Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa
File: Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa (raw, json)
Hash identifier: Y4MPceEyz7rY67MTQeopEJWV8L+EQxi8lmjJVdmSztQ=
Subject key identifier: 02:EE:26:37:73:62:9F:F4:25:F2:1E:E6:CC:0E:22:84:A8:BB:36:7C
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0C81818995DC8BEA0E5F26738C27
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa
Signing time: Mon 02 Jan 2023 14:24:58 +0000
ROA not before: Mon 02 Jan 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57037
IP address blocks: 146.247.96.0/19 maxlen: 24
2a01:b180::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0c:81:81:89:95:dc:8b:ea:0e:5f:26:73:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02ee263773629ff425f21ee6cc0e2284a8bb367c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:38:eb:73:24:44:95:e3:e3:a0:81:4b:3c:
a4:10:62:f3:89:d6:af:e4:d2:b3:44:f2:74:76:6c:
0c:12:96:97:0d:74:0a:31:b3:27:4a:ed:a5:50:3e:
d8:0c:71:34:10:47:3e:4f:ab:b3:c1:fd:b1:c5:38:
f2:a1:ed:62:66:17:75:6c:98:f7:99:13:1b:48:02:
c4:8f:d9:2d:c2:e4:74:4c:b0:7a:59:fb:7d:ba:90:
6a:ac:ee:f6:6f:65:35:40:88:ef:cc:c8:c1:e3:b4:
4e:90:3c:6d:7b:89:fb:87:ed:ff:1d:fb:ac:78:64:
19:c4:6a:8b:25:39:c9:d9:c0:11:8b:19:2b:54:f7:
74:28:56:26:39:35:56:f1:3c:2c:f8:2f:0a:25:56:
fb:9b:c8:fe:91:74:bd:fd:0d:1b:ed:ed:4d:09:35:
7f:45:12:82:aa:43:02:8a:bb:b7:4f:53:a1:ea:44:
1e:24:dc:7b:e5:1b:36:cf:fc:ad:d1:e2:bc:9b:fa:
c7:26:28:43:30:46:87:dc:ae:2a:6e:4b:3a:97:fa:
ba:7b:39:91:ba:47:23:a2:b9:bc:3f:30:49:49:15:
e6:4f:74:20:96:13:d5:20:5d:9d:63:28:41:fe:cd:
06:69:95:0d:c6:70:8c:98:19:1f:9f:c4:0a:23:bc:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:26:37:73:62:9F:F4:25:F2:1E:E6:CC:0E:22:84:A8:BB:36:7C
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.96.0/19
IPv6:
2a01:b180::/29
Signature Algorithm: sha256WithRSAEncryption
35:1f:24:2c:08:64:95:02:43:a7:70:13:37:21:8d:09:db:93:
65:1a:f5:46:a2:21:29:51:63:d3:4b:0d:2c:52:bb:e6:2e:b2:
43:04:c3:1d:7e:da:c4:ca:73:e2:7c:fb:43:bf:0c:24:73:eb:
47:45:7a:ca:9f:a5:c5:16:27:83:ae:64:c7:85:f6:52:7b:59:
2a:4c:87:79:8c:53:0a:f0:de:5e:ee:ab:c7:f8:8a:64:1d:6d:
1d:5d:c4:22:af:34:bb:95:b7:58:22:c7:3c:e0:ff:6a:8c:b6:
95:ff:8d:d6:15:8d:76:ae:f4:62:e6:b3:f8:a9:f1:17:53:ea:
a2:2d:b1:94:56:fb:d0:d5:92:20:a4:2d:42:90:cc:ef:15:ce:
b7:5d:e1:cd:b9:24:1c:0e:93:41:8c:cc:1e:e1:09:2d:17:0a:
df:1e:05:9d:7b:32:e7:86:3d:a6:1d:b8:99:95:6f:bd:e6:f1:
b9:5a:3d:be:96:58:e5:a7:53:93:6d:83:82:91:ff:be:0b:d8:
2b:55:64:3f:d2:cb:dc:27:3c:c7:32:a6:66:8f:e6:aa:d4:9a:
66:12:21:28:fc:44:61:9d:de:50:f1:28:a0:da:16:cc:9c:b0:
36:e2:8c:4d:d4:c3:9e:b3:87:34:a2:54:7f:5e:72:ed:34:71:
55:39:a0:c8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVy3wyBgYmV3IvqDl8mc4wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwMTAyMTQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVlMjYzNzczNjI5ZmY0MjVmMjFlZTZjYzBlMjI4NGE4YmIzNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTA463MkRJXj46CBSzykEGLzidav
5NKzRPJ0dmwMEpaXDXQKMbMnSu2lUD7YDHE0EEc+T6uzwf2xxTjyoe1iZhd1bJj3
mRMbSALEj9ktwuR0TLB6Wft9upBqrO72b2U1QIjvzMjB47ROkDxte4n7h+3/Hfus
eGQZxGqLJTnJ2cARixkrVPd0KFYmOTVW8Tws+C8KJVb7m8j+kXS9/Q0b7e1NCTV/
RRKCqkMCiru3T1Oh6kQeJNx75Rs2z/yt0eK8m/rHJihDMEaH3K4qbks6l/q6ezmR
ukcjorm8PzBJSRXmT3QglhPVIF2dYyhB/s0GaZUNxnCMmBkfn8QKI7z65QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFALuJjdzYp/0JfIe5swOIoSouzZ8MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvQXU0bU4zTmluX1FsOGg3bXpBNGloS2k3Tm53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFkvdgMA0E
AgACMAcDBQMqAbGAMA0GCSqGSIb3DQEBCwUAA4IBAQA1HyQsCGSVAkOncBM3IY0J
25NlGvVGoiEpUWPTSw0sUrvmLrJDBMMdftrEynPifPtDvwwkc+tHRXrKn6XFFieD
rmTHhfZSe1kqTId5jFMK8N5e7qvH+IpkHW0dXcQirzS7lbdYIsc84P9qjLaV/43W
FY12rvRi5rP4qfEXU+qiLbGUVvvQ1ZIgpC1CkMzvFc63XeHNuSQcDpNBjMwe4Qkt
FwrfHgWdezLnhj2mHbiZlW+95vG5Wj2+lljlp1OTbYOCkf++C9grVWQ/0svcJzzH
MqZmj+aq1JpmEiEo/ERhnd5Q8Sig2hbMnLA24oxN1MOes4c0olR/XnLtNHFVOaDI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org