Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iLWMPkjq_pwxvWCuilQ3YLPHu6A.roa
File: iLWMPkjq_pwxvWCuilQ3YLPHu6A.roa (raw, json)
Hash identifier: 84uTqAD5CJ8UQ13be6YlKAdHsTu361ixAyJ9tomotk0=
Subject key identifier: 88:B5:8C:3E:48:EA:FE:9C:31:BD:60:AE:8A:54:37:60:B3:C7:BB:A0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC1618434B02D251CD72B2C49873A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iLWMPkjq_pwxvWCuilQ3YLPHu6A.roa
Signing time: Sun 01 Jan 2023 06:04:47 +0000
ROA not before: Sun 01 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197790
IP address blocks: 78.9.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c1:61:84:34:b0:2d:25:1c:d7:2b:2c:49:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b58c3e48eafe9c31bd60ae8a543760b3c7bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:6e:38:7d:08:dc:cd:63:06:0e:ef:83:42:
0e:f7:44:be:77:ea:e4:53:45:c3:e1:8d:88:bf:16:
4d:a0:dc:fb:99:89:11:d4:24:f6:78:f8:6b:b0:a5:
d5:ee:a3:04:ca:b1:70:06:a1:e5:cc:9f:30:aa:d5:
c4:f2:eb:72:f8:6d:fd:b5:55:32:bf:0b:c6:0a:ed:
83:0e:41:2d:ee:12:0b:28:f3:ba:12:a9:1b:f2:b6:
78:3f:b7:19:65:92:e5:03:b9:d4:d2:70:5c:e3:2f:
42:06:99:fa:5e:2f:bf:a4:0d:1d:ab:4b:71:29:ba:
7e:21:aa:b3:3a:64:4a:8c:e7:a0:10:5a:48:b6:cd:
62:37:2d:2f:28:24:69:03:d5:37:b5:81:f6:73:a2:
63:c0:c4:eb:e8:bc:0a:f1:50:43:9b:64:f4:50:18:
fb:a0:92:52:6d:f4:61:f3:10:79:24:4d:20:32:a2:
ab:55:e0:ee:a6:9a:1b:cb:26:ad:a7:ae:79:87:6c:
9b:2d:df:ad:7f:c1:be:84:c1:94:8f:44:0d:53:3c:
5e:b6:21:87:23:70:93:50:a6:2e:7b:dd:7e:2f:4f:
93:23:89:5f:03:da:7d:aa:6a:5e:15:89:7a:53:ed:
75:01:ea:a5:7e:a2:a0:68:fd:b5:12:f6:15:e0:c6:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B5:8C:3E:48:EA:FE:9C:31:BD:60:AE:8A:54:37:60:B3:C7:BB:A0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iLWMPkjq_pwxvWCuilQ3YLPHu6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.9.100.0/24
Signature Algorithm: sha256WithRSAEncryption
29:64:55:1e:fb:60:5c:b1:14:9f:f2:d1:7e:b2:08:cd:67:66:
ab:2e:b0:32:eb:eb:de:c7:ac:95:81:de:01:f3:eb:0e:44:30:
d1:02:57:f4:ba:e3:c2:b6:27:a2:5e:ca:3d:68:f8:31:20:17:
4a:20:0f:ef:9e:32:77:4a:95:dd:8f:44:bd:7b:5a:40:cc:fc:
d9:a4:c6:de:f5:f9:51:b6:b2:13:af:49:29:07:b5:c6:19:8f:
b9:de:c6:4f:3a:26:1d:78:e1:d7:b3:ad:4e:9a:a7:7a:ae:59:
28:b7:69:6c:3c:38:32:a2:84:28:1f:b4:9d:3b:44:61:8b:59:
69:ac:d4:60:cd:33:af:f8:c3:ea:70:3d:8d:15:ea:e3:68:c5:
d2:96:01:b1:58:b1:97:1d:43:51:0d:7d:c4:51:73:4a:02:76:
60:23:1f:99:04:62:ed:61:91:03:b9:5a:f1:d8:c3:e3:4d:9d:
c3:c7:0c:26:c1:d3:03:32:67:6e:26:36:7c:53:85:ce:1a:eb:
41:36:39:43:14:a1:ee:77:37:6d:03:af:af:ed:42:a1:96:e2:
7b:9a:3a:9e:5c:95:13:01:78:be:7f:c2:1d:04:01:bd:b9:33:
77:7c:2a:48:9f:52:32:3f:30:07:c8:03:64:0b:98:99:8a:45:
27:ed:44:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7sFhhDSwLSUc1yssSYc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGI1OGMzZTQ4ZWFmZTljMzFiZDYwYWU4YTU0Mzc2MGIzYzdiYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG5uOH0I3M1jBg7vg0IO90S+d+rk
U0XD4Y2IvxZNoNz7mYkR1CT2ePhrsKXV7qMEyrFwBqHlzJ8wqtXE8uty+G39tVUy
vwvGCu2DDkEt7hILKPO6Eqkb8rZ4P7cZZZLlA7nU0nBc4y9CBpn6Xi+/pA0dq0tx
Kbp+IaqzOmRKjOegEFpIts1iNy0vKCRpA9U3tYH2c6JjwMTr6LwK8VBDm2T0UBj7
oJJSbfRh8xB5JE0gMqKrVeDuppobyyatp655h2ybLd+tf8G+hMGUj0QNUzxetiGH
I3CTUKYue91+L0+TI4lfA9p9qmpeFYl6U+11AeqlfqKgaP21EvYV4MY63wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIi1jD5I6v6cMb1gropUN2Czx7ugMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvaUxXTVBranFfcHd4dldDdWlsUTNZTFBIdTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATglkMA0G
CSqGSIb3DQEBCwUAA4IBAQApZFUe+2BcsRSf8tF+sgjNZ2arLrAy6+vex6yVgd4B
8+sORDDRAlf0uuPCtieiXso9aPgxIBdKIA/vnjJ3SpXdj0S9e1pAzPzZpMbe9flR
trITr0kpB7XGGY+53sZPOiYdeOHXs61Omqd6rlkot2lsPDgyooQoH7SdO0Rhi1lp
rNRgzTOv+MPqcD2NFerjaMXSlgGxWLGXHUNRDX3EUXNKAnZgIx+ZBGLtYZEDuVrx
2MPjTZ3DxwwmwdMDMmduJjZ8U4XOGutBNjlDFKHudzdtA6+v7UKhluJ7mjqeXJUT
AXi+f8IdBAG9uTN3fCpIn1IyPzAHyANkC5iZikUn7UQX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org