Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/UjkXjjquqgI1dmyFdGXeBc89oDY.roa
File: UjkXjjquqgI1dmyFdGXeBc89oDY.roa (raw, json)
Hash identifier: U9QmsyMoS2cnuTRGiAx5aercHYgLUYguDtfvBQ0wR/c=
Subject key identifier: 52:39:17:8E:3A:AE:AA:02:35:76:6C:85:74:65:DE:05:CF:3D:A0:36
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 018570D50E4B128073119B74DBD25B525288
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/UjkXjjquqgI1dmyFdGXeBc89oDY.roa
Signing time: Mon 02 Jan 2023 04:54:49 +0000
ROA not before: Mon 02 Jan 2023 04:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 786
IP address blocks: 149.153.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:0e:4b:12:80:73:11:9b:74:db:d2:5b:52:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Jan 2 04:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5239178e3aaeaa0235766c857465de05cf3da036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:4b:1f:0f:a3:27:ce:f4:bc:51:ba:d5:a6:
9d:c4:af:cd:9c:57:ac:68:f4:43:46:3d:9e:5e:70:
7f:dd:a4:01:85:ee:bf:7c:24:16:ca:07:9a:c2:d4:
5d:9b:a4:ba:a0:8b:94:bb:68:34:4c:ba:b7:5e:19:
71:75:b0:0d:75:a1:87:d8:4b:f6:11:0c:03:10:04:
9a:1b:15:db:eb:99:0c:4e:2d:35:59:41:ae:73:bd:
71:24:77:20:95:2b:b6:12:63:3a:66:ff:38:c3:cc:
b4:05:32:6b:b9:8c:d0:31:24:e2:3b:74:b3:f8:94:
9d:33:83:02:ca:ae:f6:dc:ef:40:12:58:2d:91:15:
2a:79:47:59:29:ff:e2:6c:40:27:ea:fb:84:42:d0:
38:38:a4:69:d3:80:38:56:dd:a1:5e:51:24:19:ae:
67:12:d0:2f:7a:7e:97:9f:c1:ee:2a:fe:94:40:b1:
af:95:21:7d:9e:c8:e8:19:10:ee:4d:95:78:5b:e1:
a9:66:86:74:66:81:53:19:b3:ad:fd:5b:50:b7:a1:
8c:f3:b4:4e:fb:8f:68:86:eb:7d:64:dc:c6:27:59:
02:32:d9:f7:ce:b5:53:ed:fc:5a:65:51:31:a3:6a:
e5:58:53:54:5e:1b:6f:2e:0d:88:3f:0b:c6:de:d8:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:17:8E:3A:AE:AA:02:35:76:6C:85:74:65:DE:05:CF:3D:A0:36
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/UjkXjjquqgI1dmyFdGXeBc89oDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:4d:0d:51:18:e1:6c:0f:09:45:3c:92:49:79:21:a6:72:83:
4c:0a:b6:06:31:89:89:c1:34:a1:71:d6:d8:dc:29:c8:13:01:
dd:11:36:58:98:13:10:34:cf:4c:b1:d1:48:41:7f:94:75:09:
d0:e0:97:cc:14:d7:6b:28:4c:4d:39:6c:2b:f8:24:29:5b:54:
a7:bb:0f:d7:b7:2e:3d:5d:c2:42:7a:c1:94:9e:44:4d:23:2d:
3f:b5:f0:46:d3:91:77:42:ef:6d:c8:71:af:5d:55:58:18:ec:
c2:bf:d6:13:d1:11:d5:55:6a:66:76:35:31:af:02:46:eb:58:
72:8a:05:7b:2c:42:49:6a:3d:bf:65:57:8b:9b:d8:66:86:2e:
b8:9f:cd:6e:08:b9:ae:71:fc:5f:5e:05:97:38:f2:be:48:09:
50:93:8d:fd:58:66:73:f4:85:fa:aa:2b:04:55:82:51:71:c4:
02:95:02:b7:70:12:30:1c:cd:98:67:a4:82:43:e3:e9:ab:96:
1e:e9:cc:ee:ad:a3:9e:fb:fc:fd:43:3f:9f:bb:23:91:fc:e3:
cb:13:00:21:1f:6c:f7:4e:10:0a:a3:a1:12:0d:bd:3b:e7:43:
f2:68:2f:40:9f:88:3e:ef:8b:75:0e:2f:7b:de:d4:49:9b:ed:
01:de:1f:09
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVw1Q5LEoBzEZt029JbUlKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTMzN2JkMWE3YzVlZTljNTdhNzNiMGEzM2M2MTIxOWNk
MmE5Y2IwHhcNMjMwMTAyMDQ1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjM5MTc4ZTNhYWVhYTAyMzU3NjZjODU3NDY1ZGUwNWNmM2RhMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZVLHw+jJ870vFG61aadxK/NnFes
aPRDRj2eXnB/3aQBhe6/fCQWygeawtRdm6S6oIuUu2g0TLq3XhlxdbANdaGH2Ev2
EQwDEASaGxXb65kMTi01WUGuc71xJHcglSu2EmM6Zv84w8y0BTJruYzQMSTiO3Sz
+JSdM4MCyq723O9AElgtkRUqeUdZKf/ibEAn6vuEQtA4OKRp04A4Vt2hXlEkGa5n
EtAven6Xn8HuKv6UQLGvlSF9nsjoGRDuTZV4W+GpZoZ0ZoFTGbOt/VtQt6GM87RO
+49ohut9ZNzGJ1kCMtn3zrVT7fxaZVExo2rlWFNUXhtvLg2IPwvG3thP/wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFI5F446rqoCNXZshXRl3gXPPaA2MB8GA1UdIwQY
MBaAFJtTN70afF7pxXpzsKM8YSGc0qnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQt
MmVmNzE2NWIyMWI1LzEvVWprWGpqcXVxZ0kxZG15RmRHWGVCYzg5b0RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQtMmVmNzE2NWIyMWI1
LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlZkwDQYJ
KoZIhvcNAQELBQADggEBAL5NDVEY4WwPCUU8kkl5IaZyg0wKtgYxiYnBNKFx1tjc
KcgTAd0RNliYExA0z0yx0UhBf5R1CdDgl8wU12soTE05bCv4JClbVKe7D9e3Lj1d
wkJ6wZSeRE0jLT+18EbTkXdC723Ica9dVVgY7MK/1hPREdVVamZ2NTGvAkbrWHKK
BXssQklqPb9lV4ub2GaGLrifzW4Iua5x/F9eBZc48r5ICVCTjf1YZnP0hfqqKwRV
glFxxAKVArdwEjAczZhnpIJD4+mrlh7pzO6to577/P1DP5+7I5H848sTACEfbPdO
EAqjoRINvTvnQ/JoL0CfiD7vi3UOL3ve1Emb7QHeHwk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org