Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/JXkX4bBMlOzm-6qaF1KY2EoQd3w.roa
File: JXkX4bBMlOzm-6qaF1KY2EoQd3w.roa (raw, json)
Hash identifier: UcpXkrxBviv7Ex+FWotlgn/gQssmCUJCivQWMG/+wyQ=
Subject key identifier: 25:79:17:E1:B0:4C:94:EC:E6:FB:AA:9A:17:52:98:D8:4A:10:77:7C
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 01856EB8EE66DCB50C3A6CBC9BA7FC243F3A
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/JXkX4bBMlOzm-6qaF1KY2EoQd3w.roa
Signing time: Sun 01 Jan 2023 19:04:51 +0000
ROA not before: Sun 01 Jan 2023 19:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51485
IP address blocks: 192.40.71.0/24 maxlen: 24
192.40.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:ee:66:dc:b5:0c:3a:6c:bc:9b:a7:fc:24:3f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Jan 1 19:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=257917e1b04c94ece6fbaa9a175298d84a10777c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:a1:8c:cc:78:67:5b:8e:aa:6a:c3:fe:86:
93:58:df:f5:54:f8:c3:48:b0:b2:13:bb:52:4e:35:
ab:b3:71:5b:bc:fd:fc:fd:46:34:01:a2:7b:20:80:
3a:7c:05:6b:b9:2f:be:36:21:15:5e:c3:c1:fa:0e:
a6:bb:96:23:26:71:c6:1e:33:b9:4c:f1:b8:3c:d7:
dd:d2:b6:f8:d6:f2:fc:7e:76:4b:57:c8:e3:19:ed:
d8:7e:1a:34:83:9a:e3:1c:b3:cb:85:9a:3c:fa:4d:
9a:db:47:3e:b4:bb:c3:47:93:34:09:92:71:72:62:
17:2a:bd:2a:25:34:fa:66:46:b3:f8:61:12:ec:16:
bd:fe:e1:f5:92:a1:52:9b:7c:4a:2d:e8:47:d3:a7:
eb:df:96:1a:7a:42:6c:11:0b:67:96:d6:35:f0:42:
40:33:ed:97:ed:c5:b7:54:f2:ff:28:42:dc:6d:56:
9b:11:b9:61:12:65:e7:bd:55:d6:7f:b3:d1:b9:e2:
5e:ae:cb:40:40:10:17:e7:38:dc:29:55:fe:2d:d9:
8a:d7:be:96:21:d5:6f:66:36:ba:93:d5:99:71:4b:
8d:dc:b1:e6:71:07:57:df:d1:60:ae:70:ae:51:f3:
18:e4:f3:cb:d3:85:b0:43:7e:d5:00:69:75:26:e8:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:17:E1:B0:4C:94:EC:E6:FB:AA:9A:17:52:98:D8:4A:10:77:7C
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/JXkX4bBMlOzm-6qaF1KY2EoQd3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.70.0/23
Signature Algorithm: sha256WithRSAEncryption
51:8f:89:f3:13:18:fd:14:8b:00:51:75:7b:0f:3a:b4:b4:d2:
4a:74:af:33:6e:b5:12:ec:22:42:6d:bf:da:ea:b3:3b:c9:c4:
df:3d:0d:a6:f5:34:e0:e3:cb:c4:19:f4:5c:f7:25:57:57:fa:
64:d0:04:24:49:a6:3b:ff:a2:07:5c:84:8e:8e:28:ce:46:07:
56:08:47:3d:c6:4d:a3:b8:6c:1a:ea:9e:f9:da:9e:da:e6:23:
94:2c:52:c2:c3:3a:7f:4e:34:a6:79:54:be:dc:f0:c7:b3:06:
08:4a:3e:89:9b:d2:f5:05:a5:ca:2c:1f:0c:1a:3c:67:13:8f:
e4:80:86:cb:b6:ce:db:5e:b2:07:6e:cd:5d:fa:d1:a0:91:af:
89:e4:24:1b:ad:4d:ca:32:15:ce:9b:69:8f:0a:2f:f6:f6:4e:
ad:ba:43:54:36:d6:48:bc:09:f1:fe:e9:29:a3:b1:88:a5:9a:
a7:f2:27:9f:1f:61:4c:1d:b0:68:c0:32:99:38:5a:8b:90:04:
01:4d:fb:26:b0:34:a3:2f:95:ba:b8:81:8c:ca:41:58:88:03:
32:6a:35:b3:45:94:3e:1a:59:b6:45:ca:8b:4d:54:d3:70:f6:
35:64:18:68:3c:06:cc:1a:42:ba:90:81:18:a9:91:15:3f:c5:
b9:49:ff:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuO5m3LUMOmy8m6f8JD86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzZiZDhmYWQzOTNlNTEzMWEwMjM3MjkzMTViMzU2MDE0
ZTY2MzcwHhcNMjMwMTAxMTkwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTc5MTdlMWIwNGM5NGVjZTZmYmFhOWExNzUyOThkODRhMTA3NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGWhjMx4Z1uOqmrD/oaTWN/1VPjD
SLCyE7tSTjWrs3FbvP38/UY0AaJ7IIA6fAVruS++NiEVXsPB+g6mu5YjJnHGHjO5
TPG4PNfd0rb41vL8fnZLV8jjGe3Yfho0g5rjHLPLhZo8+k2a20c+tLvDR5M0CZJx
cmIXKr0qJTT6Zkaz+GES7Ba9/uH1kqFSm3xKLehH06fr35YaekJsEQtnltY18EJA
M+2X7cW3VPL/KELcbVabEblhEmXnvVXWf7PRueJerstAQBAX5zjcKVX+LdmK176W
IdVvZja6k9WZcUuN3LHmcQdX39FgrnCuUfMY5PPL04WwQ37VAGl1JujBZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCV5F+GwTJTs5vuqmhdSmNhKEHd8MB8GA1UdIwQY
MBaAFIg2vY+tOT5RMaAjcpMVs1YBTmY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzIt
MTJmOWNiMGEyMTE4LzEvSlhrWDRiQk1sT3ptLTZxYUYxS1kyRW9RZDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzItMTJmOWNiMGEyMTE4
LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwChGMA0G
CSqGSIb3DQEBCwUAA4IBAQBRj4nzExj9FIsAUXV7Dzq0tNJKdK8zbrUS7CJCbb/a
6rM7ycTfPQ2m9TTg48vEGfRc9yVXV/pk0AQkSaY7/6IHXISOjijORgdWCEc9xk2j
uGwa6p752p7a5iOULFLCwzp/TjSmeVS+3PDHswYISj6Jm9L1BaXKLB8MGjxnE4/k
gIbLts7bXrIHbs1d+tGgka+J5CQbrU3KMhXOm2mPCi/29k6tukNUNtZIvAnx/ukp
o7GIpZqn8iefH2FMHbBowDKZOFqLkAQBTfsmsDSjL5W6uIGMykFYiAMyajWzRZQ+
Glm2RcqLTVTTcPY1ZBhoPAbMGkK6kIEYqZEVP8W5Sf+K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:56 2024 by rpki-client on console-ams.rpki-client.org