Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/1Go7Qop3wSJJnbBPHq7n3c_sCU8.roa
File: 1Go7Qop3wSJJnbBPHq7n3c_sCU8.roa (raw, json)
Hash identifier: ip8ABKQwIX2MCJXBkwF2mgD8PDTujDHrlePfJgVc4FQ=
Subject key identifier: D4:6A:3B:42:8A:77:C1:22:49:9D:B0:4F:1E:AE:E7:DD:CF:EC:09:4F
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 0189DEE37D08D4542423FC16E17F1970ADC5
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/1Go7Qop3wSJJnbBPHq7n3c_sCU8.roa
Signing time: Thu 10 Aug 2023 09:59:57 +0000
ROA not before: Thu 10 Aug 2023 09:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207734
IP address blocks: 5.11.22.0/24 maxlen: 24
5.11.26.0/24 maxlen: 24
5.11.26.0/23 maxlen: 23
5.11.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 07:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:e3:7d:08:d4:54:24:23:fc:16:e1:7f:19:70:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Aug 10 09:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d46a3b428a77c122499db04f1eaee7ddcfec094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:b0:79:c6:65:5e:be:31:ad:ef:a0:73:c6:
5c:db:fc:9a:e6:63:8c:8a:95:7e:74:01:90:0f:26:
c8:a8:44:5d:b3:7a:c2:4b:a6:f3:36:47:c6:37:e9:
19:f6:11:33:14:4a:d9:0f:8d:bb:9c:69:80:b9:cd:
a5:e4:07:62:fa:0f:6f:37:aa:80:b5:a7:e6:f1:e6:
ff:8c:3a:a3:de:79:f6:2f:de:82:61:65:4b:3d:c0:
83:07:f8:d6:9d:5f:be:a1:27:9a:af:dc:cd:74:f3:
8f:a1:35:31:6f:10:7c:4d:66:ff:7f:99:7e:29:16:
7e:cd:48:f2:86:fa:8d:a9:ba:ae:c7:4c:07:0e:14:
61:92:5d:c5:27:cf:e0:93:d2:f1:ed:50:13:cf:0f:
19:37:de:1e:54:4a:f6:d2:08:81:50:0f:a3:c4:df:
46:99:35:72:5b:17:d7:a6:d9:4e:cc:11:be:02:e4:
98:e0:cf:b3:1b:9f:d8:da:30:ea:e0:79:37:a1:a7:
cd:90:45:cb:ef:2b:60:b5:8b:f0:52:09:15:08:c1:
cf:de:12:11:53:d1:93:7f:9d:51:94:37:f5:5b:df:
9a:1a:3d:6f:9c:e3:74:01:af:82:42:93:82:25:07:
c4:b3:b2:09:8b:3e:a4:28:0c:07:b8:3d:23:f0:89:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:3B:42:8A:77:C1:22:49:9D:B0:4F:1E:AE:E7:DD:CF:EC:09:4F
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/1Go7Qop3wSJJnbBPHq7n3c_sCU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.22.0/24
5.11.26.0/23
Signature Algorithm: sha256WithRSAEncryption
61:22:39:66:b0:0a:e4:42:08:9e:15:63:27:e1:25:42:7b:82:
c6:52:fc:f4:c5:b5:c2:3d:52:24:2c:a1:e8:e2:32:8d:ab:a3:
24:a5:1b:c6:65:31:db:61:60:fe:d2:6f:bb:7c:1a:e6:05:22:
0f:8e:da:09:12:c2:fb:bf:91:d3:13:2c:9c:52:ce:a9:44:ad:
11:ce:fe:63:52:ab:14:98:89:3f:1f:72:1f:c1:1a:ee:ae:3a:
d0:16:5c:71:0a:35:6e:ef:b7:3c:35:e2:bd:77:7f:91:61:8a:
d5:03:00:54:0c:ff:12:7c:9d:16:1e:d7:0f:30:4d:49:13:19:
20:ac:a1:0f:ca:be:95:33:e2:29:de:02:d8:0d:bb:0c:96:cf:
f3:72:b5:49:b5:7c:3a:c4:96:bb:89:e5:48:78:12:19:92:42:
dc:64:ed:e7:eb:a8:8a:11:d1:6b:2f:59:cc:b1:c9:af:48:c4:
0b:5a:27:1f:39:5d:08:d8:98:c4:8d:d3:9c:2f:c0:d7:31:89:
c8:d6:37:04:7c:a1:5d:ce:20:9f:72:d5:94:ea:56:4d:41:d9:
40:3d:4e:9e:ce:d4:c1:26:e6:28:05:8f:ec:1f:4d:34:a9:98:
89:72:a1:e5:75:17:0d:f7:aa:14:57:71:ec:a6:6d:04:fc:46:
4b:2a:49:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYne430I1FQkI/wW4X8ZcK3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj
NDkyNTUwHhcNMjMwODEwMDk1OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDZhM2I0MjhhNzdjMTIyNDk5ZGIwNGYxZWFlZTdkZGNmZWMwOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36uwecZlXr4xre+gc8Zc2/ya5mOM
ipV+dAGQDybIqERds3rCS6bzNkfGN+kZ9hEzFErZD427nGmAuc2l5Adi+g9vN6qA
tafm8eb/jDqj3nn2L96CYWVLPcCDB/jWnV++oSear9zNdPOPoTUxbxB8TWb/f5l+
KRZ+zUjyhvqNqbqux0wHDhRhkl3FJ8/gk9Lx7VATzw8ZN94eVEr20giBUA+jxN9G
mTVyWxfXptlOzBG+AuSY4M+zG5/Y2jDq4Hk3oafNkEXL7ytgtYvwUgkVCMHP3hIR
U9GTf51RlDf1W9+aGj1vnON0Aa+CQpOCJQfEs7IJiz6kKAwHuD0j8ImqpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNRqO0KKd8EiSZ2wTx6u593P7AlPMB8GA1UdIwQY
MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct
MzZhZTc2ZWU5ODNlLzEvMUdvN1FvcDN3U0pKbmJCUEhxN24zY19zQ1U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl
LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQsWAwQB
BQsaMA0GCSqGSIb3DQEBCwUAA4IBAQBhIjlmsArkQgieFWMn4SVCe4LGUvz0xbXC
PVIkLKHo4jKNq6MkpRvGZTHbYWD+0m+7fBrmBSIPjtoJEsL7v5HTEyycUs6pRK0R
zv5jUqsUmIk/H3IfwRrurjrQFlxxCjVu77c8NeK9d3+RYYrVAwBUDP8SfJ0WHtcP
ME1JExkgrKEPyr6VM+Ip3gLYDbsMls/zcrVJtXw6xJa7ieVIeBIZkkLcZO3n66iK
EdFrL1nMscmvSMQLWicfOV0I2JjEjdOcL8DXMYnI1jcEfKFdziCfctWU6lZNQdlA
PU6eztTBJuYoBY/sH000qZiJcqHldRcN96oUV3Hspm0E/EZLKknh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org