Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/aHBsABTBmpaEM8xohW74kCxeccA.roa
File: aHBsABTBmpaEM8xohW74kCxeccA.roa (raw, json)
Hash identifier: 9Dinv37K2lp7jzXE1zWBsvp4d11bhtBWMfVGlHB3S34=
Subject key identifier: 68:70:6C:00:14:C1:9A:96:84:33:CC:68:85:6E:F8:90:2C:5E:71:C0
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018D8A9D3813B2427C5657541928B8545740
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/aHBsABTBmpaEM8xohW74kCxeccA.roa
Signing time: Thu 08 Feb 2024 21:26:15 +0000
ROA not before: Thu 08 Feb 2024 21:26:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216054
IP address blocks: 128.65.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 15:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:9d:38:13:b2:42:7c:56:57:54:19:28:b8:54:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Feb 8 21:26:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68706c0014c19a968433cc68856ef8902c5e71c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:d2:ee:ac:70:72:e4:9d:13:8b:9e:33:ed:
73:11:b4:a0:c5:40:f1:2d:08:a2:88:20:cc:9c:66:
51:9d:ba:20:58:63:cc:ab:c2:0e:94:eb:0e:60:9b:
8d:b4:65:fa:7a:76:05:9e:a3:02:95:4e:52:19:ec:
0d:01:e2:45:9d:98:23:3c:78:07:fd:d4:d0:1c:4a:
59:a6:73:bc:db:0f:e6:cf:23:79:bd:dd:1f:e4:14:
3a:b1:8f:21:bb:32:4a:d0:15:01:da:c9:ca:35:42:
93:f2:5c:71:80:28:42:fe:c5:8a:a9:42:07:80:a0:
34:c3:e6:fe:75:ab:07:87:79:6c:1c:78:b5:05:ae:
fe:a1:3f:5d:7f:2a:a6:70:fb:ff:82:c5:c7:a8:fa:
7e:e5:1c:77:e6:c0:25:40:11:71:95:65:a1:d1:80:
72:7f:15:8a:9e:a1:a9:9c:ef:5e:5f:05:5d:c8:a7:
98:74:22:32:35:86:5d:63:63:d8:f3:4f:7d:30:27:
86:d7:d4:a1:16:d4:54:8d:48:32:dd:29:4a:c5:cb:
46:2d:d9:b1:d1:0a:f1:10:e1:a2:8a:1e:bb:06:1e:
12:ec:e8:a9:57:5e:ca:b5:63:c1:cc:bd:bc:4d:36:
ff:1c:af:81:93:69:8e:3d:90:cd:40:7a:50:59:2c:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:6C:00:14:C1:9A:96:84:33:CC:68:85:6E:F8:90:2C:5E:71:C0
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/aHBsABTBmpaEM8xohW74kCxeccA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c5:de:ce:25:3c:82:6c:09:24:31:9c:4d:4c:33:39:0f:8e:
25:f4:ca:21:77:6a:2c:a6:ca:b3:a7:1c:5d:cf:1d:7d:fe:a0:
ea:dd:43:69:d1:ff:37:bd:63:d9:c7:78:6e:87:7b:04:85:b8:
f7:ad:a1:41:1e:1c:89:77:9c:23:61:18:d1:18:69:d6:12:55:
80:0c:60:fc:87:2f:95:1d:b0:26:c3:61:35:82:32:3f:f0:e1:
61:3a:58:0b:be:4a:98:1d:66:c2:57:da:7d:a1:6c:ae:ac:4d:
5a:1c:37:43:84:4e:1d:40:f6:ca:25:81:f3:c0:e9:90:de:f6:
1a:cc:6a:76:2f:00:95:6c:90:65:b5:e5:c3:82:b2:93:16:89:
0b:42:ce:d6:04:63:c1:19:fb:b2:0e:11:14:2e:57:34:cc:1d:
08:c8:bf:85:34:e9:6a:e8:b7:d4:5b:29:1f:d8:ae:07:80:82:
a8:86:97:39:73:65:f9:8d:04:4e:2a:34:d8:a6:48:76:43:bf:
cf:10:57:2b:01:c9:a2:b8:99:38:f8:62:89:c8:1a:6e:2e:52:
4d:3b:ab:a1:ce:f5:af:37:3d:5b:9e:bf:a3:42:b7:f0:a8:09:
3b:d5:9e:7a:79:df:5a:f5:e8:7e:51:c6:b3:8a:64:17:3d:25:
73:ff:d7:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2KnTgTskJ8VldUGSi4VFdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjQwMjA4MjEyNjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODcwNmMwMDE0YzE5YTk2ODQzM2NjNjg4NTZlZjg5MDJjNWU3MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk3S7qxwcuSdE4ueM+1zEbSgxUDx
LQiiiCDMnGZRnbogWGPMq8IOlOsOYJuNtGX6enYFnqMClU5SGewNAeJFnZgjPHgH
/dTQHEpZpnO82w/mzyN5vd0f5BQ6sY8huzJK0BUB2snKNUKT8lxxgChC/sWKqUIH
gKA0w+b+dasHh3lsHHi1Ba7+oT9dfyqmcPv/gsXHqPp+5Rx35sAlQBFxlWWh0YBy
fxWKnqGpnO9eXwVdyKeYdCIyNYZdY2PY8099MCeG19ShFtRUjUgy3SlKxctGLdmx
0QrxEOGiih67Bh4S7OipV17KtWPBzL28TTb/HK+Bk2mOPZDNQHpQWSx4cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhwbAAUwZqWhDPMaIVu+JAsXnHAMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvYUhCc0FCVEJtcGFFTTh4b2hXNzRrQ3hlY2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgEGlMA0G
CSqGSIb3DQEBCwUAA4IBAQCKxd7OJTyCbAkkMZxNTDM5D44l9Mohd2ospsqzpxxd
zx19/qDq3UNp0f83vWPZx3huh3sEhbj3raFBHhyJd5wjYRjRGGnWElWADGD8hy+V
HbAmw2E1gjI/8OFhOlgLvkqYHWbCV9p9oWyurE1aHDdDhE4dQPbKJYHzwOmQ3vYa
zGp2LwCVbJBlteXDgrKTFokLQs7WBGPBGfuyDhEULlc0zB0IyL+FNOlq6LfUWykf
2K4HgIKohpc5c2X5jQROKjTYpkh2Q7/PEFcrAcmiuJk4+GKJyBpuLlJNO6uhzvWv
Nz1bnr+jQrfwqAk71Z56ed9a9eh+UcazimQXPSVz/9eM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org