Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G03Jb4OwQrbUgR5puJDpMkQPE4I.roa
File: G03Jb4OwQrbUgR5puJDpMkQPE4I.roa (raw, json)
Hash identifier: N7s3Tu177GmOovhz45l8gF9OM2MwUDBoUBInJ0PnJBA=
Subject key identifier: 1B:4D:C9:6F:83:B0:42:B6:D4:81:1E:69:B8:90:E9:32:44:0F:13:82
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCADBA87FF0EBC0DEC8E68AC4BD677F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G03Jb4OwQrbUgR5puJDpMkQPE4I.roa
Signing time: Sun 01 Jan 2023 10:05:11 +0000
ROA not before: Sun 01 Jan 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20836
IP address blocks: 192.121.47.0/24 maxlen: 24
192.121.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:db:a8:7f:f0:eb:c0:de:c8:e6:8a:c4:bd:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b4dc96f83b042b6d4811e69b890e932440f1382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:43:ef:2b:75:05:82:6d:48:60:45:d4:aa:
69:90:d4:73:88:1e:3d:21:d5:c0:b7:a5:43:1e:16:
6f:a1:38:a9:1b:bd:38:ef:86:94:4f:5a:91:dd:94:
f5:d0:64:26:7f:56:33:d8:08:82:d6:73:ea:bd:00:
45:a3:c4:77:9f:be:b3:c6:d1:cb:1b:2b:9d:f3:ec:
42:1c:10:d3:78:51:6b:39:dc:9b:4a:f7:e0:6f:d8:
69:ab:f5:72:ad:87:7f:bd:21:7a:ac:e9:dc:ac:d5:
d5:f7:24:07:b0:9c:05:bc:b9:bd:9b:1c:e7:02:cf:
7d:bc:39:bf:81:5a:b3:7f:62:f2:13:d1:cc:d6:29:
54:0d:9f:a0:95:50:31:01:3f:23:2d:59:ff:ee:2a:
6f:3d:29:a8:e3:29:1b:d8:97:1d:34:eb:09:da:2d:
c8:32:42:cd:0b:3e:22:3c:ee:c6:e7:57:ba:66:90:
24:f6:f2:25:e4:22:39:bd:8d:54:bc:9c:63:ee:6a:
80:46:28:fc:b7:9b:bf:48:81:c9:cc:b7:1e:ac:b5:
9f:b9:a7:98:e2:e5:94:4c:7d:fe:37:24:a8:c2:b3:
79:eb:9c:8b:6d:f8:b0:e3:9c:00:6f:0c:57:64:26:
55:41:3d:5d:e6:07:b6:63:6c:dd:93:72:0d:96:18:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:C9:6F:83:B0:42:B6:D4:81:1E:69:B8:90:E9:32:44:0F:13:82
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G03Jb4OwQrbUgR5puJDpMkQPE4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.46.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:d6:1c:08:7e:75:7b:74:da:0f:51:96:04:52:71:47:43:a0:
ef:b3:41:6a:cd:fe:e5:23:2d:4a:98:c5:ea:0e:79:6b:53:6b:
b6:3f:7b:fa:4d:a2:83:78:9b:e7:58:8d:87:9b:fa:22:e0:f4:
58:5a:ba:cc:0d:83:92:8d:ae:84:4c:85:f0:50:e4:5c:15:8f:
be:25:d5:01:44:37:2f:16:ba:43:89:5a:9c:db:9d:6c:71:e3:
49:12:10:8c:56:14:77:9e:ee:9e:b0:49:ba:ab:ad:59:19:f5:
ec:89:58:65:e8:b0:88:91:74:05:de:f6:fa:fa:55:37:e5:f2:
01:da:72:ba:a2:be:df:dc:81:8d:fc:0e:fe:cf:4c:35:42:98:
29:59:40:0c:1e:26:b9:b6:cb:66:ba:39:ad:89:8e:c2:e7:e6:
4e:84:cc:6a:4d:d3:ed:34:a7:3b:e8:2f:00:8c:6e:fc:dd:7e:
3a:e6:2d:ff:53:ec:b3:5b:9f:22:10:3c:1b:1c:cf:d1:be:4c:
f3:13:3f:11:2a:ba:19:a5:21:24:ab:26:b3:8a:05:70:80:6c:
00:20:18:58:20:b9:6b:0e:46:e5:ef:6d:7e:20:8f:a9:0e:ff:
ec:8a:02:b2:43:fe:6a:fe:11:0e:60:c7:d5:89:4d:5e:17:6f:
ab:ee:07:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsytuof/DrwN7I5orEvWd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjRkYzk2ZjgzYjA0MmI2ZDQ4MTFlNjliODkwZTkzMjQ0MGYxMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW5D7yt1BYJtSGBF1KppkNRziB49
IdXAt6VDHhZvoTipG70474aUT1qR3ZT10GQmf1Yz2AiC1nPqvQBFo8R3n76zxtHL
Gyud8+xCHBDTeFFrOdybSvfgb9hpq/VyrYd/vSF6rOncrNXV9yQHsJwFvLm9mxzn
As99vDm/gVqzf2LyE9HM1ilUDZ+glVAxAT8jLVn/7ipvPSmo4ykb2JcdNOsJ2i3I
MkLNCz4iPO7G51e6ZpAk9vIl5CI5vY1UvJxj7mqARij8t5u/SIHJzLcerLWfuaeY
4uWUTH3+NySowrN565yLbfiw45wAbwxXZCZVQT1d5ge2Y2zdk3INlhjC4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtNyW+DsEK21IEeabiQ6TJEDxOCMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRzAzSmI0T3dRcmJVZ1I1cHVKRHBNa1FQRTRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHkuMA0G
CSqGSIb3DQEBCwUAA4IBAQAs1hwIfnV7dNoPUZYEUnFHQ6Dvs0Fqzf7lIy1KmMXq
DnlrU2u2P3v6TaKDeJvnWI2Hm/oi4PRYWrrMDYOSja6ETIXwUORcFY++JdUBRDcv
FrpDiVqc251sceNJEhCMVhR3nu6esEm6q61ZGfXsiVhl6LCIkXQF3vb6+lU35fIB
2nK6or7f3IGN/A7+z0w1QpgpWUAMHia5tstmujmtiY7C5+ZOhMxqTdPtNKc76C8A
jG783X465i3/U+yzW58iEDwbHM/RvkzzEz8RKroZpSEkqyazigVwgGwAIBhYILlr
Dkbl721+II+pDv/sigKyQ/5q/hEOYMfViU1eF2+r7gcp
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org