Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/X0Say2rOKXomJMABD8CHIos1iwE.roa
File: X0Say2rOKXomJMABD8CHIos1iwE.roa (raw, json)
Hash identifier: vlfwM8sQpfAkD8EstMyfwhyKxgQTtyOQUk93sBlg5Rs=
Subject key identifier: 5F:44:9A:CB:6A:CE:29:7A:26:24:C0:01:0F:C0:87:22:8B:35:8B:01
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186A1EB79D2EE5F78B4959044F52C397853
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/X0Say2rOKXomJMABD8CHIos1iwE.roa
Signing time: Thu 02 Mar 2023 10:43:29 +0000
ROA not before: Thu 02 Mar 2023 10:43:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 164.215.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:eb:79:d2:ee:5f:78:b4:95:90:44:f5:2c:39:78:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 2 10:43:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f449acb6ace297a2624c0010fc087228b358b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:58:86:0d:66:5c:c7:83:ec:4e:5e:4e:f8:
78:6c:69:27:21:18:14:d5:d4:07:61:c9:ba:ab:17:
1e:09:fa:90:98:81:24:e7:c3:64:34:14:0c:95:69:
28:55:9f:17:46:45:71:b5:7d:7f:c0:46:25:56:0d:
f5:ff:54:b9:36:93:d6:28:14:1a:cf:3e:0a:4d:85:
11:7f:ac:ed:2d:d8:90:a2:f9:92:bf:85:35:99:68:
08:8d:4d:c4:60:95:aa:3d:d4:d8:f7:35:6b:f7:46:
54:0d:d7:9c:b7:ef:7c:00:c7:ea:fc:b3:32:d2:40:
a7:f3:a7:57:9d:d8:0d:7c:c5:c1:44:58:73:cb:d3:
00:07:47:4d:36:e2:6d:a9:fc:f3:e8:e1:53:bf:fc:
ea:12:39:e8:84:1d:7c:3c:c9:a8:e3:1f:6f:cd:03:
49:19:d6:96:3e:db:54:4c:5f:a9:4d:64:cd:23:17:
2d:6f:bd:7c:84:0c:ad:83:8f:53:f9:1f:6b:c4:bc:
36:2f:9e:3f:26:02:eb:51:92:95:fa:04:df:36:ab:
65:1c:3d:4e:df:ff:d3:35:34:f9:fc:72:ac:f0:52:
f5:1f:b9:ed:f8:99:39:73:be:48:ea:95:10:8c:2d:
1e:87:0b:09:fc:a2:c0:86:fa:e1:e4:8f:34:25:90:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:9A:CB:6A:CE:29:7A:26:24:C0:01:0F:C0:87:22:8B:35:8B:01
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/X0Say2rOKXomJMABD8CHIos1iwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.100.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d3:3d:8d:20:33:65:21:9b:16:5d:1f:17:8e:1b:54:86:26:
01:2e:82:b8:ac:6f:34:ce:20:5a:44:01:c1:e0:b2:8f:08:10:
a5:d6:91:bb:f7:42:39:25:0a:e8:85:fa:c0:80:e8:7a:77:4d:
eb:01:5e:31:6c:0d:25:4d:72:47:44:25:48:45:20:ca:d3:36:
e0:ce:e5:b0:1b:23:73:b5:e7:e9:be:b6:22:6e:ad:76:bc:cf:
02:99:26:80:b7:4a:16:cd:12:8f:89:63:0c:37:bc:ca:74:80:
12:1a:8c:5f:f8:5b:a8:36:eb:67:d4:3c:74:69:00:15:8f:1b:
3d:7f:9f:d5:12:b1:27:47:60:b3:ef:15:88:5b:b9:ca:03:1a:
f3:f1:f0:de:b0:9d:ad:ae:3f:95:83:89:57:0f:db:00:b8:9e:
ed:81:5a:da:80:58:87:ce:9f:72:1b:b4:37:19:23:9d:4a:ed:
c1:b0:c8:16:1f:89:74:16:7b:9f:e7:e7:c5:df:65:d4:a4:fd:
6b:38:3f:17:21:dc:d9:0c:29:39:6e:18:bf:8d:55:9c:e5:77:
26:e3:51:9b:57:39:ed:4e:7f:ed:2c:cd:54:ce:e9:f2:af:72:
dd:ff:8d:46:8c:b4:1c:79:8e:e7:65:1a:da:1d:5e:f8:ae:c3:
14:f7:91:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYah63nS7l94tJWQRPUsOXhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMzAyMTA0MzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjQ0OWFjYjZhY2UyOTdhMjYyNGMwMDEwZmMwODcyMjhiMzU4YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo39Yhg1mXMeD7E5eTvh4bGknIRgU
1dQHYcm6qxceCfqQmIEk58NkNBQMlWkoVZ8XRkVxtX1/wEYlVg31/1S5NpPWKBQa
zz4KTYURf6ztLdiQovmSv4U1mWgIjU3EYJWqPdTY9zVr90ZUDdect+98AMfq/LMy
0kCn86dXndgNfMXBRFhzy9MAB0dNNuJtqfzz6OFTv/zqEjnohB18PMmo4x9vzQNJ
GdaWPttUTF+pTWTNIxctb718hAytg49T+R9rxLw2L54/JgLrUZKV+gTfNqtlHD1O
3//TNTT5/HKs8FL1H7nt+Jk5c75I6pUQjC0ehwsJ/KLAhvrh5I80JZB59QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9Emstqzil6JiTAAQ/AhyKLNYsBMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvWDBTYXkyck9LWG9tSk1BQkQ4Q0hJb3MxaXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApNdkMA0G
CSqGSIb3DQEBCwUAA4IBAQC90z2NIDNlIZsWXR8XjhtUhiYBLoK4rG80ziBaRAHB
4LKPCBCl1pG790I5JQrohfrAgOh6d03rAV4xbA0lTXJHRCVIRSDK0zbgzuWwGyNz
tefpvrYibq12vM8CmSaAt0oWzRKPiWMMN7zKdIASGoxf+FuoNutn1Dx0aQAVjxs9
f5/VErEnR2Cz7xWIW7nKAxrz8fDesJ2trj+Vg4lXD9sAuJ7tgVragFiHzp9yG7Q3
GSOdSu3BsMgWH4l0Fnuf5+fF32XUpP1rOD8XIdzZDCk5bhi/jVWc5Xcm41GbVznt
Tn/tLM1Uzunyr3Ld/41GjLQceY7nZRraHV74rsMU95GV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org