Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/goIcIL3KsuYb4REfM7HSGS80c2E.roa
File: goIcIL3KsuYb4REfM7HSGS80c2E.roa (raw, json)
Hash identifier: ncTCzqBVe+ao//jIDMH5q6zDAjDlwDk5LxUZOGiCf3k=
Subject key identifier: 82:82:1C:20:BD:CA:B2:E6:1B:E1:11:1F:33:B1:D2:19:2F:34:73:61
Certificate issuer: /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial: 018570B0914CA15F92BE5CB1DDCE8AED1CC6
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/goIcIL3KsuYb4REfM7HSGS80c2E.roa
Signing time: Mon 02 Jan 2023 04:14:57 +0000
ROA not before: Mon 02 Jan 2023 04:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
2a09:e240:22::/48 maxlen: 48
2a09:e240:2::/48 maxlen: 48
2a09:e240:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:91:4c:a1:5f:92:be:5c:b1:dd:ce:8a:ed:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Validity
Not Before: Jan 2 04:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82821c20bdcab2e61be1111f33b1d2192f347361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:0c:49:c8:8a:71:32:ee:ee:07:6d:81:88:
b4:ff:60:c1:34:b4:8e:76:96:db:bc:cc:2e:1b:1d:
50:8b:32:59:65:eb:c4:21:b5:df:6a:9a:37:b1:ae:
69:18:30:c9:a6:9b:c1:7e:3f:22:2d:53:d2:59:25:
d2:4a:81:db:48:66:49:39:65:59:24:e1:6d:01:d8:
4a:43:7c:8e:7f:e3:5c:45:b5:7f:11:00:d2:aa:46:
9a:fd:d6:7e:f2:64:a0:9a:2a:78:40:d8:ba:2a:2a:
73:44:d7:da:c0:47:ef:b6:ca:81:f4:24:3e:3e:b6:
c5:16:2c:d0:34:75:f6:06:0b:a2:72:a6:ba:41:71:
03:8b:85:68:69:06:3f:78:0e:eb:94:54:7d:25:b5:
ec:66:12:45:dd:9f:aa:d5:c3:85:fe:69:2a:0d:e9:
e6:b5:4f:49:33:62:f7:35:01:a4:48:a5:e9:18:4d:
77:c4:68:7e:3a:fd:f3:a3:c7:ba:73:90:42:c2:6a:
91:80:7b:88:1b:12:f9:d1:dc:5a:e8:b0:70:e8:9b:
c9:92:f2:75:ca:aa:2b:bc:25:9e:93:03:35:d4:27:
cd:9e:0d:87:bf:f6:19:ea:d2:ca:0e:3f:80:e7:4c:
bc:dc:c6:f9:84:a0:01:7a:f8:e4:ce:05:f8:42:1a:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:1C:20:BD:CA:B2:E6:1B:E1:11:1F:33:B1:D2:19:2F:34:73:61
X509v3 Authority Key Identifier:
keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/goIcIL3KsuYb4REfM7HSGS80c2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0/24
2.58.59.0/24
IPv6:
2a09:e240:1::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff
2a09:e240:22::/48
Signature Algorithm: sha256WithRSAEncryption
63:73:76:4e:22:fb:83:ce:7b:27:69:03:40:20:bd:1a:28:32:
06:24:f4:f6:11:9a:72:e0:fa:11:bd:73:4c:cb:d4:9f:77:d2:
a9:8e:51:1e:99:63:54:34:b8:f1:bd:16:78:27:b4:bd:4e:09:
3f:ab:87:05:02:d1:44:99:92:f3:1a:15:c1:76:35:81:e8:1b:
b7:1a:e3:87:70:e9:f8:07:d2:36:0a:42:c2:90:01:13:16:1c:
74:d0:aa:71:78:01:f9:2e:9d:23:c6:ad:1a:93:23:7a:a8:ca:
63:4e:f5:0a:95:31:ab:0f:63:b2:07:a1:67:d2:bf:19:70:7d:
b9:4a:63:03:80:de:dc:fe:a6:08:6c:95:84:0e:81:47:aa:30:
7a:a7:9b:05:f1:61:51:5a:6a:e2:5f:9e:17:8e:9a:d9:d6:e7:
de:8b:55:71:24:ea:04:e7:e0:4f:98:a8:97:64:36:65:cb:e8:
ed:98:5f:7a:c0:02:80:64:47:c6:f0:6e:ca:01:06:4a:8e:a1:
11:7a:8f:fe:eb:e5:a1:69:4b:bb:49:4a:1d:01:48:99:2e:c8:
a4:c0:02:43:a5:03:ba:1d:06:4b:9f:e5:26:2b:52:06:de:5e:
c8:b9:f1:13:6f:28:ee:a6:4c:33:7e:d1:37:8a:4c:23:d3:95:
07:62:89:f6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYVwsJFMoV+Svlyx3c6K7RzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzQ0MDA2ZWFjMzA4NGJmODhmMTI4MzQ5YjBlNzMzYmIz
ZDc5ZTMwHhcNMjMwMTAyMDQxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjgyMWMyMGJkY2FiMmU2MWJlMTExMWYzM2IxZDIxOTJmMzQ3MzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkAMSciKcTLu7gdtgYi0/2DBNLSO
dpbbvMwuGx1QizJZZevEIbXfapo3sa5pGDDJppvBfj8iLVPSWSXSSoHbSGZJOWVZ
JOFtAdhKQ3yOf+NcRbV/EQDSqkaa/dZ+8mSgmip4QNi6KipzRNfawEfvtsqB9CQ+
PrbFFizQNHX2Bguicqa6QXEDi4VoaQY/eA7rlFR9JbXsZhJF3Z+q1cOF/mkqDenm
tU9JM2L3NQGkSKXpGE13xGh+Ov3zo8e6c5BCwmqRgHuIGxL50dxa6LBw6JvJkvJ1
yqorvCWekwM11CfNng2Hv/YZ6tLKDj+A50y83Mb5hKABevjkzgX4QhqRiQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFIKCHCC9yrLmG+ERHzOx0hkvNHNhMB8GA1UdIwQY
MBaAFPt0QAbqwwhL+I8Sg0mw5zO7PXnjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zUkFCdXJEQ0V2NGp4S0RTYkRuTTdzOWVlTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMTc4MzZhLWQ2NzgtNDFjYS04ZmIy
LTVlYjdiZWY5YTdhOC8xL2dvSWNJTDNLc3VZYjRSRWZNN0hTR1M4MGMyRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmUvMTc4MzZhLWQ2NzgtNDFjYS04ZmIyLTVlYjdiZWY5YTdh
OC8xLzEtM1JBQnVyRENFdjRqeEtEU2JEbk03czllZU0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUHAQcBAf8EOzA5MBIEAgABMAwDBAACOjkD
BAACOjswIwQCAAIwHTASAwcAKgniQAABAwcAKgniQAACAwcAKgniQAAiMA0GCSqG
SIb3DQEBCwUAA4IBAQBjc3ZOIvuDznsnaQNAIL0aKDIGJPT2EZpy4PoRvXNMy9Sf
d9KpjlEemWNUNLjxvRZ4J7S9Tgk/q4cFAtFEmZLzGhXBdjWB6Bu3GuOHcOn4B9I2
CkLCkAETFhx00KpxeAH5Lp0jxq0akyN6qMpjTvUKlTGrD2OyB6Fn0r8ZcH25SmMD
gN7c/qYIbJWEDoFHqjB6p5sF8WFRWmriX54XjprZ1ufei1VxJOoE5+BPmKiXZDZl
y+jtmF96wAKAZEfG8G7KAQZKjqEReo/+6+WhaUu7SUodAUiZLsikwAJDpQO6HQZL
n+UmK1IG3l7IufETbyjupkwzftE3ikwj05UHYon2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:50 2023 by rpki-client on console-ams.rpki-client.org