Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Qp-2gPIR3JDVy4Mc42BfIDWBDAU.roa
File: Qp-2gPIR3JDVy4Mc42BfIDWBDAU.roa (raw, json)
Hash identifier: ttuKg6/stzEBt/LD4t8JBBcv0RippF+lC1NIxQFYu3Y=
Subject key identifier: 42:9F:B6:80:F2:11:DC:90:D5:CB:83:1C:E3:60:5F:20:35:81:0C:05
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01856FA6EB0B62CC5A16D604AFA103CC9467
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Qp-2gPIR3JDVy4Mc42BfIDWBDAU.roa
Signing time: Sun 01 Jan 2023 23:24:48 +0000
ROA not before: Sun 01 Jan 2023 23:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31252
IP address blocks: 178.175.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:eb:0b:62:cc:5a:16:d6:04:af:a1:03:cc:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 23:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=429fb680f211dc90d5cb831ce3605f2035810c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:dd:cb:9e:dc:48:bb:ac:2a:ed:d6:c0:b4:
00:05:c3:22:92:05:52:a8:cd:55:e3:c0:15:5f:f7:
41:b7:a5:a4:e7:8a:f8:3a:73:22:a3:e3:76:5e:87:
1b:bc:77:e5:71:37:fa:a6:fd:f7:d8:e9:4a:2e:0c:
f6:b4:0b:b7:f4:bd:83:60:17:ef:b0:ca:3b:08:f6:
7e:0b:69:e0:f8:93:37:52:4a:31:de:8a:68:d2:b5:
13:c4:c5:fe:60:eb:19:31:d1:db:6b:b0:57:4f:9a:
52:0f:97:8b:49:72:9c:d9:dd:8e:36:76:ae:70:9c:
3b:6c:74:ab:2e:9b:08:c2:b9:42:76:d2:73:49:8d:
79:ba:e6:9d:b5:5e:59:27:02:dd:e1:be:b7:ee:14:
c2:9f:51:83:e3:1c:3b:35:41:fb:ab:b5:3b:f6:10:
31:b6:79:a9:47:fb:ba:ca:26:7e:ec:b6:29:de:ff:
d9:6a:1c:77:71:ce:89:68:ee:98:48:85:ea:f5:68:
48:e6:36:20:45:bc:35:41:e7:89:83:85:f6:00:82:
42:9b:c9:a5:88:10:f3:3d:d5:ec:85:03:44:58:34:
55:66:4e:96:81:b5:6b:c3:d2:fc:95:ad:b7:44:71:
34:4d:27:45:4f:ae:34:62:98:20:a8:29:8b:5b:90:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:B6:80:F2:11:DC:90:D5:CB:83:1C:E3:60:5F:20:35:81:0C:05
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Qp-2gPIR3JDVy4Mc42BfIDWBDAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.153.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3c:e7:28:b0:cb:82:60:25:05:e6:33:37:de:84:b1:0e:1c:
fa:17:d9:b8:53:a3:21:07:4c:24:f9:97:6c:d0:09:fd:3d:79:
17:9b:6a:51:0d:07:7b:8c:24:b9:51:0e:d5:da:6f:cc:27:d1:
98:f9:a6:7a:5d:df:09:e0:b6:24:65:31:cf:d8:ea:99:e6:7a:
94:82:7c:46:1f:ff:76:12:98:5f:ab:0e:6c:eb:1e:11:08:66:
25:bb:5a:bf:e4:f1:40:7b:06:45:5c:b0:a5:bc:d2:d1:41:3b:
af:63:a0:74:f4:c7:c9:b9:db:ca:1d:5d:1e:91:bd:60:08:c8:
2a:0f:3d:b1:4e:10:d7:21:5b:60:8a:ef:12:70:24:3a:12:a1:
5b:a6:7d:39:78:ef:97:47:02:5b:0e:cd:7e:ed:62:7d:99:8c:
01:d4:f7:c3:26:ea:69:f1:63:b5:d1:c1:33:d7:7d:12:e0:95:
16:43:55:23:1e:a2:09:b8:69:76:66:ef:1e:30:e2:f6:64:7c:
12:5b:e6:9d:33:57:71:93:d2:83:2f:5f:84:33:ca:ea:1e:b3:
46:e5:3e:a6:e9:9f:19:e5:29:df:7c:d3:52:96:c3:8a:fc:9a:
2b:fa:87:b4:6c:5a:23:0e:c7:21:7d:bb:cb:fc:65:a0:12:48:
ea:8a:bb:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpusLYsxaFtYEr6EDzJRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjMwMTAxMjMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjlmYjY4MGYyMTFkYzkwZDVjYjgzMWNlMzYwNWYyMDM1ODEwYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN3dy57cSLusKu3WwLQABcMikgVS
qM1V48AVX/dBt6Wk54r4OnMio+N2XocbvHflcTf6pv332OlKLgz2tAu39L2DYBfv
sMo7CPZ+C2ng+JM3Ukox3opo0rUTxMX+YOsZMdHba7BXT5pSD5eLSXKc2d2ONnau
cJw7bHSrLpsIwrlCdtJzSY15uuadtV5ZJwLd4b637hTCn1GD4xw7NUH7q7U79hAx
tnmpR/u6yiZ+7LYp3v/Zahx3cc6JaO6YSIXq9WhI5jYgRbw1QeeJg4X2AIJCm8ml
iBDzPdXshQNEWDRVZk6WgbVrw9L8la23RHE0TSdFT640YpggqCmLW5DRHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKftoDyEdyQ1cuDHONgXyA1gQwFMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvUXAtMmdQSVIzSkRWeTRNYzQyQmZJRFdCREFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBUPOcosMuCYCUF5jM33oSxDhz6F9m4U6MhB0wk+Zds
0An9PXkXm2pRDQd7jCS5UQ7V2m/MJ9GY+aZ6Xd8J4LYkZTHP2OqZ5nqUgnxGH/92
Ephfqw5s6x4RCGYlu1q/5PFAewZFXLClvNLRQTuvY6B09MfJudvKHV0ekb1gCMgq
Dz2xThDXIVtgiu8ScCQ6EqFbpn05eO+XRwJbDs1+7WJ9mYwB1PfDJupp8WO10cEz
130S4JUWQ1UjHqIJuGl2Zu8eMOL2ZHwSW+adM1dxk9KDL1+EM8rqHrNG5T6m6Z8Z
5SnffNNSlsOK/Jor+oe0bFojDschfbvL/GWgEkjqirs9
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:33 2024 by rpki-client on console-ams.rpki-client.org