Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/2re14PGYMUPyBc758DIszYUYoi8.roa
File: 2re14PGYMUPyBc758DIszYUYoi8.roa (raw, json)
Hash identifier: nIDACaoVH6MYZtVTqxzra9XlhUmB6PMG5cUrgsZVv0A=
Subject key identifier: DA:B7:B5:E0:F1:98:31:43:F2:05:CE:F9:F0:32:2C:CD:85:18:A2:2F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 01856D4AC96EE5736BBEF76599B1DD1328E1
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/2re14PGYMUPyBc758DIszYUYoi8.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 192.54.176.0/24 maxlen: 24
192.54.175.0/24 maxlen: 24
192.54.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c9:6e:e5:73:6b:be:f7:65:99:b1:dd:13:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dab7b5e0f1983143f205cef9f0322ccd8518a22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:87:e4:a1:4a:e8:89:e1:46:7b:64:d4:e0:
fb:d8:57:aa:25:a3:9f:3e:f7:1b:5b:10:7d:90:c1:
09:7f:b9:b8:19:bd:f6:dc:13:28:a1:e5:b2:a0:35:
b8:de:c6:ed:e5:5e:22:ea:17:59:6e:0a:63:c5:ea:
ab:34:d5:33:9f:75:e6:c0:dc:27:78:ca:ab:b2:d9:
4f:bc:14:73:61:ae:7d:24:ea:6a:bd:74:16:04:35:
8d:b7:98:c0:3d:35:c8:9c:e0:b8:c1:b2:38:ca:99:
b5:41:a2:93:c8:13:9d:d4:98:f2:c0:78:41:58:e9:
c4:9e:80:bc:31:b9:f3:4e:9e:78:1d:c0:fd:13:a2:
57:3e:b2:0b:bf:d8:e8:c2:95:62:7d:4d:5c:eb:01:
43:8e:cd:54:0b:76:21:17:1a:b9:df:47:21:eb:f5:
e1:f2:3b:d1:1d:68:14:7c:c4:40:a6:f1:11:b9:56:
ad:c3:71:d1:66:0b:cd:a4:14:a0:1a:e7:72:2a:00:
03:53:6f:4a:e0:02:70:b1:c8:fb:57:f2:b3:ee:47:
2a:ad:bb:ff:ec:d2:bf:43:1a:0d:af:07:19:31:b9:
ea:aa:b9:88:25:76:4f:fa:b2:2c:65:bd:66:67:49:
ac:bf:12:43:a1:9f:db:79:4a:3a:56:b1:eb:d7:3f:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:B5:E0:F1:98:31:43:F2:05:CE:F9:F0:32:2C:CD:85:18:A2:2F
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/2re14PGYMUPyBc758DIszYUYoi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.174.0-192.54.176.255
Signature Algorithm: sha256WithRSAEncryption
84:c3:a0:ec:05:9d:44:2d:fe:c9:9a:cf:b7:f1:54:b8:c3:5d:
98:2f:48:2b:23:68:b9:89:a1:74:6c:bf:6f:b5:2d:45:04:73:
da:04:55:b8:05:19:65:0f:f4:78:10:96:f6:69:f8:e6:eb:7c:
12:cb:89:e9:07:86:f3:08:f5:e8:71:a0:37:f6:71:dd:b4:b5:
d9:52:57:b6:3d:19:34:2c:09:4f:77:0d:cb:a0:69:f6:c3:9f:
7f:e3:a2:e8:f9:77:bf:9f:d7:1e:0a:92:66:ac:45:ba:fc:96:
da:09:ac:94:e7:b5:8e:27:4a:3e:a9:37:ff:9c:c3:c2:3b:34:
3f:68:36:bd:51:4a:1d:0f:99:cc:6b:8c:a3:e4:4e:03:58:ee:
6a:3b:a6:c8:bf:e8:fd:40:6c:05:46:fe:2f:30:97:3f:60:ef:
24:11:b6:9f:6c:dc:d9:21:ba:58:38:d7:a3:a5:e3:39:8f:e5:
84:d4:40:59:c3:30:6d:e2:33:21:69:a8:63:8f:f1:b3:65:54:
75:de:ab:ae:f7:8b:32:11:72:ef:1a:0e:f1:7e:91:e2:cd:c8:
03:59:f4:79:03:06:5d:07:f6:8b:dd:8d:ef:95:7b:24:64:4e:
31:e9:4a:90:a2:8c:87:02:ff:82:ad:9b:5d:ef:7e:f7:34:57:
89:61:f1:58
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtSslu5XNrvvdlmbHdEyjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWQyMjhiNmFjYmQxODAzY2ZmNTYwZmE0YjQyZjgzMmQy
ODMyNGYwHhcNMjMwMTAxMTIyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWI3YjVlMGYxOTgzMTQzZjIwNWNlZjlmMDMyMmNjZDg1MThhMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0iH5KFK6InhRntk1OD72FeqJaOf
PvcbWxB9kMEJf7m4Gb323BMooeWyoDW43sbt5V4i6hdZbgpjxeqrNNUzn3XmwNwn
eMqrstlPvBRzYa59JOpqvXQWBDWNt5jAPTXInOC4wbI4ypm1QaKTyBOd1JjywHhB
WOnEnoC8MbnzTp54HcD9E6JXPrILv9jowpVifU1c6wFDjs1UC3YhFxq530ch6/Xh
8jvRHWgUfMRApvERuVatw3HRZgvNpBSgGudyKgADU29K4AJwscj7V/Kz7kcqrbv/
7NK/QxoNrwcZMbnqqrmIJXZP+rIsZb1mZ0msvxJDoZ/beUo6VrHr1z8AgQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNq3teDxmDFD8gXO+fAyLM2FGKIvMB8GA1UdIwQY
MBaAFFsdIotqy9GAPP9WD6S0L4MtKDJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMt
NjE4ZTg5YjEyYzQxLzEvMnJlMTRQR1lNVVB5QmM3NThESXN6WVVZb2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMtNjE4ZTg5YjEyYzQx
LzEvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHANq4D
BADANrAwDQYJKoZIhvcNAQELBQADggEBAITDoOwFnUQt/smaz7fxVLjDXZgvSCsj
aLmJoXRsv2+1LUUEc9oEVbgFGWUP9HgQlvZp+ObrfBLLiekHhvMI9ehxoDf2cd20
tdlSV7Y9GTQsCU93DcugafbDn3/jouj5d7+f1x4KkmasRbr8ltoJrJTntY4nSj6p
N/+cw8I7ND9oNr1RSh0PmcxrjKPkTgNY7mo7psi/6P1AbAVG/i8wlz9g7yQRtp9s
3Nkhulg416Ol4zmP5YTUQFnDMG3iMyFpqGOP8bNlVHXeq673izIRcu8aDvF+keLN
yANZ9HkDBl0H9ovdje+VeyRkTjHpSpCijIcC/4Ktm13vfvc0V4lh8Vg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:08 2024 by rpki-client on console-ams.rpki-client.org