Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/ljx0FfFYtM1IOlwDbA7k44qhXmA.roa
File: ljx0FfFYtM1IOlwDbA7k44qhXmA.roa (raw, json)
Hash identifier: u27t/qApb9Ytm+u2fALL4gFvoD3lrCIhhm15r3LUnfA=
Subject key identifier: 96:3C:74:15:F1:58:B4:CD:48:3A:5C:03:6C:0E:E4:E3:8A:A1:5E:60
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 01868D10D2156648898EAA7E002CE3F6485F
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/ljx0FfFYtM1IOlwDbA7k44qhXmA.roa
Signing time: Sun 26 Feb 2023 09:32:15 +0000
ROA not before: Sun 26 Feb 2023 09:32:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29488
IP address blocks: 217.74.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sun 26 Feb 2023 12:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:10:d2:15:66:48:89:8e:aa:7e:00:2c:e3:f6:48:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Feb 26 09:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=963c7415f158b4cd483a5c036c0ee4e38aa15e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:eb:63:2f:f0:7e:2b:19:cf:6f:e5:b4:57:
87:99:b2:28:52:88:bf:42:20:12:37:34:9a:3a:4c:
8a:ba:5d:00:82:62:91:0c:13:56:b8:7f:cd:66:ca:
d9:c2:c5:b7:fd:12:bf:a9:2f:ad:20:25:94:44:c6:
72:39:bd:eb:a1:22:5d:fe:02:83:06:7a:92:c3:b7:
28:80:1f:07:79:7e:5e:07:f2:16:33:fd:fb:d8:24:
e0:95:57:1a:b7:77:f2:fa:7b:4c:8d:5f:82:ed:f7:
fe:d3:1a:23:bc:33:96:73:9e:7d:f4:71:20:a7:7b:
c6:5f:ff:a4:b3:1c:ff:6c:e7:24:53:55:77:9f:7b:
7b:83:64:85:35:65:71:29:5b:02:04:e3:07:bb:95:
8e:b0:76:d7:4d:f8:fc:6e:23:35:2a:91:98:45:b8:
07:02:76:d4:2e:bd:26:7c:42:f3:dd:e2:43:86:3a:
ba:e9:91:35:5d:0c:36:0e:c5:2d:05:56:ad:cb:7a:
35:45:74:92:ac:0c:ba:eb:b7:30:fb:57:82:9d:17:
f4:ad:11:43:95:09:d1:f7:b8:82:8e:ff:ae:a8:57:
29:c0:ee:4d:97:a9:fc:63:67:6d:93:2a:28:52:fa:
6f:da:4a:fb:88:91:71:d6:05:d0:aa:01:e9:f7:94:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3C:74:15:F1:58:B4:CD:48:3A:5C:03:6C:0E:E4:E3:8A:A1:5E:60
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/ljx0FfFYtM1IOlwDbA7k44qhXmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.176.0/20
Signature Algorithm: sha256WithRSAEncryption
69:7e:45:65:cb:85:da:8a:69:5d:07:de:a2:28:77:6d:72:b8:
96:3b:10:7d:9b:4e:48:ac:31:78:45:61:2c:89:a8:44:6a:6b:
85:9e:6c:56:4e:98:3b:e1:5a:be:9b:db:dd:78:20:6c:75:b7:
10:0e:99:3d:e8:d4:13:47:2f:8c:a2:fa:49:e0:db:ca:83:9f:
0e:89:6a:91:7c:e7:02:98:12:b1:50:6f:98:ce:ef:3f:6d:bb:
5d:b5:8d:52:50:26:40:06:52:70:5c:de:1d:57:12:8e:ea:42:
1e:6e:f7:62:02:0f:43:97:4d:6c:46:4b:0b:df:d8:f6:e5:0b:
49:84:9b:c7:88:dd:40:b8:53:fa:e7:a3:07:89:18:2f:46:8c:
1d:fa:3d:53:33:ed:30:24:67:0c:76:13:05:6a:f9:9b:79:fa:
4d:55:85:8b:be:f2:a2:89:4c:b1:1b:8c:20:22:3a:a4:86:1e:
05:c1:a3:a5:6e:5e:b4:84:67:68:4e:fb:70:87:3e:87:e5:05:
b6:44:cc:de:6c:39:44:4a:b3:24:ff:c2:49:42:ae:cf:eb:b5:
98:18:68:43:0b:5d:de:51:5d:9c:9a:ce:df:55:c8:9b:05:3c:
fa:55:6c:ca:bd:4e:4c:68:6f:a2:33:09:68:9e:66:c8:4a:4c:
1f:e0:36:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaNENIVZkiJjqp+ACzj9khfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWFlNTU2MTNmYzg5NTg2ZjdiZDZkZTBlZGNhMDk3Yjg2
MTVhNmEwHhcNMjMwMjI2MDkzMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjNjNzQxNWYxNThiNGNkNDgzYTVjMDM2YzBlZTRlMzhhYTE1ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudTrYy/wfisZz2/ltFeHmbIoUoi/
QiASNzSaOkyKul0AgmKRDBNWuH/NZsrZwsW3/RK/qS+tICWURMZyOb3roSJd/gKD
BnqSw7cogB8HeX5eB/IWM/372CTglVcat3fy+ntMjV+C7ff+0xojvDOWc5599HEg
p3vGX/+ksxz/bOckU1V3n3t7g2SFNWVxKVsCBOMHu5WOsHbXTfj8biM1KpGYRbgH
AnbULr0mfELz3eJDhjq66ZE1XQw2DsUtBVaty3o1RXSSrAy667cw+1eCnRf0rRFD
lQnR97iCjv+uqFcpwO5Nl6n8Y2dtkyooUvpv2kr7iJFx1gXQqgHp95RH9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJY8dBXxWLTNSDpcA2wO5OOKoV5gMB8GA1UdIwQY
MBaAFG+q5VYT/IlYb3vW3g7coJe4YVpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUt
MWIxMjY0MWY0OTNiLzEvbGp4MEZmRll0TTFJT2x3RGJBN2s0NHFoWG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUtMWIxMjY0MWY0OTNi
LzEvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2UqwMA0G
CSqGSIb3DQEBCwUAA4IBAQBpfkVly4XaimldB96iKHdtcriWOxB9m05IrDF4RWEs
iahEamuFnmxWTpg74Vq+m9vdeCBsdbcQDpk96NQTRy+MovpJ4NvKg58OiWqRfOcC
mBKxUG+Yzu8/bbtdtY1SUCZABlJwXN4dVxKO6kIebvdiAg9Dl01sRksL39j25QtJ
hJvHiN1AuFP656MHiRgvRowd+j1TM+0wJGcMdhMFavmbefpNVYWLvvKiiUyxG4wg
Ijqkhh4FwaOlbl60hGdoTvtwhz6H5QW2RMzebDlESrMk/8JJQq7P67WYGGhDC13e
UV2cms7fVcibBTz6VWzKvU5MaG+iMwlonmbISkwf4DZX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org