Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_OrC_oPlPjRFcf4VZEdji2SEWBQ.roa
File: _OrC_oPlPjRFcf4VZEdji2SEWBQ.roa (raw, json)
Hash identifier: Ark8KIDoTTjclrjDusF6nP30+9w3Wj1sWe3ozBY6C/w=
Subject key identifier: FC:EA:C2:FE:83:E5:3E:34:45:71:FE:15:64:47:63:8B:64:84:58:14
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CC64B2B92CBB2B53B2E2741A8F5E44D02
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_OrC_oPlPjRFcf4VZEdji2SEWBQ.roa
Signing time: Mon 01 Jan 2024 18:31:04 +0000
ROA not before: Mon 01 Jan 2024 18:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216145
IP address blocks: 5.144.178.0/24 maxlen: 24
5.144.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2b:92:cb:b2:b5:3b:2e:27:41:a8:f5:e4:4d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 1 18:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fceac2fe83e53e344571fe156447638b64845814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:b4:ae:6e:43:fe:46:d2:a6:c0:d1:b6:07:
48:b1:54:ea:70:bd:6d:a8:f9:e8:b9:51:a8:05:6a:
64:bc:af:90:d9:59:b8:51:e0:d4:d4:73:b6:b7:55:
fa:d9:44:9e:7b:1c:d5:d2:1f:43:41:35:ef:fb:eb:
b7:e2:06:3a:ce:4a:6b:4f:17:28:ae:b3:3c:d2:47:
92:ac:1b:f8:d3:74:95:1f:f5:37:70:6c:e9:6d:31:
f1:01:fd:e1:36:15:be:53:a3:87:2b:a0:09:50:62:
c1:7a:86:30:8f:1f:1f:c9:39:da:53:96:34:a4:61:
77:73:c0:d0:7a:a5:38:c5:52:fb:d0:18:a8:bb:86:
65:24:54:8d:1f:bc:44:fd:60:58:b5:b6:d1:90:10:
72:16:37:7a:5c:9e:7e:18:e7:6c:1d:5c:93:91:d9:
cc:58:16:fc:33:2d:75:6b:0d:40:9d:bb:6e:29:79:
9d:c8:e3:f4:60:aa:84:47:39:42:fd:0a:c6:27:00:
33:67:aa:6b:ee:92:7a:6d:e5:5d:bf:e7:20:14:d1:
f3:14:e6:80:19:7d:d0:03:0a:ca:08:29:54:22:ca:
41:0c:7d:ae:b2:1b:1e:5d:39:27:79:b9:c9:4d:17:
3a:98:25:13:21:d6:cd:ad:37:97:ca:cc:a7:c0:fc:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:C2:FE:83:E5:3E:34:45:71:FE:15:64:47:63:8B:64:84:58:14
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_OrC_oPlPjRFcf4VZEdji2SEWBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.178.0/24
5.144.183.0/24
Signature Algorithm: sha256WithRSAEncryption
98:96:76:03:28:d5:d2:e9:e8:5c:0a:63:fd:e9:29:15:71:cf:
96:81:4c:b4:fb:d2:25:bc:ea:99:ea:d7:79:6a:09:c9:06:68:
49:a3:99:1d:72:58:c5:0b:39:fd:e0:52:83:fa:ac:cf:41:7e:
5d:7f:d3:fc:59:44:cb:2f:ea:dd:3e:c0:18:d1:f5:e9:bc:98:
4f:7c:56:67:38:e5:93:13:39:8c:26:23:09:b4:0d:2d:5d:27:
11:d6:dd:96:52:d1:70:9a:47:68:e6:bc:f0:cd:93:b0:3b:f8:
93:04:c8:b7:a7:04:f7:a8:48:41:b6:0e:6a:72:85:7d:e0:e7:
ac:f5:75:5b:06:f6:37:fe:c6:d0:c0:b5:72:be:ad:ce:ea:1e:
b4:cf:bb:3d:b4:7b:a5:3a:6b:e0:0b:16:d5:81:02:9c:81:34:
79:da:d6:8c:5a:ff:23:3c:e9:48:61:da:d7:8c:e9:8f:16:97:
85:88:3b:06:c3:a8:82:76:ff:82:af:f5:80:07:46:b5:a6:52:
37:a1:cf:d9:5f:bc:f3:b0:c3:da:c6:ae:bb:a1:ac:e2:9b:e3:
5c:c3:bb:7c:e0:b2:2c:48:5a:ae:96:1d:bc:cc:e2:3b:78:9c:
2f:28:00:3d:d0:ad:e2:cc:79:b4:ab:b7:57:fe:8f:0c:30:36:
1c:b0:0e:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSyuSy7K1Oy4nQaj15E0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjQwMTAxMTgzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2VhYzJmZTgzZTUzZTM0NDU3MWZlMTU2NDQ3NjM4YjY0ODQ1ODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNC0rm5D/kbSpsDRtgdIsVTqcL1t
qPnouVGoBWpkvK+Q2Vm4UeDU1HO2t1X62USeexzV0h9DQTXv++u34gY6zkprTxco
rrM80keSrBv403SVH/U3cGzpbTHxAf3hNhW+U6OHK6AJUGLBeoYwjx8fyTnaU5Y0
pGF3c8DQeqU4xVL70Biou4ZlJFSNH7xE/WBYtbbRkBByFjd6XJ5+GOdsHVyTkdnM
WBb8My11aw1AnbtuKXmdyOP0YKqERzlC/QrGJwAzZ6pr7pJ6beVdv+cgFNHzFOaA
GX3QAwrKCClUIspBDH2ushseXTknebnJTRc6mCUTIdbNrTeXysynwPzbIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPzqwv6D5T40RXH+FWRHY4tkhFgUMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvX09yQ19vUGxQalJGY2Y0VlpFZGppMlNFV0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZCyAwQA
BZC3MA0GCSqGSIb3DQEBCwUAA4IBAQCYlnYDKNXS6ehcCmP96SkVcc+WgUy0+9Il
vOqZ6td5agnJBmhJo5kdcljFCzn94FKD+qzPQX5df9P8WUTLL+rdPsAY0fXpvJhP
fFZnOOWTEzmMJiMJtA0tXScR1t2WUtFwmkdo5rzwzZOwO/iTBMi3pwT3qEhBtg5q
coV94Oes9XVbBvY3/sbQwLVyvq3O6h60z7s9tHulOmvgCxbVgQKcgTR52taMWv8j
POlIYdrXjOmPFpeFiDsGw6iCdv+Cr/WAB0a1plI3oc/ZX7zzsMPaxq67oazim+Nc
w7t84LIsSFqulh28zOI7eJwvKAA90K3izHm0q7dX/o8MMDYcsA4a
-----END CERTIFICATE-----
Generated at Wed Jan 3 18:36:45 2024 by rpki-client on console-ams.rpki-client.org