Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5rCJQlzEDm6Jy72av66LMLr7fu4.roa
File: 5rCJQlzEDm6Jy72av66LMLr7fu4.roa (raw, json)
Hash identifier: U94U0ltQ0t0dvSRWrWDEGd9qYyQMfof4NiH/1Q8810s=
Subject key identifier: E6:B0:89:42:5C:C4:0E:6E:89:CB:BD:9A:BF:AE:8B:30:BA:FB:7E:EE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189629F93B624F07DB9474A8AE6CC53DBAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5rCJQlzEDm6Jy72av66LMLr7fu4.roa
Signing time: Mon 17 Jul 2023 06:52:52 +0000
ROA not before: Mon 17 Jul 2023 06:52:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 178.215.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:9f:93:b6:24:f0:7d:b9:47:4a:8a:e6:cc:53:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 06:52:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b089425cc40e6e89cbbd9abfae8b30bafb7eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:54:b4:57:90:c0:32:f8:34:22:7c:73:ea:
dc:82:02:03:7f:a3:32:e7:5e:63:be:d5:ea:4b:7a:
57:6e:80:ea:30:16:63:e3:09:91:bd:43:be:d3:77:
06:17:da:7d:e9:02:00:c5:f1:3c:ab:2e:04:28:6c:
11:59:ce:0d:32:ec:5b:b7:82:d7:79:b0:eb:fb:f1:
7b:26:ed:2a:7c:84:79:22:cc:1e:93:bf:37:55:66:
81:d5:ac:46:ae:c3:7f:3f:be:6f:12:f2:15:b8:e6:
6e:33:be:1f:85:56:96:c4:39:15:da:c5:f7:3f:b8:
3b:95:e5:ca:47:45:2f:6e:bf:a6:fb:d1:9d:f1:0c:
30:9b:60:82:4a:fc:a9:1f:99:14:b4:16:34:4b:c6:
c6:2e:d0:3f:7d:78:c5:9a:bd:49:f1:41:a1:0a:e6:
5c:d0:d9:94:dd:6f:03:fc:0e:c2:8e:f7:27:b6:85:
ce:59:0e:ff:6d:91:b0:4d:9f:d5:5d:00:d8:54:c7:
b6:60:0f:78:53:1c:f8:d6:c1:ae:88:96:b4:d4:e6:
bb:a9:b0:bd:13:80:32:9e:ed:47:e3:83:8b:05:36:
cd:eb:53:9a:22:65:db:21:bb:bb:be:e1:b1:bd:50:
9d:db:52:74:23:5f:6f:ab:73:97:dc:67:00:92:d1:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:89:42:5C:C4:0E:6E:89:CB:BD:9A:BF:AE:8B:30:BA:FB:7E:EE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5rCJQlzEDm6Jy72av66LMLr7fu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7d:83:07:43:e6:23:35:cf:01:2d:89:85:8e:d3:d9:ca:b5:
b4:3d:f1:7f:19:78:31:69:e0:88:70:50:bc:fd:eb:df:db:00:
23:44:f2:e8:6d:2d:88:8f:0c:8c:78:9d:44:6b:48:37:df:ab:
50:d5:fd:9e:c2:2a:65:87:b0:e1:ca:da:a3:4b:f8:82:c7:3f:
b2:86:29:41:d5:f9:2c:10:7d:41:b1:ef:81:a7:32:da:34:9f:
db:23:12:23:7f:5f:bc:1a:69:38:93:60:da:0f:b2:93:79:9e:
c9:ec:15:76:a7:15:aa:f8:b1:cf:fa:39:45:bb:64:83:92:6f:
23:fc:fb:e9:19:bc:4d:9a:71:ed:36:da:5d:b9:7f:7e:b3:9e:
af:70:82:bb:ce:e1:a6:f3:a7:70:40:54:d3:80:45:8c:57:c5:
58:50:8e:99:6c:46:30:a8:ff:58:1f:10:4e:b4:fc:fc:63:41:
b3:cf:df:a0:4a:38:78:06:dd:28:29:68:4b:9f:10:71:41:a7:
d2:fc:8a:c5:1d:fd:22:61:5d:34:03:38:98:62:26:b9:2d:5c:
06:67:a6:69:0c:18:82:97:d9:9e:38:54:ec:0a:6b:90:27:4f:
b8:de:6d:b3:a9:9b:89:97:09:94:43:52:f4:1c:52:db:f3:47:
92:07:97:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlin5O2JPB9uUdKiubMU9utMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNzE3MDY1MjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIwODk0MjVjYzQwZTZlODljYmJkOWFiZmFlOGIzMGJhZmI3ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwdUtFeQwDL4NCJ8c+rcggIDf6My
515jvtXqS3pXboDqMBZj4wmRvUO+03cGF9p96QIAxfE8qy4EKGwRWc4NMuxbt4LX
ebDr+/F7Ju0qfIR5Iswek783VWaB1axGrsN/P75vEvIVuOZuM74fhVaWxDkV2sX3
P7g7leXKR0Uvbr+m+9Gd8Qwwm2CCSvypH5kUtBY0S8bGLtA/fXjFmr1J8UGhCuZc
0NmU3W8D/A7CjvcntoXOWQ7/bZGwTZ/VXQDYVMe2YA94Uxz41sGuiJa01Oa7qbC9
E4Aynu1H44OLBTbN61OaImXbIbu7vuGxvVCd21J0I19vq3OX3GcAktHivwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOawiUJcxA5uicu9mr+uizC6+37uMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNXJDSlFsekVEbTZKeTcyYXY2NkxNTHI3ZnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstfgMA0G
CSqGSIb3DQEBCwUAA4IBAQAffYMHQ+YjNc8BLYmFjtPZyrW0PfF/GXgxaeCIcFC8
/evf2wAjRPLobS2IjwyMeJ1Ea0g336tQ1f2ewiplh7DhytqjS/iCxz+yhilB1fks
EH1Bse+BpzLaNJ/bIxIjf1+8Gmk4k2DaD7KTeZ7J7BV2pxWq+LHP+jlFu2SDkm8j
/PvpGbxNmnHtNtpduX9+s56vcIK7zuGm86dwQFTTgEWMV8VYUI6ZbEYwqP9YHxBO
tPz8Y0Gzz9+gSjh4Bt0oKWhLnxBxQafS/IrFHf0iYV00AziYYia5LVwGZ6ZpDBiC
l9meOFTsCmuQJ0+43m2zqZuJlwmUQ1L0HFLb80eSB5cP
-----END CERTIFICATE-----
Generated at Tue Jul 25 08:18:33 2023 by rpki-client on console-ams.rpki-client.org