Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/A9sLRqh05hMnM8m4NTPEoPzLcNM.roa
File: A9sLRqh05hMnM8m4NTPEoPzLcNM.roa (raw, json)
Hash identifier: L9dRbOAFO2NmZv2+m2+h8pGGr+pIuXk82Une0rgpkXI=
Subject key identifier: 03:DB:0B:46:A8:74:E6:13:27:33:C9:B8:35:33:C4:A0:FC:CB:70:D3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018B38AEDFE7C6E5955646F8E84D8F0AD7DD
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/A9sLRqh05hMnM8m4NTPEoPzLcNM.roa
Signing time: Mon 16 Oct 2023 13:31:06 +0000
ROA not before: Mon 16 Oct 2023 13:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 149.126.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:ae:df:e7:c6:e5:95:56:46:f8:e8:4d:8f:0a:d7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Oct 16 13:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03db0b46a874e6132733c9b83533c4a0fccb70d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:9c:cc:59:74:d1:ae:23:01:4b:9c:d2:37:
a4:e2:ea:61:19:e4:55:4c:39:c5:4c:04:10:3e:46:
85:f0:10:ac:cd:fd:c0:80:04:7d:ff:e8:f5:5b:f5:
fc:8f:23:f7:79:29:d2:c8:d8:32:4d:2d:1c:63:74:
f8:63:95:34:16:1d:af:4c:8b:43:49:54:ab:4c:c2:
0a:a1:45:ae:43:b1:4d:cb:96:d2:26:1a:b6:f2:e8:
ef:ec:c3:34:cc:f6:35:ff:53:82:a6:db:b0:38:a3:
d9:36:63:b7:9b:9e:d6:97:6b:15:6e:81:4d:a1:b5:
4f:44:69:5a:7b:f2:fd:6e:d5:ee:60:dd:94:57:69:
b8:dc:f4:a7:29:28:c8:65:da:19:31:9d:7c:0f:29:
7b:19:63:c4:f1:fc:0c:db:fe:8b:c4:aa:38:0d:a8:
05:02:19:65:d7:f1:f0:5d:34:54:b0:5d:3e:bd:84:
ec:db:2b:b1:ad:71:2a:c8:ee:eb:76:9a:e5:fc:2a:
ac:cb:47:dd:b1:a2:33:c4:f4:08:53:87:1f:56:b2:
f9:b4:24:1e:9f:4c:63:52:52:4f:4b:97:84:a6:a5:
6c:91:00:a1:a1:2a:d9:21:30:74:e1:09:45:a1:d5:
f7:ab:af:ef:91:fe:80:0d:49:d8:a2:be:5d:64:4e:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:0B:46:A8:74:E6:13:27:33:C9:B8:35:33:C4:A0:FC:CB:70:D3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/A9sLRqh05hMnM8m4NTPEoPzLcNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fa:c0:21:d4:5a:f4:a3:b7:df:9e:00:a8:8d:11:35:50:f8:
12:6d:c6:35:46:92:18:7f:d5:56:71:17:98:5d:0a:79:c1:f9:
6a:fd:62:81:3e:73:e5:4e:94:93:48:59:bb:60:a5:fd:e4:aa:
c3:b3:36:8c:05:ad:84:14:00:7b:6a:bb:d3:c3:fe:b3:b8:6a:
c6:9e:a4:f4:cc:98:51:eb:3f:0a:c3:04:0c:5f:f9:ad:90:99:
3c:b1:1b:99:13:86:58:8a:15:67:0b:b8:f7:36:65:25:6e:06:
9b:e9:36:80:cf:be:40:28:51:52:c4:db:c3:42:ba:9c:da:d5:
ba:f2:1a:93:de:ce:8b:40:b0:d5:7b:9e:37:3e:74:ac:e7:ef:
88:a9:c0:41:f1:16:2a:e8:88:c8:00:d4:ab:a7:0c:bc:a0:f6:
52:83:d0:e8:bc:3e:ff:bb:33:c7:88:2c:18:ad:76:29:99:3d:
fa:96:05:f2:77:a0:a2:59:fe:a2:c5:08:9c:7f:56:04:95:43:
3d:b2:a8:77:96:00:29:84:77:f3:3d:ab:9d:5f:27:a7:bf:e3:
1e:9e:da:fe:20:70:08:c5:d0:40:10:b2:98:0d:d2:21:f3:62:
4c:d3:c3:bf:35:1b:83:57:8a:47:c5:f4:6c:29:fb:7a:3c:a1:
f0:6c:84:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYs4rt/nxuWVVkb46E2PCtfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMxMDE2MTMzMTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2RiMGI0NmE4NzRlNjEzMjczM2M5YjgzNTMzYzRhMGZjY2I3MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqqczFl00a4jAUuc0jek4uphGeRV
TDnFTAQQPkaF8BCszf3AgAR9/+j1W/X8jyP3eSnSyNgyTS0cY3T4Y5U0Fh2vTItD
SVSrTMIKoUWuQ7FNy5bSJhq28ujv7MM0zPY1/1OCptuwOKPZNmO3m57Wl2sVboFN
obVPRGlae/L9btXuYN2UV2m43PSnKSjIZdoZMZ18Dyl7GWPE8fwM2/6LxKo4DagF
Ahll1/HwXTRUsF0+vYTs2yuxrXEqyO7rdprl/Cqsy0fdsaIzxPQIU4cfVrL5tCQe
n0xjUlJPS5eEpqVskQChoSrZITB04QlFodX3q6/vkf6ADUnYor5dZE5k+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPbC0aodOYTJzPJuDUzxKD8y3DTMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvQTlzTFJxaDA1aE1uTThtNE5UUEVvUHpMY05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlX7PMA0G
CSqGSIb3DQEBCwUAA4IBAQAP+sAh1Fr0o7ffngCojRE1UPgSbcY1RpIYf9VWcReY
XQp5wflq/WKBPnPlTpSTSFm7YKX95KrDszaMBa2EFAB7arvTw/6zuGrGnqT0zJhR
6z8KwwQMX/mtkJk8sRuZE4ZYihVnC7j3NmUlbgab6TaAz75AKFFSxNvDQrqc2tW6
8hqT3s6LQLDVe543PnSs5++IqcBB8RYq6IjIANSrpwy8oPZSg9DovD7/uzPHiCwY
rXYpmT36lgXyd6CiWf6ixQicf1YElUM9sqh3lgAphHfzPaudXyenv+Mentr+IHAI
xdBAELKYDdIh82JM08O/NRuDV4pHxfRsKft6PKHwbIRT
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org