Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/wM_MgUs86iC12s0gpHfIWTpi3u4.roa
File: wM_MgUs86iC12s0gpHfIWTpi3u4.roa (raw, json)
Hash identifier: S0nh58Q+TWCbmw5jM+hm8dNndGZV20S9z5KY/5Y5WbU=
Subject key identifier: C0:CF:CC:81:4B:3C:EA:20:B5:DA:CD:20:A4:77:C8:59:3A:62:DE:EE
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01888A80B9AD1AD08A8960CAAC2A49987A43
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/wM_MgUs86iC12s0gpHfIWTpi3u4.roa
Signing time: Mon 05 Jun 2023 07:41:11 +0000
ROA not before: Mon 05 Jun 2023 07:41:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.143.4.0/22 maxlen: 24
37.143.0.0/22 maxlen: 24
46.28.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:80:b9:ad:1a:d0:8a:89:60:ca:ac:2a:49:98:7a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jun 5 07:41:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0cfcc814b3cea20b5dacd20a477c8593a62deee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:0d:34:05:a3:75:74:13:fc:37:10:c3:de:
94:bd:8a:75:fd:cc:ab:c9:92:b2:a4:23:1d:4e:eb:
20:a9:80:a3:90:e5:64:7f:17:40:16:22:21:64:d5:
c9:25:35:b6:b7:ad:fb:b6:ab:f3:6e:43:ed:89:1b:
de:36:dc:20:8b:c4:85:72:e3:9a:0e:6c:65:6b:e7:
a9:52:c5:17:b6:d7:0c:d4:67:06:1e:40:3f:75:57:
f5:b3:dd:01:e0:9c:f2:e0:ae:3e:3d:b9:c9:1c:54:
29:5a:54:8a:63:a8:8b:a0:77:09:60:00:8a:96:b9:
b6:ad:7c:df:da:f5:2e:89:ba:83:59:db:28:74:cf:
ad:cf:b2:23:d7:d1:3f:74:90:dc:e7:6b:3a:a2:bd:
45:bb:60:b3:7f:c6:c4:19:54:ab:ac:85:bc:b7:18:
25:8c:24:f1:57:d3:3e:64:d9:29:40:54:81:4d:57:
c4:a1:27:7d:4c:bb:cd:fb:46:3a:67:e3:75:d3:c7:
80:ae:8a:13:79:b9:43:14:9c:1a:91:2c:20:79:d3:
fa:7f:1d:36:dc:b5:40:c6:43:f2:b1:e7:53:b6:1e:
45:52:34:e4:08:ac:d1:dd:f8:35:1e:7d:a4:96:c8:
a2:73:1b:bb:e1:f2:93:00:3a:b4:ac:aa:6d:9b:26:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:CC:81:4B:3C:EA:20:B5:DA:CD:20:A4:77:C8:59:3A:62:DE:EE
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/wM_MgUs86iC12s0gpHfIWTpi3u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/21
46.28.40.0/22
Signature Algorithm: sha256WithRSAEncryption
48:18:a2:d9:25:f0:36:ee:70:53:26:e7:b3:d6:a4:c0:f9:e7:
29:0d:8e:61:3a:d1:a6:7a:54:b6:33:b7:b6:8f:2d:32:6c:12:
11:64:d6:d5:e6:37:1a:39:20:0b:c4:76:54:65:70:80:da:b8:
44:3d:f2:87:1a:b3:ec:ee:44:36:27:ab:30:43:da:28:87:0a:
4d:88:cf:35:ab:56:9c:0c:d0:0f:82:48:88:2e:58:06:40:91:
ef:a5:22:91:a4:33:9b:9a:46:34:d2:ec:d1:46:17:f4:64:09:
01:25:08:c1:b6:97:2b:d8:18:3a:61:16:b4:3b:b3:a6:96:9d:
b1:84:ba:9c:a2:f3:ad:19:f5:2c:47:3c:60:89:be:d9:42:76:
9a:96:74:54:10:32:54:4b:b4:d4:73:1d:12:d8:a2:6a:ec:b8:
d1:e6:25:cd:57:10:e0:20:f3:80:a0:dd:16:89:c0:33:03:5d:
f3:52:ac:1a:7d:91:84:34:57:4c:d1:a2:84:bb:d7:d5:18:3b:
fa:3e:40:54:69:de:86:79:cd:35:2d:9a:ce:d9:1d:23:a5:88:
a8:9f:7a:ee:7e:02:63:df:09:4e:20:b7:5e:b1:fe:d7:bf:03:
10:bb:cf:b3:fb:21:86:ba:d6:2d:ac:92:63:13:ed:73:49:4a:
f5:2d:6d:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiKgLmtGtCKiWDKrCpJmHpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjMwNjA1MDc0MTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGNmY2M4MTRiM2NlYTIwYjVkYWNkMjBhNDc3Yzg1OTNhNjJkZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xMNNAWjdXQT/DcQw96UvYp1/cyr
yZKypCMdTusgqYCjkOVkfxdAFiIhZNXJJTW2t637tqvzbkPtiRveNtwgi8SFcuOa
Dmxla+epUsUXttcM1GcGHkA/dVf1s90B4Jzy4K4+PbnJHFQpWlSKY6iLoHcJYACK
lrm2rXzf2vUuibqDWdsodM+tz7Ij19E/dJDc52s6or1Fu2Czf8bEGVSrrIW8txgl
jCTxV9M+ZNkpQFSBTVfEoSd9TLvN+0Y6Z+N108eArooTeblDFJwakSwgedP6fx02
3LVAxkPysedTth5FUjTkCKzR3fg1Hn2klsiicxu74fKTADq0rKptmyYQpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDPzIFLPOogtdrNIKR3yFk6Yt7uMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvd01fTWdVczg2aUMxMnMwZ3BIZklXVHBpM3U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJY8AAwQC
LhwoMA0GCSqGSIb3DQEBCwUAA4IBAQBIGKLZJfA27nBTJuez1qTA+ecpDY5hOtGm
elS2M7e2jy0ybBIRZNbV5jcaOSALxHZUZXCA2rhEPfKHGrPs7kQ2J6swQ9oohwpN
iM81q1acDNAPgkiILlgGQJHvpSKRpDObmkY00uzRRhf0ZAkBJQjBtpcr2Bg6YRa0
O7Omlp2xhLqcovOtGfUsRzxgib7ZQnaalnRUEDJUS7TUcx0S2KJq7LjR5iXNVxDg
IPOAoN0WicAzA13zUqwafZGENFdM0aKEu9fVGDv6PkBUad6Gec01LZrO2R0jpYio
n3rufgJj3wlOILdesf7XvwMQu8+z+yGGutYtrJJjE+1zSUr1LW09
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:33 2023 by rpki-client on console-ams.rpki-client.org