Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/Tb77aXndB1Lirm0lEYo1mQhx2gU.roa
File: Tb77aXndB1Lirm0lEYo1mQhx2gU.roa (raw, json)
Hash identifier: D/5xurZPjhDgQdHyAJPy+/DqKZhoXjvkt75h5dIIz24=
Subject key identifier: 4D:BE:FB:69:79:DD:07:52:E2:AE:6D:25:11:8A:35:99:08:71:DA:05
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 0188488571187989B97A8DB01A351702DA39
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/Tb77aXndB1Lirm0lEYo1mQhx2gU.roa
Signing time: Tue 23 May 2023 12:11:24 +0000
ROA not before: Tue 23 May 2023 12:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41378
IP address blocks: 2.58.64.0/23 maxlen: 24
2.58.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:85:71:18:79:89:b9:7a:8d:b0:1a:35:17:02:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: May 23 12:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dbefb6979dd0752e2ae6d25118a35990871da05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d1:de:2a:c9:b0:0e:7a:40:ac:ed:2f:0f:69:
29:dc:68:84:4e:89:d7:fd:30:23:d5:fd:91:b0:75:
a7:70:07:9f:a4:d4:56:f0:27:51:85:67:18:d3:46:
7d:4d:36:9c:47:42:56:2d:93:f0:b4:11:c8:d7:71:
87:ff:fe:8b:06:9a:74:35:f4:a8:8c:f3:22:5c:cd:
5e:68:69:1b:2d:64:4f:d2:94:03:da:72:6f:d0:ca:
95:a0:a6:71:03:0b:b6:7b:bf:2d:a7:7c:58:60:aa:
a7:53:e8:26:da:58:63:4f:06:06:71:b7:9b:75:70:
0f:1a:bc:d3:d2:25:58:af:68:0b:4f:16:96:12:04:
3b:a7:1e:c2:a3:18:40:f9:fa:5c:e4:4e:81:6b:6d:
b3:7c:4e:f1:00:9e:8c:08:33:76:e4:4a:02:f5:ab:
a3:a5:38:16:47:dd:4d:c9:3a:5e:11:2a:16:db:75:
ad:12:b2:3a:25:ce:a9:65:99:c9:e4:a0:82:4c:a3:
c4:1f:4e:1f:5b:c0:37:69:64:b3:7b:14:76:52:72:
83:d0:7e:f4:95:e2:a4:f8:0d:84:3c:c5:c2:53:07:
52:cb:4a:75:8a:b9:7b:d2:32:ac:11:a7:f0:38:b0:
23:8c:84:2c:9a:d3:9e:9c:95:d0:b7:89:83:8a:0c:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:FB:69:79:DD:07:52:E2:AE:6D:25:11:8A:35:99:08:71:DA:05
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/Tb77aXndB1Lirm0lEYo1mQhx2gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/23
Signature Algorithm: sha256WithRSAEncryption
80:2b:1e:aa:fb:1f:35:d5:1e:74:38:fb:f2:1b:30:51:ad:17:
29:21:99:7f:d8:8f:4c:df:7f:30:91:d2:80:02:b2:0e:a3:d0:
f5:29:93:e3:c7:5f:6a:45:b5:8c:69:20:81:c2:44:cb:22:2d:
d6:49:c5:5b:18:d0:cd:67:94:96:46:e0:b9:13:50:be:6d:9a:
3b:04:49:ca:c2:7e:fb:9f:ae:56:3e:d1:ad:eb:7f:65:95:8f:
03:ca:36:33:b5:7b:c4:d9:12:2f:fe:ac:82:a4:c5:ac:5b:5a:
78:03:1d:11:eb:69:72:dc:fc:c8:a0:5c:74:db:99:b0:ea:e0:
db:ec:5f:29:70:e7:61:cf:b3:37:f1:35:05:cb:99:ac:fd:e7:
c3:ad:12:11:cd:df:9f:f1:c9:d3:e4:e8:79:03:bd:05:a4:78:
79:bc:02:b8:45:bb:20:69:c9:f1:86:db:6e:ec:b8:33:5c:32:
6f:ae:cb:12:eb:ad:f5:90:a9:a7:7f:c3:91:25:64:8a:50:ff:
2c:5f:41:03:66:41:cc:dc:55:6f:f3:67:37:3c:33:22:53:85:
11:a4:23:58:74:b5:d0:42:01:b1:84:be:fe:72:77:de:91:d4:
af:4b:1f:2a:d1:a4:27:ec:8a:4d:ea:31:5b:90:3a:49:b6:32:
dc:0f:3a:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhIhXEYeYm5eo2wGjUXAto5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzRjZjNlMmZhODkyYjVmZGQzZjMwZGM4Mjc1ZWUxMDYy
ZTFkMDYwHhcNMjMwNTIzMTIxMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGJlZmI2OTc5ZGQwNzUyZTJhZTZkMjUxMThhMzU5OTA4NzFkYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tHeKsmwDnpArO0vD2kp3GiETonX
/TAj1f2RsHWncAefpNRW8CdRhWcY00Z9TTacR0JWLZPwtBHI13GH//6LBpp0NfSo
jPMiXM1eaGkbLWRP0pQD2nJv0MqVoKZxAwu2e78tp3xYYKqnU+gm2lhjTwYGcbeb
dXAPGrzT0iVYr2gLTxaWEgQ7px7CoxhA+fpc5E6Ba22zfE7xAJ6MCDN25EoC9auj
pTgWR91NyTpeESoW23WtErI6Jc6pZZnJ5KCCTKPEH04fW8A3aWSzexR2UnKD0H70
leKk+A2EPMXCUwdSy0p1irl70jKsEafwOLAjjIQsmtOenJXQt4mDigyIoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2++2l53QdS4q5tJRGKNZkIcdoFMB8GA1UdIwQY
MBaAFER0zz4vqJK1/dPzDcgnXuEGLh0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhUUFBpLW9rclg5MF9NTnlDZGU0UVl1SFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjBiYTEtNmFlOC00YjQzLWE3MDkt
NzU0NWMwNGUxNTc4LzEvVGI3N2FYbmRCMUxpcm0wbEVZbzFtUWh4MmdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjBiYTEtNmFlOC00YjQzLWE3MDktNzU0NWMwNGUxNTc4
LzEvUkhUUFBpLW9rclg5MF9NTnlDZGU0UVl1SFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjpAMA0G
CSqGSIb3DQEBCwUAA4IBAQCAKx6q+x811R50OPvyGzBRrRcpIZl/2I9M338wkdKA
ArIOo9D1KZPjx19qRbWMaSCBwkTLIi3WScVbGNDNZ5SWRuC5E1C+bZo7BEnKwn77
n65WPtGt639llY8DyjYztXvE2RIv/qyCpMWsW1p4Ax0R62ly3PzIoFx025mw6uDb
7F8pcOdhz7M38TUFy5ms/efDrRIRzd+f8cnT5Oh5A70FpHh5vAK4Rbsgacnxhttu
7LgzXDJvrssS6631kKmnf8ORJWSKUP8sX0EDZkHM3FVv82c3PDMiU4URpCNYdLXQ
QgGxhL7+cnfekdSvSx8q0aQn7IpN6jFbkDpJtjLcDzoe
-----END CERTIFICATE-----
Generated at Thu Sep 7 23:09:08 2023 by rpki-client on console-ams.rpki-client.org