Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/rNOw-Rs4EUZj10-y609e7tWvtno.roa
File: rNOw-Rs4EUZj10-y609e7tWvtno.roa (raw, json)
Hash identifier: 0H68KAPR3wCIZqyslIbb8yUEROSpDOfPccUMxSvYYhQ=
Subject key identifier: AC:D3:B0:F9:1B:38:11:46:63:D7:4F:B2:EB:4F:5E:EE:D5:AF:B6:7A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185B600DD1A9BDD16A36A807F40C42D7D54
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/rNOw-Rs4EUZj10-y609e7tWvtno.roa
Signing time: Sun 15 Jan 2023 15:16:27 +0000
ROA not before: Sun 15 Jan 2023 15:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 164.215.96.0/22 maxlen: 22
5.10.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:00:dd:1a:9b:dd:16:a3:6a:80:7f:40:c4:2d:7d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 15 15:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acd3b0f91b38114663d74fb2eb4f5eeed5afb67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:96:e3:fe:0f:76:f3:11:23:73:01:c9:9b:
02:38:75:56:fd:19:37:fc:8d:d2:80:d6:26:50:d4:
5e:84:e7:6b:87:4f:fd:92:62:76:f3:c9:40:b8:f5:
78:d9:4b:59:5c:3f:a4:7e:f5:3f:86:0a:8e:b9:3f:
6b:f5:07:74:d2:13:36:71:94:f5:92:dd:81:dc:97:
96:03:f5:04:6a:a4:a6:30:20:bd:a2:a0:d5:6c:2c:
15:a0:26:3e:fc:0e:b8:23:43:80:82:a9:9a:e0:c9:
5f:fc:a9:73:91:5e:9b:d8:4b:0c:08:c6:5f:72:15:
f4:aa:63:ac:7d:fb:04:75:56:55:4f:73:38:5b:b5:
39:e0:29:00:e3:5f:75:34:d8:41:6c:41:f5:af:02:
d2:a2:ea:fe:57:53:0c:95:cc:db:fc:a4:b5:4c:73:
76:71:3a:6c:63:c1:75:2e:aa:78:45:54:64:e0:da:
24:f6:f0:dd:fb:e2:fc:5c:9b:75:a3:db:a0:33:5f:
4f:94:fc:9d:70:48:df:40:83:0f:a0:9b:a6:80:c7:
49:bf:59:a6:9e:0f:22:82:d3:0a:82:28:cc:17:30:
6a:82:30:80:e6:b3:0d:83:3e:c4:bd:6f:8d:48:82:
e7:21:58:35:13:ac:f8:3a:d9:b5:f6:0f:d5:3c:2b:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:B0:F9:1B:38:11:46:63:D7:4F:B2:EB:4F:5E:EE:D5:AF:B6:7A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/rNOw-Rs4EUZj10-y609e7tWvtno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.244.0/22
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
72:3e:90:16:ee:72:bd:d5:15:4d:60:f2:78:b6:58:d1:0c:87:
09:92:91:ca:61:d9:b9:36:aa:4c:00:ab:73:c7:5f:99:1a:56:
14:2c:19:63:8b:76:55:e1:c7:87:bf:f2:c6:62:19:80:81:40:
1d:c7:e8:42:6a:54:38:93:c7:0e:f9:50:47:8f:91:9d:1b:a0:
27:cb:33:21:4a:a7:35:e0:f2:02:ff:bf:15:37:db:1e:f9:5f:
e7:50:76:09:be:4d:68:05:90:73:c3:6e:db:1c:54:85:fe:c7:
28:ce:b2:2d:12:8a:5c:59:23:56:db:d2:46:b0:66:1e:1a:3e:
f0:13:24:e7:ef:ed:7c:e7:10:37:45:e8:a0:c5:49:e1:3c:8d:
a9:fd:77:03:0a:3e:90:e6:c8:7e:cc:68:25:e5:f0:e7:45:ef:
3c:5b:52:14:a1:6f:2d:82:d5:99:76:00:0d:0f:5a:70:22:ea:
ff:52:ab:9c:0a:70:69:ff:41:72:69:58:59:0e:b0:42:e4:35:
db:03:48:f7:4c:b8:ab:56:bb:97:0e:59:10:ad:5a:8f:b4:48:
68:3b:67:26:38:0e:88:33:59:7e:00:ea:60:c9:ca:89:82:ee:
5f:db:77:dd:22:4c:9d:7b:44:31:42:74:20:29:2f:1e:00:ea:
50:25:95:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYW2AN0am90Wo2qAf0DELX1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTE1MTUxNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2QzYjBmOTFiMzgxMTQ2NjNkNzRmYjJlYjRmNWVlZWQ1YWZiNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHKW4/4PdvMRI3MByZsCOHVW/Rk3
/I3SgNYmUNRehOdrh0/9kmJ288lAuPV42UtZXD+kfvU/hgqOuT9r9Qd00hM2cZT1
kt2B3JeWA/UEaqSmMCC9oqDVbCwVoCY+/A64I0OAgqma4Mlf/KlzkV6b2EsMCMZf
chX0qmOsffsEdVZVT3M4W7U54CkA4191NNhBbEH1rwLSour+V1MMlczb/KS1THN2
cTpsY8F1Lqp4RVRk4Nok9vDd++L8XJt1o9ugM19PlPydcEjfQIMPoJumgMdJv1mm
ng8igtMKgijMFzBqgjCA5rMNgz7EvW+NSILnIVg1E6z4Otm19g/VPCuZpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKzTsPkbOBFGY9dPsutPXu7Vr7Z6MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvck5Pdy1SczRFVVpqMTAteTYwOWU3dFd2dG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBQr0AwQC
pNdgMA0GCSqGSIb3DQEBCwUAA4IBAQByPpAW7nK91RVNYPJ4tljRDIcJkpHKYdm5
NqpMAKtzx1+ZGlYULBlji3ZV4ceHv/LGYhmAgUAdx+hCalQ4k8cO+VBHj5GdG6An
yzMhSqc14PIC/78VN9se+V/nUHYJvk1oBZBzw27bHFSF/scozrItEopcWSNW29JG
sGYeGj7wEyTn7+185xA3ReigxUnhPI2p/XcDCj6Q5sh+zGgl5fDnRe88W1IUoW8t
gtWZdgAND1pwIur/UqucCnBp/0FyaVhZDrBC5DXbA0j3TLirVruXDlkQrVqPtEho
O2cmOA6IM1l+AOpgycqJgu5f23fdIkyde0QxQnQgKS8eAOpQJZW3
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org