Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/J4OOamBatodwTyPQgdlGskWhWTo.roa
File: J4OOamBatodwTyPQgdlGskWhWTo.roa (raw, json)
Hash identifier: 5Cx2p6KHRCPHDFPgpgvUBZk7ehWmYz42tJzAfaRt9zo=
Subject key identifier: 27:83:8E:6A:60:5A:B6:87:70:4F:23:D0:81:D9:46:B2:45:A1:59:3A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F0251129EAC829E4734F370B378018D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/J4OOamBatodwTyPQgdlGskWhWTo.roa
Signing time: Sun 01 Jan 2023 20:25:00 +0000
ROA not before: Sun 01 Jan 2023 20:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205625
IP address blocks: 159.148.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:51:12:9e:ac:82:9e:47:34:f3:70:b3:78:01:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27838e6a605ab687704f23d081d946b245a1593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:ec:7f:fa:79:b8:96:7d:c7:73:af:e7:18:
6f:55:e9:fe:44:46:0f:6d:15:a3:32:35:5c:fe:1e:
1f:40:c6:6c:61:9e:eb:07:31:1e:26:be:c7:df:aa:
cd:c8:e7:cd:d2:a3:1e:71:3d:aa:ec:c5:52:17:0e:
7d:01:5c:5f:f3:b0:94:23:09:e8:8e:b3:07:9b:80:
f6:41:2a:73:b1:56:40:59:ea:56:7e:75:fb:7c:19:
2a:53:54:ec:34:d0:9c:77:32:07:46:15:fd:aa:be:
c2:6b:30:d0:44:31:d3:9a:47:7b:66:f3:c9:4e:5b:
cc:1e:59:f5:b1:0f:11:e8:e0:48:18:61:97:88:06:
5a:d5:0d:6c:d1:4f:e7:55:11:9a:d3:85:49:d6:d8:
06:d2:b3:66:24:a4:b5:17:25:b3:c2:1f:9a:2a:69:
08:0a:fd:41:f6:a5:2c:bd:3b:a2:9b:a5:97:8c:35:
7d:be:f1:00:b6:f3:f2:2e:cb:48:92:f6:ca:5f:ec:
fb:23:db:75:da:93:3e:e1:21:91:57:84:c0:0d:f7:
45:3f:5d:53:69:27:ec:d9:4c:48:5a:9e:a6:8a:32:
6d:f6:62:db:bd:3e:11:f2:a6:64:50:97:a9:14:9e:
5a:c3:e4:f0:cd:8a:0a:3a:b4:55:cd:32:e9:b2:27:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:8E:6A:60:5A:B6:87:70:4F:23:D0:81:D9:46:B2:45:A1:59:3A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/J4OOamBatodwTyPQgdlGskWhWTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.44.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c7:3d:3f:f2:f8:b8:bc:50:c5:5b:f4:1f:c4:ac:e5:c4:65:
5b:2a:65:0c:de:95:da:3d:8d:e2:26:8b:5c:40:91:56:2e:32:
b3:04:3e:36:49:02:39:c3:d3:5c:d7:6a:f6:25:25:cb:27:7c:
69:42:64:dc:08:eb:dd:95:59:0e:29:c6:56:32:9c:56:34:b8:
aa:c1:f7:a3:ff:7d:cb:59:65:4f:cc:cc:af:3e:73:20:64:44:
b4:f8:e0:9f:0e:be:97:0a:e9:b2:53:d1:39:74:36:d6:6c:b9:
a3:f9:f4:ca:18:80:f4:a2:a2:a2:d9:9f:8c:4d:3d:2e:f0:63:
1b:f3:78:3e:76:69:06:15:fa:1f:d7:01:f8:79:c0:1b:81:67:
99:c6:d4:32:fd:8f:46:c0:82:b8:31:fb:51:f3:c5:79:38:a0:
52:9a:23:31:f4:5a:f8:17:fb:df:6f:13:59:ea:74:ee:e7:1c:
e6:ec:6d:1a:3e:26:4f:ba:dd:13:0a:81:99:08:35:d7:e5:ad:
d2:6d:f0:60:41:39:46:0e:52:b3:25:aa:ce:cf:4e:31:f5:f3:
3d:c8:c4:a2:04:19:1b:82:86:a7:51:a0:8d:de:03:ef:6f:79:
f9:80:1d:4c:31:06:6e:b1:a6:4a:3b:4d:b4:a1:06:b3:15:d3:
fc:f0:c8:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAlESnqyCnkc083CzeAGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzgzOGU2YTYwNWFiNjg3NzA0ZjIzZDA4MWQ5NDZiMjQ1YTE1OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSbsf/p5uJZ9x3Ov5xhvVen+REYP
bRWjMjVc/h4fQMZsYZ7rBzEeJr7H36rNyOfN0qMecT2q7MVSFw59AVxf87CUIwno
jrMHm4D2QSpzsVZAWepWfnX7fBkqU1TsNNCcdzIHRhX9qr7CazDQRDHTmkd7ZvPJ
TlvMHln1sQ8R6OBIGGGXiAZa1Q1s0U/nVRGa04VJ1tgG0rNmJKS1FyWzwh+aKmkI
Cv1B9qUsvTuim6WXjDV9vvEAtvPyLstIkvbKX+z7I9t12pM+4SGRV4TADfdFP11T
aSfs2UxIWp6mijJt9mLbvT4R8qZkUJepFJ5aw+TwzYoKOrRVzTLpsidzYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCeDjmpgWraHcE8j0IHZRrJFoVk6MB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvSjRPT2FtQmF0b2R3VHlQUWdkbEdza1doV1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5QsMA0G
CSqGSIb3DQEBCwUAA4IBAQAkxz0/8vi4vFDFW/QfxKzlxGVbKmUM3pXaPY3iJotc
QJFWLjKzBD42SQI5w9Nc12r2JSXLJ3xpQmTcCOvdlVkOKcZWMpxWNLiqwfej/33L
WWVPzMyvPnMgZES0+OCfDr6XCumyU9E5dDbWbLmj+fTKGID0oqKi2Z+MTT0u8GMb
83g+dmkGFfof1wH4ecAbgWeZxtQy/Y9GwIK4MftR88V5OKBSmiMx9Fr4F/vfbxNZ
6nTu5xzm7G0aPiZPut0TCoGZCDXX5a3SbfBgQTlGDlKzJarOz04x9fM9yMSiBBkb
goanUaCN3gPvb3n5gB1MMQZusaZKO020oQazFdP88Mgs
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org