Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/UC7r9y1csSYOotoTUc9uyGSGBcY.roa
File: UC7r9y1csSYOotoTUc9uyGSGBcY.roa (raw, json)
Hash identifier: tE2KwJYdkU3j94f+ZziExeSmpUuEeliVKChzq6iPrOQ=
Subject key identifier: 50:2E:EB:F7:2D:5C:B1:26:0E:A2:DA:13:51:CF:6E:C8:64:86:05:C6
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 01856D01B8165C33641E8D43E7C29F737A16
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/UC7r9y1csSYOotoTUc9uyGSGBcY.roa
Signing time: Sun 01 Jan 2023 11:05:07 +0000
ROA not before: Sun 01 Jan 2023 11:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47973
IP address blocks: 51.163.160.0/19 maxlen: 24
51.163.192.0/18 maxlen: 24
185.174.124.0/22 maxlen: 24
2a0b:9f00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b8:16:5c:33:64:1e:8d:43:e7:c2:9f:73:7a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Jan 1 11:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=502eebf72d5cb1260ea2da1351cf6ec8648605c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:97:ba:8f:c8:98:57:a0:0f:5d:20:d5:2b:
23:68:c8:f3:2c:47:0c:83:a4:cb:f3:b3:3c:3a:45:
6a:45:2c:6c:67:a4:0c:b8:35:90:bd:76:9d:07:b1:
58:8e:26:03:21:ac:fa:8e:d4:93:a0:96:dc:30:a6:
96:20:65:99:3c:a0:59:bf:21:4f:f9:32:09:1f:0d:
81:10:96:76:71:56:6c:33:be:78:da:6e:9b:0f:86:
a3:12:1a:c4:ac:f4:95:18:ae:ec:a8:6a:74:fa:14:
d7:78:c2:ff:7d:f6:f7:31:ba:0a:7a:0f:f4:f9:a8:
c6:93:c3:8b:e7:c9:25:fc:5d:1e:4f:61:b2:9a:63:
14:b1:79:a2:c7:41:ce:57:9f:e1:37:53:e9:cc:59:
ab:81:a3:10:93:10:42:4d:98:f8:38:06:70:bc:60:
11:b0:f9:23:4e:26:d7:1f:21:47:af:34:d3:53:77:
25:23:95:7d:2a:85:82:be:72:d6:e6:55:61:b8:f2:
13:b9:97:ef:76:64:36:b8:6e:36:e5:c7:3e:ed:53:
f8:57:fc:13:b0:93:79:a3:41:b6:7a:d0:7f:11:cf:
03:a3:9d:74:23:91:8b:e7:f5:9c:b1:e4:ed:bc:eb:
53:d8:ed:d6:92:5a:29:0d:8b:c7:c4:b6:2f:72:d0:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2E:EB:F7:2D:5C:B1:26:0E:A2:DA:13:51:CF:6E:C8:64:86:05:C6
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/UC7r9y1csSYOotoTUc9uyGSGBcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.163.160.0-51.163.255.255
185.174.124.0/22
IPv6:
2a0b:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
a7:77:e5:56:26:6b:c6:2b:df:b6:d7:66:30:a4:41:9e:d3:fa:
44:c3:29:ed:21:82:75:5e:23:1c:c4:18:03:84:15:e3:d9:f5:
5e:e0:0e:5d:d0:da:d1:d7:12:42:28:98:64:12:55:96:70:58:
68:e4:0f:3b:ec:ba:3f:f1:24:30:84:1a:05:37:39:19:a5:e7:
e5:b5:47:cb:8f:39:3b:f6:dd:54:1b:b0:cd:ed:b5:18:32:72:
01:5e:de:ac:cf:77:ce:23:b7:88:15:2c:30:b6:7f:1f:47:fb:
33:2e:e6:ff:1e:5a:fd:c9:90:29:5c:c3:fe:74:f7:7e:40:b0:
03:e5:bc:85:bc:33:1d:5f:e9:25:d3:56:ae:a1:a4:90:4c:47:
e4:02:e0:ba:ac:a3:68:b5:87:a9:63:6c:10:6d:71:50:97:f1:
c6:75:a2:74:91:12:26:30:8d:46:db:45:15:20:b7:2d:55:a6:
b5:35:08:c3:9b:55:4a:f1:e4:b5:c1:88:bb:5e:d1:64:1d:54:
40:6a:0d:69:79:3e:71:d9:b5:00:b1:b6:db:85:2d:eb:ea:e0:
27:9c:d7:c5:d9:e3:f1:c9:7b:a9:c9:5d:7c:d1:91:fe:99:29:
4a:0b:53:8f:c9:db:b0:fb:08:74:5d:bd:4a:ac:b0:37:97:c0:
55:ba:f2:60
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVtAbgWXDNkHo1D58Kfc3oWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOWQ2NWI5MjZmZGQ3NDNkYTViNDczZDM0MTg1ZmUxMDFi
MDVhMjgwHhcNMjMwMTAxMTEwNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDJlZWJmNzJkNWNiMTI2MGVhMmRhMTM1MWNmNmVjODY0ODYwNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUKXuo/ImFegD10g1SsjaMjzLEcM
g6TL87M8OkVqRSxsZ6QMuDWQvXadB7FYjiYDIaz6jtSToJbcMKaWIGWZPKBZvyFP
+TIJHw2BEJZ2cVZsM7542m6bD4ajEhrErPSVGK7sqGp0+hTXeML/ffb3MboKeg/0
+ajGk8OL58kl/F0eT2GymmMUsXmix0HOV5/hN1PpzFmrgaMQkxBCTZj4OAZwvGAR
sPkjTibXHyFHrzTTU3clI5V9KoWCvnLW5lVhuPITuZfvdmQ2uG425cc+7VP4V/wT
sJN5o0G2etB/Ec8Do510I5GL5/WcseTtvOtT2O3WklopDYvHxLYvctB6nQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFAu6/ctXLEmDqLaE1HPbshkhgXGMB8GA1UdIwQY
MBaAFKCdZbkm/ddD2ltHPTQYX+EBsFooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYt
NzlhN2VhYTdhZTU4LzEvVUM3cjl5MWNzU1lPb3RvVFVjOXV5R1NHQmNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYtNzlhN2VhYTdhZTU4
LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATMAsDBAUzo6AD
AwIzoAMEArmufDANBAIAAjAHAwUDKgufADANBgkqhkiG9w0BAQsFAAOCAQEAp3fl
ViZrxivfttdmMKRBntP6RMMp7SGCdV4jHMQYA4QV49n1XuAOXdDa0dcSQiiYZBJV
lnBYaOQPO+y6P/EkMIQaBTc5GaXn5bVHy485O/bdVBuwze21GDJyAV7erM93ziO3
iBUsMLZ/H0f7My7m/x5a/cmQKVzD/nT3fkCwA+W8hbwzHV/pJdNWrqGkkExH5ALg
uqyjaLWHqWNsEG1xUJfxxnWidJESJjCNRttFFSC3LVWmtTUIw5tVSvHktcGIu17R
ZB1UQGoNaXk+cdm1ALG224Ut6+rgJ5zXxdnj8cl7qcldfNGR/pkpSgtTj8nbsPsI
dF29SqywN5fAVbryYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:56 2024 by rpki-client on console-fra.rpki-client.org