Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/1vcQnYRKtSnLwKSMN0CCW7WpUZw.roa
File: 1vcQnYRKtSnLwKSMN0CCW7WpUZw.roa (raw, json)
Hash identifier: WPGyT05RANhYHpS7p9Kq+ep2gLFTY75fSQUPCoR5Bxg=
Subject key identifier: D6:F7:10:9D:84:4A:B5:29:CB:C0:A4:8C:37:40:82:5B:B5:A9:51:9C
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 01856D78A44B733BE8EB0AE8426938743C64
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/1vcQnYRKtSnLwKSMN0CCW7WpUZw.roa
Signing time: Sun 01 Jan 2023 13:15:00 +0000
ROA not before: Sun 01 Jan 2023 13:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44880
IP address blocks: 192.101.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a4:4b:73:3b:e8:eb:0a:e8:42:69:38:74:3c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Jan 1 13:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f7109d844ab529cbc0a48c3740825bb5a9519c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:19:45:52:7e:2a:95:71:82:cb:59:74:44:
4b:14:ac:13:c1:f6:75:96:86:34:b8:ef:70:32:ff:
4d:56:fd:11:f6:67:55:63:00:b2:e8:78:03:39:aa:
a8:0e:81:d7:ce:92:8e:33:3d:ea:e1:3d:5d:f3:b5:
1d:97:fc:93:7f:c0:cf:05:62:4b:22:07:26:8a:26:
1f:14:ce:dd:97:d5:ad:d7:53:e7:c6:36:9f:71:b0:
40:08:5b:ff:f6:f3:f0:94:bc:39:eb:1a:b0:18:03:
38:b9:35:2f:2a:ec:c4:47:22:4b:a0:89:71:9c:e0:
cb:25:dc:2d:9e:20:63:21:82:e8:c6:3e:c7:51:fa:
2b:eb:3f:64:55:e3:04:11:5c:9a:5b:58:6a:7e:c0:
d3:1a:50:c0:7f:80:43:b1:5b:7e:90:39:12:61:ef:
d5:83:d4:38:06:42:16:ed:ac:3b:37:60:1a:08:5e:
d7:58:c8:44:0e:5f:a7:9a:52:85:d1:01:a0:06:ae:
58:5a:4b:a7:a0:f7:49:45:0e:14:87:b8:5b:1a:99:
c6:b4:61:9a:38:43:07:7c:f5:de:d3:02:c3:75:93:
6f:0b:2c:eb:98:db:b4:d7:36:c5:47:0a:04:8b:d3:
81:7c:76:21:3d:5a:2d:d0:ab:61:3b:ba:9d:ef:ec:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:10:9D:84:4A:B5:29:CB:C0:A4:8C:37:40:82:5B:B5:A9:51:9C
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/1vcQnYRKtSnLwKSMN0CCW7WpUZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.101.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1b:51:f7:96:85:c8:68:e6:4d:72:bb:08:cc:4f:13:e4:72:
20:82:56:e8:c2:d1:3c:02:9e:f0:b3:a5:3b:09:e2:e0:9d:9c:
6a:8f:3e:03:57:b4:be:d4:86:8c:cf:1b:ad:32:fb:e1:cf:b7:
3f:91:b2:fb:26:03:8c:aa:6f:cf:a9:07:fd:45:42:d1:73:83:
1d:14:fc:5a:27:a9:cb:7f:7e:cb:42:cb:1d:09:ab:c6:b1:cf:
b2:46:62:72:ba:1d:9b:35:48:38:72:6e:cb:5b:e2:0c:c9:24:
d6:7d:67:b2:d6:af:2c:8d:3f:c8:5c:48:f1:0f:8a:d5:11:ab:
b0:91:88:10:d4:95:af:5b:15:61:ff:4e:33:28:a4:c9:16:4b:
b5:10:51:ef:4a:59:32:0d:5c:aa:0f:91:a6:97:7f:96:80:2e:
5e:18:a0:cc:6c:ce:b7:af:3f:10:c2:c5:2c:00:3d:62:e8:1a:
4e:63:53:4a:ab:5e:b4:cc:64:0e:ff:4e:4d:38:b8:05:59:8d:
d8:fe:d6:c9:02:3c:e0:4b:4b:65:53:22:53:1b:0b:0e:e2:5b:
d6:a9:3a:e7:cc:6f:15:7f:4e:b2:54:b0:d0:e7:05:e5:0a:e4:
80:a5:57:8e:92:d2:bd:54:69:58:1d:f1:cb:47:c4:c3:90:45:
57:33:a6:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteKRLczvo6wroQmk4dDxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy
OTcwMGEwHhcNMjMwMTAxMTMxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmY3MTA5ZDg0NGFiNTI5Y2JjMGE0OGMzNzQwODI1YmI1YTk1MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk4ZRVJ+KpVxgstZdERLFKwTwfZ1
loY0uO9wMv9NVv0R9mdVYwCy6HgDOaqoDoHXzpKOMz3q4T1d87Udl/yTf8DPBWJL
IgcmiiYfFM7dl9Wt11PnxjafcbBACFv/9vPwlLw56xqwGAM4uTUvKuzERyJLoIlx
nODLJdwtniBjIYLoxj7HUfor6z9kVeMEEVyaW1hqfsDTGlDAf4BDsVt+kDkSYe/V
g9Q4BkIW7aw7N2AaCF7XWMhEDl+nmlKF0QGgBq5YWkunoPdJRQ4Uh7hbGpnGtGGa
OEMHfPXe0wLDdZNvCyzrmNu01zbFRwoEi9OBfHYhPVot0KthO7qd7+wimQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNb3EJ2ESrUpy8CkjDdAglu1qVGcMB8GA1UdIwQY
MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt
ZjhkNjYyYjk2ZGFiLzEvMXZjUW5ZUkt0U25Md0tTTU4wQ0NXN1dwVVp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi
LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVLMA0G
CSqGSIb3DQEBCwUAA4IBAQB9G1H3loXIaOZNcrsIzE8T5HIgglbowtE8Ap7ws6U7
CeLgnZxqjz4DV7S+1IaMzxutMvvhz7c/kbL7JgOMqm/PqQf9RULRc4MdFPxaJ6nL
f37LQssdCavGsc+yRmJyuh2bNUg4cm7LW+IMySTWfWey1q8sjT/IXEjxD4rVEauw
kYgQ1JWvWxVh/04zKKTJFku1EFHvSlkyDVyqD5Gml3+WgC5eGKDMbM63rz8QwsUs
AD1i6BpOY1NKq160zGQO/05NOLgFWY3Y/tbJAjzgS0tlUyJTGwsO4lvWqTrnzG8V
f06yVLDQ5wXlCuSApVeOktK9VGlYHfHLR8TDkEVXM6aA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:23 2024 by rpki-client on console-ams.rpki-client.org