Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/4Ka6Ytp6aia9suL_W-0g9VN0YMM.roa
File: 4Ka6Ytp6aia9suL_W-0g9VN0YMM.roa (raw, json)
Hash identifier: yZ6BNqOpIBgHltx76unw/OB8PP1VU+ey+Cj/pBzOsuk=
Subject key identifier: E0:A6:BA:62:DA:7A:6A:26:BD:B2:E2:FF:5B:ED:20:F5:53:74:60:C3
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 018570B077B3DA3C50FE18FE2202155F7CA9
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/4Ka6Ytp6aia9suL_W-0g9VN0YMM.roa
Signing time: Mon 02 Jan 2023 04:14:51 +0000
ROA not before: Mon 02 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208424
IP address blocks: 5.102.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:77:b3:da:3c:50:fe:18:fe:22:02:15:5f:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0a6ba62da7a6a26bdb2e2ff5bed20f5537460c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:5f:83:34:c9:75:3e:4f:88:4a:db:8b:8c:
f7:28:fa:b2:b8:0b:84:c7:69:fd:ea:be:18:de:da:
49:ca:d6:c3:c4:c7:bf:d9:46:96:ed:4f:85:12:a1:
d8:f9:f2:3a:fb:1c:ae:dd:7a:20:79:93:e1:91:00:
cb:b8:c4:a2:46:1e:c2:ae:2f:3d:d4:16:0e:75:7e:
9d:5b:dc:5e:d2:f9:6b:49:c8:8f:1b:aa:da:64:17:
32:3d:10:02:ab:cc:21:0d:5a:6b:eb:16:8c:43:22:
37:42:37:03:95:34:2e:b0:ee:a2:4e:8d:e2:f9:74:
b3:bd:91:87:31:26:5f:98:d2:ae:76:de:6d:be:5e:
70:3c:55:31:af:9a:9e:a3:f4:d0:d4:be:65:e0:96:
fc:f1:5c:05:17:e2:35:4a:dc:c4:2d:c8:59:6a:c2:
8f:d7:e4:53:cb:e1:48:ae:58:33:ce:31:44:ed:0d:
f8:38:dc:34:b4:77:32:6b:2c:b6:5e:d8:7d:07:1d:
69:7a:c4:a2:b9:1b:80:41:a6:11:4e:fb:e7:14:d0:
96:2d:4f:af:ae:1c:e7:c3:3f:65:25:3b:af:fc:d5:
2d:93:66:ba:ef:b5:22:3c:d6:e9:34:b2:c2:9d:c9:
66:90:99:17:88:9a:df:c9:7b:aa:49:d3:f4:57:2a:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:BA:62:DA:7A:6A:26:BD:B2:E2:FF:5B:ED:20:F5:53:74:60:C3
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/4Ka6Ytp6aia9suL_W-0g9VN0YMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.47.0/24
Signature Algorithm: sha256WithRSAEncryption
89:db:16:24:12:a4:f5:8a:d7:ce:26:53:fd:5c:55:f2:83:a9:
47:85:68:c9:ac:bf:37:07:06:eb:f8:8a:ad:92:1a:3e:32:59:
3a:d5:9b:58:28:57:92:fa:ab:6a:23:f8:ca:10:9c:68:73:c2:
c0:6a:ac:d3:1f:b8:47:e1:26:8d:9e:d4:fc:dc:dd:fb:aa:af:
6d:1b:6b:e5:84:9f:11:ef:4d:6d:6c:6a:56:f0:4a:07:88:82:
91:57:15:81:aa:b7:12:01:b3:27:27:36:21:63:ee:31:d0:a2:
f8:9e:49:e0:b7:b0:d1:12:65:e0:b6:ed:32:46:ac:df:54:f4:
16:c0:4f:2a:92:c2:73:b4:f9:c0:e2:61:01:b2:57:1a:72:c9:
a4:22:c6:d7:78:61:a7:f4:54:9d:92:bd:08:48:81:ee:2f:a5:
eb:e1:17:2e:d6:a4:78:64:bc:10:85:8a:1c:1f:da:f1:bf:5b:
b1:44:2b:25:b7:59:ca:31:e1:a3:41:b0:ac:46:98:d8:63:c7:
54:b9:6e:cf:15:3a:d0:89:ea:dd:87:83:57:f1:59:03:49:9b:
7b:01:e1:a8:50:f2:df:12:7f:90:b1:cb:d7:df:56:1d:73:0b:
8d:dc:dc:90:b9:74:0a:d6:f7:cc:05:d5:57:15:4d:2c:5c:16:
64:c4:53:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsHez2jxQ/hj+IgIVX3ypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjMwMTAyMDQxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGE2YmE2MmRhN2E2YTI2YmRiMmUyZmY1YmVkMjBmNTUzNzQ2MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSxfgzTJdT5PiErbi4z3KPqyuAuE
x2n96r4Y3tpJytbDxMe/2UaW7U+FEqHY+fI6+xyu3XogeZPhkQDLuMSiRh7Cri89
1BYOdX6dW9xe0vlrSciPG6raZBcyPRACq8whDVpr6xaMQyI3QjcDlTQusO6iTo3i
+XSzvZGHMSZfmNKudt5tvl5wPFUxr5qeo/TQ1L5l4Jb88VwFF+I1StzELchZasKP
1+RTy+FIrlgzzjFE7Q34ONw0tHcyayy2Xth9Bx1pesSiuRuAQaYRTvvnFNCWLU+v
rhznwz9lJTuv/NUtk2a677UiPNbpNLLCnclmkJkXiJrfyXuqSdP0Vyq7qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOCmumLaemomvbLi/1vtIPVTdGDDMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvNEthNll0cDZhaWE5c3VMX1ctMGc5Vk4wWU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYvMA0G
CSqGSIb3DQEBCwUAA4IBAQCJ2xYkEqT1itfOJlP9XFXyg6lHhWjJrL83Bwbr+Iqt
kho+Mlk61ZtYKFeS+qtqI/jKEJxoc8LAaqzTH7hH4SaNntT83N37qq9tG2vlhJ8R
701tbGpW8EoHiIKRVxWBqrcSAbMnJzYhY+4x0KL4nkngt7DREmXgtu0yRqzfVPQW
wE8qksJztPnA4mEBslcacsmkIsbXeGGn9FSdkr0ISIHuL6Xr4Rcu1qR4ZLwQhYoc
H9rxv1uxRCslt1nKMeGjQbCsRpjYY8dUuW7PFTrQierdh4NX8VkDSZt7AeGoUPLf
En+QscvX31YdcwuN3NyQuXQK1vfMBdVXFU0sXBZkxFMP
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:47 2024 by rpki-client on console-fra.rpki-client.org