Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/UPBuP2u_UXnpYyNzyIGvOgZCYgs.roa
File: UPBuP2u_UXnpYyNzyIGvOgZCYgs.roa (raw, json)
Hash identifier: r1uB7klbfIaAfME8hEg3HZqpfkuv4qxYaTyQh0CHI64=
Subject key identifier: 50:F0:6E:3F:6B:BF:51:79:E9:63:23:73:C8:81:AF:3A:06:42:62:0B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CC53118D8C1FEA3B9617E931F64785416
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/UPBuP2u_UXnpYyNzyIGvOgZCYgs.roa
Signing time: Mon 01 Jan 2024 13:22:58 +0000
ROA not before: Mon 01 Jan 2024 13:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216145
IP address blocks: 5.144.178.0/24 maxlen: 24
5.144.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:31:18:d8:c1:fe:a3:b9:61:7e:93:1f:64:78:54:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 1 13:22:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50f06e3f6bbf5179e9632373c881af3a0642620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:ec:4e:20:bf:6a:6d:f3:65:2d:ea:aa:44:
59:8b:a9:29:0a:f9:35:0f:c6:da:4b:a4:c1:0f:ce:
24:da:29:e9:3e:95:1f:a5:e1:de:c2:1b:8d:5a:96:
f1:2c:59:1f:41:9e:03:78:1c:62:ad:5b:56:4a:48:
e2:68:ff:72:d4:24:41:dc:ea:b3:6d:a9:45:c0:53:
96:c1:a3:e5:6b:ba:f7:df:0d:09:c6:c8:6e:f1:dc:
4c:d7:dd:e5:90:af:6b:c2:ad:0e:d8:6e:1d:f6:3c:
55:0d:ad:66:3b:16:64:77:97:10:e3:ef:bb:7a:7d:
58:af:76:84:f6:ef:6a:1c:45:f9:bd:c5:ae:de:84:
07:53:9c:ab:a4:01:65:9e:53:6b:78:2b:65:df:43:
cc:63:0a:7e:85:a8:bb:0a:3b:a5:3e:62:c2:8f:57:
fd:ff:b8:56:bf:8c:3a:d8:d9:03:ea:ed:06:1b:e4:
1d:bc:13:58:31:6d:d7:04:4d:f0:a1:19:d6:23:c4:
9c:92:be:fd:b0:e5:a5:31:dc:b9:71:97:0d:43:b0:
95:59:39:25:0f:73:a7:83:77:f0:11:81:74:a6:ff:
f1:df:75:4e:c2:66:79:ac:10:e9:9e:f5:68:19:6a:
22:be:a2:03:cd:1f:d7:f2:3a:4c:11:c8:9e:e3:84:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:6E:3F:6B:BF:51:79:E9:63:23:73:C8:81:AF:3A:06:42:62:0B
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/UPBuP2u_UXnpYyNzyIGvOgZCYgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.178.0/24
5.144.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:70:da:a0:b5:f7:4d:53:c7:b4:c0:ca:0c:6c:65:fd:b1:8d:
a5:5f:f9:b8:6d:15:f3:4a:6e:2f:1d:b7:bf:51:be:d8:1c:10:
0c:b1:d2:d2:ad:fd:e3:77:8c:35:b4:d2:06:ef:1d:02:d3:68:
86:9f:1e:37:7a:dd:ad:4f:0c:5b:8e:cc:f4:dc:fe:9b:a0:b9:
63:fa:57:93:3f:b9:df:33:07:ab:26:5c:bb:29:83:96:e4:bf:
f1:91:63:d6:76:cc:c3:69:0d:f6:02:7d:1d:91:af:89:3f:3f:
67:6e:ef:dd:49:16:81:dc:8f:22:a8:f8:6d:9e:e5:9e:13:8e:
e1:4f:93:85:44:ff:18:be:13:b2:a4:8b:57:66:7d:8f:89:ab:
6b:ee:93:c4:f8:73:99:55:b6:1d:7a:43:67:e1:dd:60:b6:ca:
6b:ec:42:3b:6f:91:d2:c2:02:a5:0b:2b:0c:3a:41:cb:0a:45:
a1:98:31:ae:8d:9a:3a:5d:a6:1e:69:a2:da:20:f0:4f:c4:22:
8d:e6:fc:25:97:eb:0a:23:05:b3:5e:08:c9:38:4e:cc:6f:ab:
f2:2c:51:f7:c4:bc:52:64:77:c4:f3:f6:51:30:af:d8:33:f9:
71:19:38:4c:b1:60:12:a4:fb:9a:44:a5:b6:a8:2a:0e:82:fe:
ce:7f:05:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFMRjYwf6juWF+kx9keFQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjQwMTAxMTMyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGYwNmUzZjZiYmY1MTc5ZTk2MzIzNzNjODgxYWYzYTA2NDI2MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ7sTiC/am3zZS3qqkRZi6kpCvk1
D8baS6TBD84k2inpPpUfpeHewhuNWpbxLFkfQZ4DeBxirVtWSkjiaP9y1CRB3Oqz
balFwFOWwaPla7r33w0Jxshu8dxM193lkK9rwq0O2G4d9jxVDa1mOxZkd5cQ4++7
en1Yr3aE9u9qHEX5vcWu3oQHU5yrpAFlnlNreCtl30PMYwp+hai7CjulPmLCj1f9
/7hWv4w62NkD6u0GG+QdvBNYMW3XBE3woRnWI8Sckr79sOWlMdy5cZcNQ7CVWTkl
D3Ong3fwEYF0pv/x33VOwmZ5rBDpnvVoGWoivqIDzR/X8jpMEcie44Sf2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFDwbj9rv1F56WMjc8iBrzoGQmILMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvVVBCdVAydV9VWG5wWXlOenlJR3ZPZ1pDWWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZCyAwQA
BZC3MA0GCSqGSIb3DQEBCwUAA4IBAQAacNqgtfdNU8e0wMoMbGX9sY2lX/m4bRXz
Sm4vHbe/Ub7YHBAMsdLSrf3jd4w1tNIG7x0C02iGnx43et2tTwxbjsz03P6boLlj
+leTP7nfMwerJly7KYOW5L/xkWPWdszDaQ32An0dka+JPz9nbu/dSRaB3I8iqPht
nuWeE47hT5OFRP8YvhOypItXZn2Piatr7pPE+HOZVbYdekNn4d1gtspr7EI7b5HS
wgKlCysMOkHLCkWhmDGujZo6XaYeaaLaIPBPxCKN5vwll+sKIwWzXgjJOE7Mb6vy
LFH3xLxSZHfE8/ZRMK/YM/lxGThMsWASpPuaRKW2qCoOgv7OfwWv
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:14 2024 by rpki-client on console-fra.rpki-client.org