Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/HEwmms-qLgo3Vcjt46kcjVPl2fs.roa
File: HEwmms-qLgo3Vcjt46kcjVPl2fs.roa (raw, json)
Hash identifier: BnKXkWVN4DeU6Aj7W/pXx3KybO8AahpG0rII7i0qoMA=
Subject key identifier: 1C:4C:26:9A:CF:AA:2E:0A:37:55:C8:ED:E3:A9:1C:8D:53:E5:D9:FB
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 018CAB714C7AD095E3174C5E03F56A13C892
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/HEwmms-qLgo3Vcjt46kcjVPl2fs.roa
Signing time: Wed 27 Dec 2023 13:22:58 +0000
ROA not before: Wed 27 Dec 2023 13:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.91.0/24 maxlen: 24
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Dec 2023 14:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:71:4c:7a:d0:95:e3:17:4c:5e:03:f5:6a:13:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Dec 27 13:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c4c269acfaa2e0a3755c8ede3a91c8d53e5d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:1b:e0:87:0e:8f:9a:6a:7a:84:71:c1:e6:
75:66:80:94:f3:b7:2b:2d:60:04:c8:05:72:88:50:
a6:f4:4a:a9:b8:99:f0:5d:f0:2f:5f:2f:4d:ef:0d:
cc:ad:80:3d:26:db:09:60:1c:44:4f:4c:d3:fb:51:
54:9e:5f:16:2e:2e:2e:e8:eb:17:c8:45:26:ae:4a:
05:ad:ef:cd:a8:d5:60:50:95:46:f2:43:a1:83:50:
a6:88:db:33:5c:dd:ab:42:13:d2:f3:15:6e:6f:7d:
85:37:47:a7:7c:34:70:d4:0d:11:6c:68:23:93:90:
e2:f3:3a:cd:e6:59:e6:d6:da:83:8e:5e:15:e7:60:
3e:cc:19:69:8c:28:76:71:1c:30:e2:4c:e2:c2:81:
4e:86:56:d9:c5:ca:fa:26:3e:d1:8f:99:55:8b:98:
9f:be:79:da:3a:aa:68:e3:a8:f3:23:98:61:59:6b:
75:13:38:59:8f:8c:c0:ab:6b:58:75:a5:f7:c8:61:
5e:29:90:f2:50:bb:0e:50:30:2f:71:cc:05:39:56:
6b:e3:be:5a:37:15:1d:5b:87:51:90:67:c1:29:02:
81:cd:3c:65:11:4f:34:98:f4:28:6b:b4:7a:12:6a:
d9:84:9b:83:bd:19:ad:09:4e:0d:05:ed:06:b7:1a:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:26:9A:CF:AA:2E:0A:37:55:C8:ED:E3:A9:1C:8D:53:E5:D9:FB
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/HEwmms-qLgo3Vcjt46kcjVPl2fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.91.0/24
IPv6:
2a09:2040:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
68:71:f8:e4:ce:8e:96:47:8f:e0:24:31:ed:90:7b:38:35:46:
86:ac:71:0d:af:31:be:e5:73:bd:bc:4f:45:97:34:22:30:55:
42:27:6a:ae:42:83:de:ca:b3:45:99:b4:5b:1a:31:02:d8:ad:
26:7f:b6:8f:a2:53:b4:31:56:ca:0b:52:1a:e6:73:3c:ce:38:
f5:6f:6a:c8:c8:e7:bf:12:2e:52:c9:00:94:4a:c8:09:e3:a2:
c3:d6:ff:76:62:02:cc:7c:9c:13:61:c7:22:49:79:51:c7:fd:
de:83:ba:76:42:71:81:0b:8e:b9:56:b4:a4:15:e9:61:55:9c:
aa:5c:75:ea:4c:61:75:b4:7e:37:b4:b5:72:ad:60:6f:4a:54:
38:71:3c:dd:da:92:0c:5f:4b:e0:7c:65:af:aa:f9:3c:a3:53:
71:29:d5:4d:6b:62:df:6c:83:93:c2:d3:9a:8a:3e:9e:ec:99:
ed:c7:4a:4e:3a:17:42:a3:13:1d:0e:91:70:78:b7:a9:63:8b:
d5:39:59:2f:63:6b:89:04:fc:62:fe:e4:4e:9d:ae:0f:ef:37:
1a:66:bc:fa:8b:cf:d4:cd:8f:76:61:bd:43:a5:0b:06:61:2d:
a1:58:5b:71:f0:75:1c:09:19:82:bb:9c:24:f4:5f:6b:14:63:
90:1b:45:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyrcUx60JXjF0xeA/VqE8iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw
Zjk1ZjIwHhcNMjMxMjI3MTMyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzRjMjY5YWNmYWEyZTBhMzc1NWM4ZWRlM2E5MWM4ZDUzZTVkOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzgb4IcOj5pqeoRxweZ1ZoCU87cr
LWAEyAVyiFCm9EqpuJnwXfAvXy9N7w3MrYA9JtsJYBxET0zT+1FUnl8WLi4u6OsX
yEUmrkoFre/NqNVgUJVG8kOhg1CmiNszXN2rQhPS8xVub32FN0enfDRw1A0RbGgj
k5Di8zrN5lnm1tqDjl4V52A+zBlpjCh2cRww4kziwoFOhlbZxcr6Jj7Rj5lVi5if
vnnaOqpo46jzI5hhWWt1EzhZj4zAq2tYdaX3yGFeKZDyULsOUDAvccwFOVZr475a
NxUdW4dRkGfBKQKBzTxlEU80mPQoa7R6EmrZhJuDvRmtCU4NBe0GtxphywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBxMJprPqi4KN1XI7eOpHI1T5dn7MB8GA1UdIwQY
MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct
M2JjYjhiZjhiYmZlLzEvSEV3bW1zLXFMZ28zVmNqdDQ2a2NqVlBsMmZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl
LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAk05bMA8E
AgACMAkDBwAqCSBA//8wDQYJKoZIhvcNAQELBQADggEBAGhx+OTOjpZHj+AkMe2Q
ezg1RoascQ2vMb7lc728T0WXNCIwVUInaq5Cg97Ks0WZtFsaMQLYrSZ/to+iU7Qx
VsoLUhrmczzOOPVvasjI578SLlLJAJRKyAnjosPW/3ZiAsx8nBNhxyJJeVHH/d6D
unZCcYELjrlWtKQV6WFVnKpcdepMYXW0fje0tXKtYG9KVDhxPN3akgxfS+B8Za+q
+TyjU3Ep1U1rYt9sg5PC05qKPp7sme3HSk46F0KjEx0OkXB4t6lji9U5WS9ja4kE
/GL+5E6drg/vNxpmvPqLz9TNj3ZhvUOlCwZhLaFYW3HwdRwJGYK7nCT0X2sUY5Ab
RfU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org