Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/UH3HnB7q-QYqMjF2wiy-OYkNKjk.roa
File: UH3HnB7q-QYqMjF2wiy-OYkNKjk.roa (raw, json)
Hash identifier: /4GpUymk51zkcx9/PqybNLL68C9c8YjWE1a2tW4QVXI=
Subject key identifier: 50:7D:C7:9C:1E:EA:F9:06:2A:32:31:76:C2:2C:BE:39:89:0D:2A:39
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01856FA6F03C552D3C626642C9F2F89D89B9
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/UH3HnB7q-QYqMjF2wiy-OYkNKjk.roa
Signing time: Sun 01 Jan 2023 23:24:49 +0000
ROA not before: Sun 01 Jan 2023 23:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61208
IP address blocks: 178.175.154.0/23 maxlen: 24
178.175.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f0:3c:55:2d:3c:62:66:42:c9:f2:f8:9d:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 23:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=507dc79c1eeaf9062a323176c22cbe39890d2a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:c6:f8:6d:00:35:ff:96:30:05:07:95:be:
0e:ee:a6:ac:6e:54:e0:d7:a7:f0:f6:2d:1f:16:51:
30:31:d9:8d:2c:2d:48:54:27:48:e6:30:4e:b2:22:
ef:7a:61:c8:a7:37:7d:9d:4d:d9:9b:e2:d5:4c:bf:
e5:f0:79:af:2d:31:8e:95:15:dc:1d:ff:61:f6:cd:
ac:9b:4c:42:72:a2:ef:d1:e9:92:7f:d8:6d:84:d9:
a5:a4:7b:5a:1d:7a:6a:38:00:80:48:aa:d7:99:91:
55:63:60:dc:77:6c:06:33:37:c2:a8:0d:03:26:75:
5e:e1:4d:81:9a:07:e9:28:f8:39:35:63:74:db:c5:
89:8b:1f:92:77:54:60:d4:e2:5b:bc:b9:be:32:a7:
f2:83:c5:f5:5b:2e:bc:9c:7f:7d:1b:92:7b:74:92:
c5:94:08:71:67:34:73:be:c7:db:e9:c5:61:62:a3:
03:09:86:6a:97:a9:d5:2b:c9:f1:01:0e:d0:0b:0e:
c8:3b:df:d5:28:5b:bf:44:b7:62:52:f8:74:7d:f0:
e9:1b:e7:1b:d8:cb:9a:d8:86:ac:52:5b:fa:39:19:
da:d4:5b:18:57:b4:65:35:7f:06:76:31:84:63:93:
85:9f:b7:d3:8d:a6:91:ff:62:c1:aa:08:15:84:94:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:C7:9C:1E:EA:F9:06:2A:32:31:76:C2:2C:BE:39:89:0D:2A:39
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/UH3HnB7q-QYqMjF2wiy-OYkNKjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.154.0/23
178.175.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:31:8e:b0:6e:fc:e3:c7:df:34:d1:08:68:99:7e:67:e3:6e:
1c:00:15:b0:15:de:40:13:64:0e:13:fb:32:e5:bb:11:ff:8a:
5e:e0:5c:24:e4:33:73:25:da:d9:13:0f:72:ce:4a:f6:60:29:
48:64:3b:f6:06:83:29:33:14:ab:c0:f5:f8:7f:40:fe:7a:e7:
8d:89:a3:74:ff:42:9a:78:eb:5f:41:0a:85:45:5c:e4:22:8e:
81:6a:08:ca:80:27:21:06:cb:ad:b9:c5:ba:25:0f:a0:39:03:
14:c8:a5:29:71:6e:f9:26:97:fd:5f:62:e1:01:22:b5:9c:e2:
3c:a5:f1:1a:1d:d3:bd:e2:80:cf:4e:a1:d9:e6:a7:49:7e:04:
78:03:e1:3e:67:66:a6:fb:c2:0c:46:6e:ea:2d:56:8a:3c:9b:
ce:75:b1:ef:9d:1f:ae:a6:26:48:c8:a7:c6:eb:ef:38:4a:e0:
65:75:a2:e6:1a:2e:0e:09:31:d0:c5:a7:05:0e:57:fb:e7:95:
ef:d4:18:00:d8:cc:83:0b:06:6f:aa:f6:7e:85:ef:d7:98:3f:
f7:b2:ba:05:7d:23:81:0a:7a:30:4e:d7:e2:aa:28:6e:8a:85:
73:c4:52:14:39:43:d2:b5:5e:5e:80:f3:dc:bb:b7:85:e6:c6:
7a:e4:60:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvpvA8VS08YmZCyfL4nYm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjMwMTAxMjMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDdkYzc5YzFlZWFmOTA2MmEzMjMxNzZjMjJjYmUzOTg5MGQyYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjinG+G0ANf+WMAUHlb4O7qasblTg
16fw9i0fFlEwMdmNLC1IVCdI5jBOsiLvemHIpzd9nU3Zm+LVTL/l8HmvLTGOlRXc
Hf9h9s2sm0xCcqLv0emSf9hthNmlpHtaHXpqOACASKrXmZFVY2Dcd2wGMzfCqA0D
JnVe4U2BmgfpKPg5NWN028WJix+Sd1Rg1OJbvLm+Mqfyg8X1Wy68nH99G5J7dJLF
lAhxZzRzvsfb6cVhYqMDCYZql6nVK8nxAQ7QCw7IO9/VKFu/RLdiUvh0ffDpG+cb
2Mua2IasUlv6ORna1FsYV7RlNX8GdjGEY5OFn7fTjaaR/2LBqggVhJSjsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFB9x5we6vkGKjIxdsIsvjmJDSo5MB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvVUgzSG5CN3EtUVlxTWpGMndpeS1PWWtOS2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsq+aAwQC
sq+oMA0GCSqGSIb3DQEBCwUAA4IBAQCbMY6wbvzjx9800QhomX5n424cABWwFd5A
E2QOE/sy5bsR/4pe4Fwk5DNzJdrZEw9yzkr2YClIZDv2BoMpMxSrwPX4f0D+eueN
iaN0/0KaeOtfQQqFRVzkIo6BagjKgCchBsutucW6JQ+gOQMUyKUpcW75Jpf9X2Lh
ASK1nOI8pfEaHdO94oDPTqHZ5qdJfgR4A+E+Z2am+8IMRm7qLVaKPJvOdbHvnR+u
piZIyKfG6+84SuBldaLmGi4OCTHQxacFDlf755Xv1BgA2MyDCwZvqvZ+he/XmD/3
sroFfSOBCnowTtfiqihuioVzxFIUOUPStV5egPPcu7eF5sZ65GBV
-----END CERTIFICATE-----
Generated at Fri Jul 28 14:32:50 2023 by rpki-client on console-ams.rpki-client.org