Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/t0txqbvBU2dvrLFebety16_M3O8.roa
File: t0txqbvBU2dvrLFebety16_M3O8.roa (raw, json)
Hash identifier: WNziBFsrYK9uZPCSjhNFg495fvjarNqIRlGAie0eqjw=
Subject key identifier: B7:4B:71:A9:BB:C1:53:67:6F:AC:B1:5E:6D:EB:72:D7:AF:CC:DC:EF
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082B4E3D2E432FEF39A6FD075D1FC95
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/t0txqbvBU2dvrLFebety16_M3O8.roa
Signing time: Mon 02 Jan 2023 03:24:52 +0000
ROA not before: Mon 02 Jan 2023 03:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212139
IP address blocks: 84.124.119.0/24 maxlen: 24
62.175.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b4:e3:d2:e4:32:fe:f3:9a:6f:d0:75:d1:fc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b74b71a9bbc153676facb15e6deb72d7afccdcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:f0:fa:0c:b4:b0:67:ab:a0:dd:f9:6a:a8:
71:39:9d:b5:37:ef:fd:7e:8c:4e:49:a3:44:59:3d:
82:2e:5e:e4:28:1a:9d:cb:83:19:f2:a3:ba:ea:6f:
30:ad:56:88:9f:a6:1e:90:64:f0:c3:9d:e1:9f:5b:
49:ab:cb:88:2e:5b:44:d7:a5:ad:d0:e4:08:e8:4d:
2e:0e:da:20:1d:63:07:d3:af:48:f2:cc:d6:74:06:
5f:82:86:66:12:62:09:f1:81:fb:a3:26:a8:47:7e:
f8:e2:0d:6a:31:4e:35:f3:bb:da:d9:cf:08:2a:9e:
07:51:8b:63:84:8f:a8:9c:d6:f3:2a:b3:6b:09:cc:
33:e2:c3:6c:b9:ae:2e:b0:12:0b:8a:30:f1:d7:54:
22:9a:ab:df:11:fc:b4:90:bf:5d:46:bb:8d:d3:16:
00:41:f8:8e:b1:e5:0b:20:4f:78:58:84:77:1c:92:
91:ae:60:32:bd:4b:13:d0:e3:77:1d:b9:dc:0c:50:
99:f1:0a:85:43:03:b8:70:2d:51:5b:b4:6b:d9:3a:
19:82:3d:73:84:7e:cb:df:d3:73:e1:27:5d:a6:bf:
9e:2e:a0:60:81:f8:66:89:f5:4f:b2:57:c3:f1:98:
26:8a:cf:6a:45:ce:2c:42:7a:aa:31:7a:e1:4e:c5:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:71:A9:BB:C1:53:67:6F:AC:B1:5E:6D:EB:72:D7:AF:CC:DC:EF
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/t0txqbvBU2dvrLFebety16_M3O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.175.249.0/24
84.124.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:77:0f:3f:5e:72:56:2e:5b:a0:b3:94:54:96:64:81:d2:ae:
9f:03:ee:21:e8:6d:84:3a:98:6f:e5:cd:e0:18:32:3b:8d:68:
49:b3:56:96:bc:5d:7c:26:a8:05:c6:2c:5d:33:5e:02:48:12:
d5:e3:f9:ba:cf:d7:75:58:ae:fb:a6:52:2c:0e:78:c8:a7:6d:
34:ab:3e:78:4d:08:b4:2c:6a:43:15:0d:50:d6:86:e8:09:75:
34:d0:86:33:26:b4:e0:76:3b:e9:41:2a:50:b6:42:98:e5:7a:
97:13:b8:86:28:15:a1:db:7d:64:c4:93:a5:87:99:09:64:09:
23:0f:42:83:2c:71:fd:d3:7c:9e:5d:2a:fb:d7:c5:6b:a4:90:
ae:77:c9:8d:78:96:88:13:ef:3c:7e:c4:6e:90:e0:23:db:d8:
6c:54:9b:71:bb:48:c0:39:56:93:0e:c4:75:4e:1c:cf:02:bf:
60:71:33:6c:d7:5c:54:5b:84:88:32:f5:92:e6:ca:c8:74:aa:
32:a2:7a:af:d4:36:de:60:87:fa:ab:55:01:a7:ed:75:18:54:
99:0d:08:77:12:37:f1:b3:77:1d:ec:bf:fc:03:16:92:d6:db:
f7:9d:02:78:24:15:e0:d5:1f:bb:29:dc:b1:86:8b:29:69:d7:
c7:58:b4:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwgrTj0uQy/vOab9B10fyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjMwMTAyMDMyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzRiNzFhOWJiYzE1MzY3NmZhY2IxNWU2ZGViNzJkN2FmY2NkY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3rw+gy0sGeroN35aqhxOZ21N+/9
foxOSaNEWT2CLl7kKBqdy4MZ8qO66m8wrVaIn6YekGTww53hn1tJq8uILltE16Wt
0OQI6E0uDtogHWMH069I8szWdAZfgoZmEmIJ8YH7oyaoR3744g1qMU4187va2c8I
Kp4HUYtjhI+onNbzKrNrCcwz4sNsua4usBILijDx11QimqvfEfy0kL9dRruN0xYA
QfiOseULIE94WIR3HJKRrmAyvUsT0ON3HbncDFCZ8QqFQwO4cC1RW7Rr2ToZgj1z
hH7L39Nz4Sddpr+eLqBggfhmifVPslfD8Zgmis9qRc4sQnqqMXrhTsVhnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLdLcam7wVNnb6yxXm3rctevzNzvMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvdDB0eHFidkJVMmR2ckxGZWJldHkxNl9NM084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPq/5AwQA
VHx3MA0GCSqGSIb3DQEBCwUAA4IBAQB+dw8/XnJWLlugs5RUlmSB0q6fA+4h6G2E
Ophv5c3gGDI7jWhJs1aWvF18JqgFxixdM14CSBLV4/m6z9d1WK77plIsDnjIp200
qz54TQi0LGpDFQ1Q1oboCXU00IYzJrTgdjvpQSpQtkKY5XqXE7iGKBWh231kxJOl
h5kJZAkjD0KDLHH903yeXSr718VrpJCud8mNeJaIE+88fsRukOAj29hsVJtxu0jA
OVaTDsR1ThzPAr9gcTNs11xUW4SIMvWS5srIdKoyonqv1DbeYIf6q1UBp+11GFSZ
DQh3Ejfxs3cd7L/8AxaS1tv3nQJ4JBXg1R+7KdyxhospadfHWLSn
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:15 2024 by rpki-client on console-ams.rpki-client.org