Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/56xEvL005sy3iO0SEVn-J7PMLGs.roa
File: 56xEvL005sy3iO0SEVn-J7PMLGs.roa (raw, json)
Hash identifier: MKW0r5mLuuw0YA/69Kdh4x+QrnvTg9PQBE/qs14mCz4=
Subject key identifier: E7:AC:44:BC:BD:34:E6:CC:B7:88:ED:12:11:59:FE:27:B3:CC:2C:6B
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 018C0223AC90D97247070B85ECEA53D08AAE
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/56xEvL005sy3iO0SEVn-J7PMLGs.roa
Signing time: Fri 24 Nov 2023 16:22:21 +0000
ROA not before: Fri 24 Nov 2023 16:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 167.94.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:23:ac:90:d9:72:47:07:0b:85:ec:ea:53:d0:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Nov 24 16:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7ac44bcbd34e6ccb788ed121159fe27b3cc2c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:1e:6c:97:94:2a:7f:58:56:a9:b7:c1:86:
96:27:5e:da:d6:bf:6f:86:cb:52:f7:33:49:e6:4e:
28:e8:db:25:70:28:6a:d9:f2:81:e3:02:7f:40:24:
0e:0c:c3:66:be:1c:25:4b:a2:3e:f4:54:c2:50:90:
7d:45:b7:05:c6:e7:0f:04:c7:72:fd:ca:be:ae:f4:
45:e7:ac:62:3e:ac:cb:c7:2f:72:56:7d:58:df:63:
4d:75:02:3a:1d:0a:6d:37:c1:46:22:4c:41:88:b3:
8b:0d:14:83:86:79:37:4f:b9:5e:90:fb:89:8a:82:
62:80:55:f8:71:df:35:16:2d:37:0c:45:08:0b:46:
c3:19:60:75:90:5b:7d:6c:1a:4f:7f:3d:eb:4f:d8:
f1:cf:e4:b8:de:2b:bf:5a:a1:fc:06:7d:aa:81:34:
90:12:3f:7f:b6:cc:2c:70:35:f6:4e:4b:e5:d6:8d:
dc:22:0c:e8:80:44:bd:67:79:cc:9b:17:f9:e2:38:
30:05:43:2d:7b:cf:1d:d7:e4:0a:3d:7f:b1:55:cb:
3c:25:04:eb:73:4c:ff:b5:44:05:25:74:18:0b:d3:
1a:03:a5:53:2f:b1:07:52:ad:68:0e:fa:e0:e5:9f:
13:9c:b4:1a:f9:31:f6:03:eb:0e:0b:a1:32:f1:73:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AC:44:BC:BD:34:E6:CC:B7:88:ED:12:11:59:FE:27:B3:CC:2C:6B
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/56xEvL005sy3iO0SEVn-J7PMLGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.24.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0f:2c:33:b7:00:88:84:34:8a:7c:cf:fd:86:3d:37:b1:4a:
3e:c2:a3:61:90:5a:ed:c0:a2:7a:3d:c0:4e:ce:99:52:b2:c1:
13:91:6d:7c:82:68:7e:13:d7:bd:68:20:dc:c6:c7:fc:4b:d4:
73:b3:d8:61:6d:70:f3:da:82:9c:d4:98:b4:3f:4e:26:49:ec:
29:ca:01:f3:2b:55:0c:bd:bd:cf:c9:dc:2f:d9:47:b4:3a:93:
0d:ad:1e:db:b8:31:08:d4:52:0f:fe:de:84:f4:61:a5:bf:b1:
53:25:b0:89:13:9a:59:4a:f2:c5:58:6c:97:32:ad:3f:21:9b:
33:48:5d:73:cf:9b:22:9e:67:9e:be:df:3a:40:9f:93:08:7e:
ae:bc:c3:01:da:c1:c3:0f:0b:c7:63:f3:01:99:cf:9a:8e:ee:
97:82:4e:92:05:d3:1f:19:a6:a1:34:fe:5f:55:7b:bc:15:cd:
87:8a:28:87:21:00:41:8f:8d:af:09:3f:84:21:c3:be:19:5e:
96:72:b9:30:34:76:d3:27:75:07:c2:9b:3f:76:f2:e4:53:53:
20:b6:bf:f0:b5:a5:91:47:e9:8d:50:7d:8a:c3:18:7b:fe:b7:
3b:2c:6a:98:bc:9e:6e:4f:d2:fc:2f:55:7c:6e:23:3d:31:dc:
23:2b:10:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwCI6yQ2XJHBwuF7OpT0IquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk
NGVkOTYwHhcNMjMxMTI0MTYyMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2FjNDRiY2JkMzRlNmNjYjc4OGVkMTIxMTU5ZmUyN2IzY2MyYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfgebJeUKn9YVqm3wYaWJ17a1r9v
hstS9zNJ5k4o6NslcChq2fKB4wJ/QCQODMNmvhwlS6I+9FTCUJB9RbcFxucPBMdy
/cq+rvRF56xiPqzLxy9yVn1Y32NNdQI6HQptN8FGIkxBiLOLDRSDhnk3T7lekPuJ
ioJigFX4cd81Fi03DEUIC0bDGWB1kFt9bBpPfz3rT9jxz+S43iu/WqH8Bn2qgTSQ
Ej9/tswscDX2Tkvl1o3cIgzogES9Z3nMmxf54jgwBUMte88d1+QKPX+xVcs8JQTr
c0z/tUQFJXQYC9MaA6VTL7EHUq1oDvrg5Z8TnLQa+TH2A+sOC6Ey8XNuWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOesRLy9NObMt4jtEhFZ/iezzCxrMB8GA1UdIwQY
MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt
Y2U4MjE0Y2VmNmI1LzEvNTZ4RXZMMDA1c3kzaU8wU0VWbi1KN1BNTEdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1
LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14YMA0G
CSqGSIb3DQEBCwUAA4IBAQA5DywztwCIhDSKfM/9hj03sUo+wqNhkFrtwKJ6PcBO
zplSssETkW18gmh+E9e9aCDcxsf8S9Rzs9hhbXDz2oKc1Ji0P04mSewpygHzK1UM
vb3Pydwv2Ue0OpMNrR7buDEI1FIP/t6E9GGlv7FTJbCJE5pZSvLFWGyXMq0/IZsz
SF1zz5sinmeevt86QJ+TCH6uvMMB2sHDDwvHY/MBmc+aju6Xgk6SBdMfGaahNP5f
VXu8Fc2HiiiHIQBBj42vCT+EIcO+GV6WcrkwNHbTJ3UHwps/dvLkU1Mgtr/wtaWR
R+mNUH2Kwxh7/rc7LGqYvJ5uT9L8L1V8biM9MdwjKxA/
Generated at Fri Nov 24 18:27:13 2023 by rpki-client on console-ams.rpki-client.org