Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/kXqDkIoiXC5Qs1dVslfNTf85czs.roa
File: kXqDkIoiXC5Qs1dVslfNTf85czs.roa (raw, json)
Hash identifier: efPec/88fmAX1lPzYz+y/plqDp6L65TLMIXJMUd8WgA=
Subject key identifier: 91:7A:83:90:8A:22:5C:2E:50:B3:57:55:B2:57:CD:4D:FF:39:73:3B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018A219BCCE1DB638369683B6922D7A24059
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/kXqDkIoiXC5Qs1dVslfNTf85czs.roa
Signing time: Wed 23 Aug 2023 08:56:13 +0000
ROA not before: Wed 23 Aug 2023 08:56:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201414
IP address blocks: 192.162.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:9b:cc:e1:db:63:83:69:68:3b:69:22:d7:a2:40:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 23 08:56:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=917a83908a225c2e50b35755b257cd4dff39733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:b0:3f:3b:40:8e:25:ab:88:d0:e9:b9:ed:
22:48:8f:8a:02:dd:48:23:4a:de:2d:48:ea:c4:9f:
df:75:62:77:45:17:b5:bb:ca:f2:b4:50:5d:10:c0:
2f:b7:9c:1f:0a:18:a1:ce:04:52:18:2c:ce:1d:72:
ba:1e:ee:df:73:04:47:d7:5c:81:98:c0:0a:31:75:
23:5c:f5:6b:a3:64:a4:78:fe:a9:48:dc:38:fd:d1:
38:ba:da:0d:6a:b5:a0:b2:45:2b:44:d5:6f:e4:f5:
fb:3c:5b:79:14:ef:df:1b:17:55:5a:f8:e1:c0:c0:
a4:7b:d4:8b:15:d1:b5:ad:40:24:1c:81:d6:e5:08:
33:d5:25:1b:cc:12:1b:24:6a:e3:06:24:c4:5a:94:
02:05:5d:88:c8:59:65:03:55:b8:8c:31:f0:69:6f:
c1:c9:d9:4b:29:a7:05:cd:d3:28:5b:a5:86:d4:6f:
bd:d6:bc:82:93:58:3b:90:97:f5:18:81:27:6f:6f:
54:77:b6:09:f2:72:f5:cf:65:76:cc:1b:33:0a:aa:
e2:6b:f6:8e:a4:53:fc:fb:6b:ef:38:87:6e:8f:97:
dd:84:3d:48:91:2f:cc:fc:85:09:2a:0c:74:a8:90:
b8:1c:18:62:1e:67:3f:d5:05:00:eb:f4:3f:69:aa:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:83:90:8A:22:5C:2E:50:B3:57:55:B2:57:CD:4D:FF:39:73:3B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/kXqDkIoiXC5Qs1dVslfNTf85czs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:bf:ab:be:38:22:be:5f:29:1b:6c:87:44:6a:a9:b0:a3:c3:
5e:7b:13:1c:79:ca:97:05:95:b0:c8:5a:d8:0d:f7:20:f3:56:
ce:3f:a3:10:b2:3b:f9:3b:ee:b9:b4:26:68:4a:a2:e3:6d:fc:
40:4f:73:3b:d5:60:ac:12:46:07:31:bb:a3:fd:7e:0d:42:34:
4a:66:a7:f4:a7:be:86:01:5a:41:78:5f:66:bb:16:81:42:c1:
03:23:d1:ea:e9:23:3c:6b:98:eb:8f:c0:f1:23:6b:9b:58:27:
3b:af:79:6d:e3:38:b9:44:d4:b7:27:0d:37:ff:45:b2:fa:4c:
af:78:60:4a:59:ab:18:57:07:9e:83:8f:d0:fe:3f:1a:b2:2b:
be:ee:15:be:27:7e:c3:19:89:e2:3d:b0:6e:ba:80:43:3c:9d:
c1:ec:38:cc:9c:d1:6d:09:cd:43:3f:fd:90:f4:05:9a:04:40:
fe:89:a1:59:b9:57:e0:e9:3f:9d:04:16:6e:e0:bf:15:d3:84:
29:00:2c:ce:b9:f3:53:74:9a:97:90:1b:1f:91:b0:ea:07:cd:
4a:ec:9d:40:42:6f:e7:2e:99:10:14:53:a1:e8:65:04:f3:b8:
99:0b:a9:44:d1:ff:96:d3:9c:6e:c4:1e:d6:a8:be:87:2b:e3:
2b:55:7a:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYohm8zh22ODaWg7aSLXokBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwODIzMDg1NjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTdhODM5MDhhMjI1YzJlNTBiMzU3NTViMjU3Y2Q0ZGZmMzk3MzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGiwPztAjiWriNDpue0iSI+KAt1I
I0reLUjqxJ/fdWJ3RRe1u8rytFBdEMAvt5wfChihzgRSGCzOHXK6Hu7fcwRH11yB
mMAKMXUjXPVro2SkeP6pSNw4/dE4utoNarWgskUrRNVv5PX7PFt5FO/fGxdVWvjh
wMCke9SLFdG1rUAkHIHW5Qgz1SUbzBIbJGrjBiTEWpQCBV2IyFllA1W4jDHwaW/B
ydlLKacFzdMoW6WG1G+91ryCk1g7kJf1GIEnb29Ud7YJ8nL1z2V2zBszCqria/aO
pFP8+2vvOIduj5fdhD1IkS/M/IUJKgx0qJC4HBhiHmc/1QUA6/Q/aaq+KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJF6g5CKIlwuULNXVbJXzU3/OXM7MB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEva1hxRGtJb2lYQzVRczFkVnNsZk5UZjg1Y3pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKJAMA0G
CSqGSIb3DQEBCwUAA4IBAQCtv6u+OCK+XykbbIdEaqmwo8NeexMcecqXBZWwyFrY
Dfcg81bOP6MQsjv5O+65tCZoSqLjbfxAT3M71WCsEkYHMbuj/X4NQjRKZqf0p76G
AVpBeF9muxaBQsEDI9Hq6SM8a5jrj8DxI2ubWCc7r3lt4zi5RNS3Jw03/0Wy+kyv
eGBKWasYVweeg4/Q/j8asiu+7hW+J37DGYniPbBuuoBDPJ3B7DjMnNFtCc1DP/2Q
9AWaBED+iaFZuVfg6T+dBBZu4L8V04QpACzOufNTdJqXkBsfkbDqB81K7J1AQm/n
LpkQFFOh6GUE87iZC6lE0f+W05xuxB7WqL6HK+MrVXrt
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org