Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/UHQWep-59wsKN4yUXBTxgMO_wkA.roa
File: UHQWep-59wsKN4yUXBTxgMO_wkA.roa (raw, json)
Hash identifier: HIYs6Gva14r5RHI6zFqlrEYJe7KYudmQZJm82XXlzG0=
Subject key identifier: 50:74:16:7A:9F:B9:F7:0B:0A:37:8C:94:5C:14:F1:80:C3:BF:C2:40
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01857094E7446B585ECD2CE64687DD4F7188
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/UHQWep-59wsKN4yUXBTxgMO_wkA.roa
Signing time: Mon 02 Jan 2023 03:44:44 +0000
ROA not before: Mon 02 Jan 2023 03:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48095
IP address blocks: 194.4.168.0/23 maxlen: 23
194.4.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e7:44:6b:58:5e:cd:2c:e6:46:87:dd:4f:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jan 2 03:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5074167a9fb9f70b0a378c945c14f180c3bfc240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:f7:5a:2d:9c:d4:71:3b:29:19:da:36:ec:
b8:55:e2:3b:e3:65:f4:e6:ac:e0:6b:3d:7f:2d:af:
ac:9f:10:f8:a9:79:5c:5d:71:4e:7f:39:36:dd:7c:
10:f4:84:fe:39:cd:f7:6d:fc:c7:8c:99:2b:4e:09:
f0:82:0c:80:3f:76:75:29:20:b7:51:e2:47:f2:9b:
57:9b:a7:10:31:1c:1e:72:f6:a9:a7:0f:45:4f:8d:
60:83:46:f3:ee:2b:33:84:f0:3c:20:53:19:6b:46:
26:74:47:d6:24:e3:6a:75:74:44:93:09:95:41:2e:
09:ef:d5:86:71:bf:61:02:da:a9:62:e5:e8:2d:97:
ef:8a:4d:01:b7:77:f1:b6:60:26:67:ac:82:af:d6:
ce:47:3d:79:03:8e:70:fa:53:88:16:d3:3d:5d:25:
19:6b:a1:d8:76:18:52:59:89:e3:a5:da:8b:95:32:
26:a6:a1:13:59:05:f6:50:c9:bc:5b:63:1c:c8:77:
47:8e:35:93:43:83:58:7b:68:9c:72:b3:e5:36:bd:
10:bc:59:86:7a:c0:f1:46:ba:42:f8:c6:84:61:60:
72:45:f7:ea:c8:d7:d8:f2:e7:50:2c:de:2b:e0:1f:
0a:b2:a5:96:1e:a5:a0:6f:9b:44:fa:32:91:67:18:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:16:7A:9F:B9:F7:0B:0A:37:8C:94:5C:14:F1:80:C3:BF:C2:40
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/UHQWep-59wsKN4yUXBTxgMO_wkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.168.0/22
Signature Algorithm: sha256WithRSAEncryption
76:bb:2c:c7:63:b6:56:64:b0:d9:c6:c1:bf:2c:65:80:d2:ff:
73:07:c7:c2:41:ad:24:0d:8d:5a:30:db:87:66:ba:30:4c:80:
c0:76:b0:19:0d:3b:bf:44:b8:74:87:ac:66:48:44:bd:02:56:
e6:00:c7:41:85:93:8d:ec:9f:e3:9f:af:fc:ed:5d:3f:40:c5:
dc:36:a3:3f:65:ae:dc:cf:df:72:be:6d:23:f8:d3:2d:8d:60:
d8:60:74:cd:42:b7:eb:41:bc:ed:29:d8:7c:17:96:71:e2:ac:
04:eb:48:d6:7c:5d:7e:b8:f0:83:51:06:e7:bf:bd:5c:92:05:
33:0e:f8:04:1d:ea:c2:88:a4:dd:5b:6f:ca:0f:ed:eb:c0:04:
fa:d2:26:27:0d:cb:7f:3b:16:ab:2a:9c:9d:1f:98:ba:ed:60:
da:eb:da:e1:12:0d:2d:ca:a2:07:80:ab:1c:e6:8e:e2:20:b3:
e7:7f:c3:75:d8:07:f8:0c:1b:47:0f:4d:18:6d:2f:23:78:bb:
93:86:fa:a3:69:db:ac:1f:03:61:d7:9e:06:5b:ce:22:0f:c8:
a1:9b:42:36:2d:fe:11:ce:c8:2e:db:a4:65:f8:2b:18:28:85:
a6:72:b5:b5:89:15:5c:55:70:2a:94:82:1e:e9:e6:a7:c7:22:
2c:b7:90:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlOdEa1hezSzmRofdT3GIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjMwMTAyMDM0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDc0MTY3YTlmYjlmNzBiMGEzNzhjOTQ1YzE0ZjE4MGMzYmZjMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqX3Wi2c1HE7KRnaNuy4VeI742X0
5qzgaz1/La+snxD4qXlcXXFOfzk23XwQ9IT+Oc33bfzHjJkrTgnwggyAP3Z1KSC3
UeJH8ptXm6cQMRwecvappw9FT41gg0bz7iszhPA8IFMZa0YmdEfWJONqdXREkwmV
QS4J79WGcb9hAtqpYuXoLZfvik0Bt3fxtmAmZ6yCr9bORz15A45w+lOIFtM9XSUZ
a6HYdhhSWYnjpdqLlTImpqETWQX2UMm8W2McyHdHjjWTQ4NYe2iccrPlNr0QvFmG
esDxRrpC+MaEYWByRffqyNfY8udQLN4r4B8KsqWWHqWgb5tE+jKRZxjeOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFB0FnqfufcLCjeMlFwU8YDDv8JAMB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEvVUhRV2VwLTU5d3NLTjR5VVhCVHhnTU9fd2tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgSoMA0G
CSqGSIb3DQEBCwUAA4IBAQB2uyzHY7ZWZLDZxsG/LGWA0v9zB8fCQa0kDY1aMNuH
ZrowTIDAdrAZDTu/RLh0h6xmSES9AlbmAMdBhZON7J/jn6/87V0/QMXcNqM/Za7c
z99yvm0j+NMtjWDYYHTNQrfrQbztKdh8F5Zx4qwE60jWfF1+uPCDUQbnv71ckgUz
DvgEHerCiKTdW2/KD+3rwAT60iYnDct/OxarKpydH5i67WDa69rhEg0tyqIHgKsc
5o7iILPnf8N12Af4DBtHD00YbS8jeLuThvqjadusHwNh154GW84iD8ihm0I2Lf4R
zsgu26Rl+CsYKIWmcrW1iRVcVXAqlIIe6eanxyIst5CV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:10 2024 by rpki-client on console-ams.rpki-client.org