Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/M4hTih-quXEQyg8teh-fRRzQ6lo.roa
File: M4hTih-quXEQyg8teh-fRRzQ6lo.roa (raw, json)
Hash identifier: EdSktS/N5uhye5BaBpvdfsDwW9vpzXKTZnt9YBjd7Dc=
Subject key identifier: 33:88:53:8A:1F:AA:B9:71:10:CA:0F:2D:7A:1F:9F:45:1C:D0:EA:5A
Certificate issuer: /CN=5490631f0dffd05b0e046782807181d5e99a561e
Certificate serial: 01856F6FE55FAD9A9948208B300A7871B746
Authority key identifier: 54:90:63:1F:0D:FF:D0:5B:0E:04:67:82:80:71:81:D5:E9:9A:56:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJBjHw3_0FsOBGeCgHGB1emaVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/M4hTih-quXEQyg8teh-fRRzQ6lo.roa
Signing time: Sun 01 Jan 2023 22:24:42 +0000
ROA not before: Sun 01 Jan 2023 22:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:e5:5f:ad:9a:99:48:20:8b:30:0a:78:71:b7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5490631f0dffd05b0e046782807181d5e99a561e
Validity
Not Before: Jan 1 22:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3388538a1faab97110ca0f2d7a1f9f451cd0ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:08:35:d5:e1:13:21:2e:d7:d7:39:02:c7:
10:98:cc:75:2a:c6:3c:15:ba:10:46:7a:db:98:d7:
dd:2c:b6:2f:64:3f:3f:1a:98:c5:ae:5c:a6:87:76:
09:44:cb:da:5d:22:e5:b3:ed:10:4d:1b:52:8a:64:
bd:08:53:82:f5:52:9e:97:8f:06:f0:99:c8:10:01:
1b:0a:71:c9:dc:64:20:ae:47:1a:06:11:93:17:4f:
25:cd:70:5d:fe:d9:dd:82:ef:f4:8d:dd:ac:66:85:
96:9e:7d:6a:0b:b2:ea:69:5a:cc:b1:6e:e8:7f:a4:
36:bb:d0:a3:e7:31:8b:4b:0d:4f:9f:6a:0f:6d:c0:
fa:e4:4c:24:d3:b0:9e:e8:38:b4:ed:e8:be:d1:a2:
f7:d1:a9:0d:d4:e0:61:82:6f:60:59:02:11:a5:98:
79:3f:ae:ed:da:55:a5:65:95:cb:8f:20:94:ce:84:
fe:b1:d2:39:8d:3b:3f:85:c2:1a:8c:c5:09:5b:42:
99:d3:53:6b:cb:e6:6f:36:28:43:5d:db:d8:66:b6:
32:03:a1:8b:b3:f8:04:86:f9:bb:f7:93:cf:18:4c:
ed:aa:9d:3c:1d:7a:8f:14:76:ad:9d:66:eb:2e:c4:
83:29:18:67:63:85:f6:d7:f0:39:a4:44:02:bb:3a:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:53:8A:1F:AA:B9:71:10:CA:0F:2D:7A:1F:9F:45:1C:D0:EA:5A
X509v3 Authority Key Identifier:
keyid:54:90:63:1F:0D:FF:D0:5B:0E:04:67:82:80:71:81:D5:E9:9A:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJBjHw3_0FsOBGeCgHGB1emaVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/M4hTih-quXEQyg8teh-fRRzQ6lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/VJBjHw3_0FsOBGeCgHGB1emaVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:23:f2:0e:ec:ce:6f:cb:7a:22:93:73:83:b9:8f:e6:c2:ee:
13:da:5b:1e:24:e0:4a:41:ab:53:f8:38:e9:69:a1:3a:8b:73:
83:74:2d:0a:06:ba:8c:cb:41:ad:07:2e:73:29:a4:06:1f:14:
b7:b7:ce:3d:15:e2:7b:43:a7:be:79:f3:69:f5:0b:d4:6c:4c:
3e:ac:00:75:75:a6:73:a9:b7:23:5c:12:ba:8c:08:17:99:b3:
f0:92:b9:5f:76:82:55:6e:0e:c7:44:15:25:b6:b3:1a:e9:25:
7a:03:29:13:33:23:12:fa:52:36:72:3e:71:52:c1:92:a0:07:
18:5e:e0:3c:42:68:39:ae:7c:5f:89:72:ed:7f:24:84:1e:77:
ef:f9:d1:84:88:eb:03:a3:44:de:28:3e:fb:ea:e9:ef:84:85:
aa:b8:48:77:c4:2b:bb:e2:65:7e:cc:0e:11:e8:a1:8e:ae:a5:
68:98:53:00:b4:db:ae:04:89:32:7b:e1:44:99:19:b3:45:1f:
fd:a5:b5:20:81:64:2b:fa:c6:fa:22:eb:00:e5:ff:38:88:5a:
fc:40:1c:9e:0a:58:2a:30:f4:7d:87:8c:10:9d:32:e2:cf:8d:
67:1f:7b:e6:e2:78:89:1d:41:c4:53:1e:b5:fd:a0:69:7a:2a:
2a:82:c3:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvb+VfrZqZSCCLMAp4cbdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTA2MzFmMGRmZmQwNWIwZTA0Njc4MjgwNzE4MWQ1ZTk5
YTU2MWUwHhcNMjMwMTAxMjIyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzg4NTM4YTFmYWFiOTcxMTBjYTBmMmQ3YTFmOWY0NTFjZDBlYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr0INdXhEyEu19c5AscQmMx1KsY8
FboQRnrbmNfdLLYvZD8/GpjFrlymh3YJRMvaXSLls+0QTRtSimS9CFOC9VKel48G
8JnIEAEbCnHJ3GQgrkcaBhGTF08lzXBd/tndgu/0jd2sZoWWnn1qC7LqaVrMsW7o
f6Q2u9Cj5zGLSw1Pn2oPbcD65Ewk07Ce6Di07ei+0aL30akN1OBhgm9gWQIRpZh5
P67t2lWlZZXLjyCUzoT+sdI5jTs/hcIajMUJW0KZ01Nry+ZvNihDXdvYZrYyA6GL
s/gEhvm795PPGEztqp08HXqPFHatnWbrLsSDKRhnY4X21/A5pEQCuzpsrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOIU4ofqrlxEMoPLXofn0Uc0OpaMB8GA1UdIwQY
MBaAFFSQYx8N/9BbDgRngoBxgdXpmlYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpCakh3M18wRnNPQkdlQ2dIR0IxZW1hVmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85MWZjMGMtNDI5Zi00N2JmLWE4ZmQt
MTExMTEyYTY0ZDllLzEvTTRoVGloLXF1WEVReWc4dGVoLWZSUnpRNmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85MWZjMGMtNDI5Zi00N2JmLWE4ZmQtMTExMTEyYTY0ZDll
LzEvVkpCakh3M18wRnNPQkdlQ2dIR0IxZW1hVmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOeMA0G
CSqGSIb3DQEBCwUAA4IBAQBNI/IO7M5vy3oik3ODuY/mwu4T2lseJOBKQatT+Djp
aaE6i3ODdC0KBrqMy0GtBy5zKaQGHxS3t849FeJ7Q6e+efNp9QvUbEw+rAB1daZz
qbcjXBK6jAgXmbPwkrlfdoJVbg7HRBUltrMa6SV6AykTMyMS+lI2cj5xUsGSoAcY
XuA8Qmg5rnxfiXLtfySEHnfv+dGEiOsDo0TeKD776unvhIWquEh3xCu74mV+zA4R
6KGOrqVomFMAtNuuBIkye+FEmRmzRR/9pbUggWQr+sb6IusA5f84iFr8QByeClgq
MPR9h4wQnTLiz41nH3vm4niJHUHEUx61/aBpeioqgsMh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org