorithm: sha256WithRSAEncryption
24:be:b2:fd:c4:30:27:4d:c4:ce:f0:3f:9d:45:46:5b:b4:80:
f1:de:a5:f3:ac:84:96:0e:57:83:18:e6:a9:1a:4c:21:21:b2:
c1:e7:6e:a8:c9:bc:68:5f:23:8f:43:b5:5b:02:a2:30:bf:5b:
52:72:25:ae:26:23:41:81:4c:40:0c:6a:78:d2:87:28:f3:91:
f8:12:45:7e:80:e3:03:90:24:da:74:07:f9:49:f6:a2:16:0b:
03:43:2d:e9:da:17:2d:18:87:2e:d1:a1:03:72:36:fb:6e:2e:
09:0d:26:96:92:5f:a8:fc:e7:07:ec:43:ec:e3:d3:54:e9:5a:
9d:8d:c9:25:39:c0:8a:6d:46:91:33:f6:ba:91:87:6c:82:c0:
03:2e:f0:af:bc:73:a2:95:76:d0:8d:16:d3:2c:ea:11:02:db:
28:46:8e:00:b5:d9:da:9d:14:4a:9b:d0:7a:ad:68:c4:7f:b8:
1f:63:2f:b0:a2:0c:06:8f:60:2e:aa:eb:e5:e6:15:ed:53:cf:
ef:9d:de:9d:77:50:96:a1:06:e4:92:d8:e0:cf:eb:d6:e2:5a:
7e:d9:70:2e:1d:6b:03:2d:02:31:bd:e3:5c:2a:c9:18:cf:2d:
34:3f:4c:9a:79:2d:76:ec:2c:d4:44:84:a0:2a:33:30:e3:71:
59:28:bc:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYetRb021xOSs/J5jgyAkHSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMwNDIzMDg0MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzU1ZGI0Zjc1ODk1NGU1MzA3Njg2ZTBhODZmMzBhYzAzNjVhZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsDmtQuMzZ7N8j2WA6pX2qfSdZWX
+Lhc+zCaPijmXCmYXHGpKJnYA9Ic68FKFx360zVKCqB+IzIhWd7ZvMTu8aJ3hPGm
R+ycAf6GUXm8Q7MPTDwhSwFO07uur/+Q5wLjaiJFGQY2JmNDiFsGUFXYXLTT75IV
bNp8eWuQWVeLVufRxoFwnzY8KefDFfo36XrKBuC5wTki0HmFvm+aNiBGiIoPZn1K
51dBST4KX2bt2ajhkMz1WI05k9bdlPu28wmeV0yeE+Dzibp9x/F0z14pp6MzXpqc
DNMmw3wsD8zv61z/ECGhz+bjZcA9Q7sq8LpOD24h+kQQAfjymTWlfN9qEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFdV2091iVTlMHaG4KhvMKwDZa/NMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvVjFYYlQzV0pWT1V3ZG9iZ3FHOHdyQU5scjgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjo2AwQB
BbTCMA0GCSqGSIb3DQEBCwUAA4IBAQAkvrL9xDAnTcTO8D+dRUZbtIDx3qXzrISW
DleDGOapGkwhIbLB526oybxoXyOPQ7VbAqIwv1tSciWuJiNBgUxADGp40oco85H4
EkV+gOMDkCTadAf5SfaiFgsDQy3p2hctGIcu0aEDcjb7bi4JDSaWkl+o/OcH7EPs
49NU6VqdjcklOcCKbUaRM/a6kYdsgsADLvCvvHOilXbQjRbTLOoRAtsoRo4Atdna
nRRKm9B6rWjEf7gfYy+wogwGj2Auquvl5hXtU8/vnd6dd1CWoQbkktjgz+vW4lp+
2XAuHWsDLQIxveNcKskYzy00P0yaeS127CzURISgKjMw43FZKLxf
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org