Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/cGomGg7y1_uH_ELHSEVN3s3bDCQ.roa
File: cGomGg7y1_uH_ELHSEVN3s3bDCQ.roa (raw, json)
Hash identifier: YhAGzOIHgtuP54o47qsRRStnKXKn5Sx92KAba/7EEB8=
Subject key identifier: 70:6A:26:1A:0E:F2:D7:FB:87:FC:42:C7:48:45:4D:DE:CD:DB:0C:24
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 018572CCC00249BD4FDA67D8FED0786E0A01
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/cGomGg7y1_uH_ELHSEVN3s3bDCQ.roa
Signing time: Mon 02 Jan 2023 14:04:59 +0000
ROA not before: Mon 02 Jan 2023 14:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 37.123.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:c0:02:49:bd:4f:da:67:d8:fe:d0:78:6e:0a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 2 14:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706a261a0ef2d7fb87fc42c748454ddecddb0c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a0:32:fc:f6:ae:68:e2:99:8e:fd:3e:95:c2:
a0:7f:21:c0:07:fb:e1:69:95:f6:32:cf:f2:16:a9:
02:bf:e5:99:fa:b4:4e:ce:56:55:a0:b4:bf:6d:18:
1c:d3:3e:e0:e3:62:a3:39:8f:9d:15:c5:06:51:29:
f5:ab:06:d4:35:bb:3b:8d:33:61:de:3a:4b:73:57:
68:64:69:20:f3:74:ef:92:b9:54:44:e2:a1:e4:86:
47:39:b5:37:30:3c:b7:f7:ca:f4:fb:9b:08:18:37:
4b:3e:87:33:bd:d0:0a:b8:0a:fc:c4:d4:34:b8:05:
5a:ca:53:45:44:e8:7d:9b:ca:f5:b0:b6:ef:f2:07:
67:30:67:6f:9f:bc:a7:36:a7:39:a3:5e:bc:fe:f9:
5c:88:7d:83:c6:1e:ab:9b:6c:5f:ce:04:fc:00:8b:
51:03:07:bf:2a:3b:53:44:c9:ce:47:ec:03:1c:7b:
e2:94:74:03:59:57:cd:89:5f:72:af:c1:70:46:22:
9b:eb:c1:88:0e:5d:8b:bf:22:b6:d7:be:95:19:5c:
f9:b8:db:96:8e:2d:61:23:3d:26:2b:ad:6b:d2:a7:
0b:9c:1b:1d:ac:02:e4:80:c0:15:7d:2a:96:16:a9:
f5:10:cb:91:07:ba:4c:0c:03:0d:b8:b1:29:c8:34:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:26:1A:0E:F2:D7:FB:87:FC:42:C7:48:45:4D:DE:CD:DB:0C:24
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/cGomGg7y1_uH_ELHSEVN3s3bDCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.254.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4d:22:85:21:7f:40:67:bf:05:d4:d9:4b:b6:2f:2e:70:25:
be:e9:31:bd:ec:1f:c1:af:ab:6f:27:d8:02:28:52:be:a4:ac:
87:dd:6d:3b:79:17:75:55:fa:0f:dc:a4:d3:e7:e3:24:26:47:
c0:ab:cb:c5:2d:04:7f:98:dd:c5:32:64:4f:94:b6:26:97:b1:
9b:97:69:18:6c:e8:da:79:57:0c:c6:e1:3f:3e:46:53:20:40:
dd:39:10:9f:0d:e3:d5:7a:ef:0a:e0:24:2f:d8:c0:46:2e:30:
08:e5:c4:d5:f8:37:1a:e7:f3:c9:6b:0c:f1:02:5e:7f:98:98:
5a:68:1a:ce:29:be:9a:d7:b8:b8:3d:44:fd:ad:b5:69:e0:80:
42:bc:6a:90:9c:7f:b4:be:14:89:06:08:fa:39:9a:a2:f1:30:
2c:8b:37:b2:ab:c1:e9:15:7d:ef:dc:9e:4e:0b:dd:be:0d:0f:
1c:6c:85:58:32:45:fe:2d:6b:36:c0:de:c4:85:4b:57:16:69:
23:7e:6f:35:83:c0:e8:de:e8:4f:69:c7:26:16:30:c4:fa:a1:
ec:a7:57:67:26:a5:38:1b:8d:26:d8:14:30:92:29:12:4a:34:
73:0e:db:84:3e:57:f3:ab:96:fa:86:bd:eb:1e:34:f2:65:68:
36:6b:03:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyzMACSb1P2mfY/tB4bgoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjMwMTAyMTQwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDZhMjYxYTBlZjJkN2ZiODdmYzQyYzc0ODQ1NGRkZWNkZGIwYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKAy/PauaOKZjv0+lcKgfyHAB/vh
aZX2Ms/yFqkCv+WZ+rROzlZVoLS/bRgc0z7g42KjOY+dFcUGUSn1qwbUNbs7jTNh
3jpLc1doZGkg83TvkrlUROKh5IZHObU3MDy398r0+5sIGDdLPoczvdAKuAr8xNQ0
uAVaylNFROh9m8r1sLbv8gdnMGdvn7ynNqc5o168/vlciH2Dxh6rm2xfzgT8AItR
Awe/KjtTRMnOR+wDHHvilHQDWVfNiV9yr8FwRiKb68GIDl2LvyK2176VGVz5uNuW
ji1hIz0mK61r0qcLnBsdrALkgMAVfSqWFqn1EMuRB7pMDAMNuLEpyDTBFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBqJhoO8tf7h/xCx0hFTd7N2wwkMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvY0dvbUdnN3kxX3VIX0VMSFNFVk4zczNiRENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXv+MA0G
CSqGSIb3DQEBCwUAA4IBAQAhTSKFIX9AZ78F1NlLti8ucCW+6TG97B/Br6tvJ9gC
KFK+pKyH3W07eRd1VfoP3KTT5+MkJkfAq8vFLQR/mN3FMmRPlLYml7Gbl2kYbOja
eVcMxuE/PkZTIEDdORCfDePVeu8K4CQv2MBGLjAI5cTV+Dca5/PJawzxAl5/mJha
aBrOKb6a17i4PUT9rbVp4IBCvGqQnH+0vhSJBgj6OZqi8TAsizeyq8HpFX3v3J5O
C92+DQ8cbIVYMkX+LWs2wN7EhUtXFmkjfm81g8Do3uhPaccmFjDE+qHsp1dnJqU4
G40m2BQwkikSSjRzDtuEPlfzq5b6hr3rHjTyZWg2awPd
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:03 2024 by rpki-client on console-ams.rpki-client.org