Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/T_8F6Qkb4pJKYIeNO8PFXUAh7uQ.roa
File: T_8F6Qkb4pJKYIeNO8PFXUAh7uQ.roa (raw, json)
Hash identifier: tyB4Bbp9yhBG4uH29KhaxY30Q+ZTg7CtDIHKmS0rv1Y=
Subject key identifier: 4F:FF:05:E9:09:1B:E2:92:4A:60:87:8D:3B:C3:C5:5D:40:21:EE:E4
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 018A5A07068078901A2A0FCC707C2798BFF7
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/T_8F6Qkb4pJKYIeNO8PFXUAh7uQ.roa
Signing time: Sun 03 Sep 2023 07:52:04 +0000
ROA not before: Sun 03 Sep 2023 07:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60374
IP address blocks: 5.56.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:07:06:80:78:90:1a:2a:0f:cc:70:7c:27:98:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Sep 3 07:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fff05e9091be2924a60878d3bc3c55d4021eee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:97:02:b5:54:4a:74:58:47:97:87:84:9c:
ee:54:ae:6a:76:67:da:1f:2e:97:25:75:fe:25:f6:
ad:8d:e0:d0:f3:53:96:4c:a8:26:82:39:b8:2d:7a:
61:bf:60:ff:3c:ec:4c:bc:b7:b2:59:2f:a1:77:66:
f2:2d:f8:7c:a2:2d:bb:0f:22:12:75:63:16:3d:be:
03:59:46:83:0b:1c:96:75:ab:ba:e6:fe:15:c3:bc:
2f:7c:5e:fc:68:05:17:cb:55:73:2e:cc:87:1d:e0:
a5:e6:62:b9:c2:d0:e2:0c:7f:82:ef:c0:e1:cf:66:
20:c8:5a:e6:f6:70:10:95:fb:78:cc:06:d3:42:05:
4b:22:de:a3:bb:7d:9a:64:3e:0b:d3:9c:fe:80:a5:
0c:27:6d:81:d7:89:a5:f6:26:f3:ca:32:33:bc:9c:
eb:fa:41:f5:f6:0f:27:da:27:08:cb:a6:03:94:9d:
e7:0f:c9:d3:ed:16:b1:ac:1d:6c:ca:5a:5a:7f:33:
93:ae:b3:61:cc:3d:35:78:15:48:77:32:e2:63:12:
02:43:eb:7d:3f:1e:5a:b3:47:59:0c:98:e4:12:3e:
f1:18:b7:68:0e:de:33:b2:42:6a:0f:85:a3:f6:6d:
44:3c:1c:58:b8:f7:c4:83:eb:a0:cc:a8:c0:6a:48:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:05:E9:09:1B:E2:92:4A:60:87:8D:3B:C3:C5:5D:40:21:EE:E4
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/T_8F6Qkb4pJKYIeNO8PFXUAh7uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4a:c6:64:54:34:fb:b1:60:bf:fe:51:2b:33:ed:14:3b:cb:
e3:87:f2:aa:05:69:db:66:5c:f0:9d:a0:a2:57:a9:46:98:e9:
a3:10:02:b5:96:8b:2b:0d:8d:3e:61:97:fc:40:3f:f9:83:47:
c8:e0:18:a6:e4:d2:1e:38:b0:b7:2d:b7:0b:b1:cb:d2:30:e2:
49:e7:d8:7e:75:69:4a:fb:3d:6f:cd:0c:6b:80:3f:c2:c2:40:
f5:92:ae:1c:50:50:29:f9:c2:f1:5b:ed:1e:6f:4c:17:6e:36:
c0:02:d4:90:9a:ee:9b:4e:f4:a5:1f:ec:e5:db:69:00:b5:f3:
f1:3b:9b:d3:84:07:19:66:b0:e0:74:86:0e:d8:ad:0e:45:41:
45:a2:c3:49:7a:06:78:e7:b8:83:6d:3b:f0:37:a3:4b:3f:d2:
a0:61:07:da:7b:96:e7:74:fa:56:a1:9b:11:dd:99:8d:74:00:
13:27:b1:26:74:02:80:ee:6e:3f:bf:66:7a:17:cf:45:2d:5a:
40:4b:f0:67:79:69:81:19:ec:c9:92:53:8c:62:df:2a:08:95:
e8:b4:68:96:9c:63:c5:da:f0:38:82:94:f8:f7:ad:fe:67:42:
16:65:67:4c:ae:5b:1f:a3:70:a2:7e:c9:1d:95:42:55:74:ab:
93:08:ff:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpaBwaAeJAaKg/McHwnmL/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjMwOTAzMDc1MjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmZmMDVlOTA5MWJlMjkyNGE2MDg3OGQzYmMzYzU1ZDQwMjFlZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzaXArVUSnRYR5eHhJzuVK5qdmfa
Hy6XJXX+JfatjeDQ81OWTKgmgjm4LXphv2D/POxMvLeyWS+hd2byLfh8oi27DyIS
dWMWPb4DWUaDCxyWdau65v4Vw7wvfF78aAUXy1VzLsyHHeCl5mK5wtDiDH+C78Dh
z2YgyFrm9nAQlft4zAbTQgVLIt6ju32aZD4L05z+gKUMJ22B14ml9ibzyjIzvJzr
+kH19g8n2icIy6YDlJ3nD8nT7RaxrB1sylpafzOTrrNhzD01eBVIdzLiYxICQ+t9
Px5as0dZDJjkEj7xGLdoDt4zskJqD4Wj9m1EPBxYuPfEg+ugzKjAakg+0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE//BekJG+KSSmCHjTvDxV1AIe7kMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvVF84RjZRa2I0cEpLWUllTk84UEZYVUFoN3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTiGMA0G
CSqGSIb3DQEBCwUAA4IBAQCaSsZkVDT7sWC//lErM+0UO8vjh/KqBWnbZlzwnaCi
V6lGmOmjEAK1losrDY0+YZf8QD/5g0fI4Bim5NIeOLC3LbcLscvSMOJJ59h+dWlK
+z1vzQxrgD/CwkD1kq4cUFAp+cLxW+0eb0wXbjbAAtSQmu6bTvSlH+zl22kAtfPx
O5vThAcZZrDgdIYO2K0ORUFFosNJegZ457iDbTvwN6NLP9KgYQfae5bndPpWoZsR
3ZmNdAATJ7EmdAKA7m4/v2Z6F89FLVpAS/BneWmBGezJklOMYt8qCJXotGiWnGPF
2vA4gpT4963+Z0IWZWdMrlsfo3CifskdlUJVdKuTCP9g
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:20 2024 by rpki-client on console-fra.rpki-client.org