Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/fHg6xcMsUhyMLDIkWlJKExxuFQ4.roa
File: fHg6xcMsUhyMLDIkWlJKExxuFQ4.roa (raw, json)
Hash identifier: ZExXifyrGU/RWKzbUqKAF7bWtGvQm+eYxnqQ9CD+I4g=
Subject key identifier: 7C:78:3A:C5:C3:2C:52:1C:8C:2C:32:24:5A:52:4A:13:1C:6E:15:0E
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 018A4A5A45E46ECBBCCE845BC7BE879FBFB6
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/fHg6xcMsUhyMLDIkWlJKExxuFQ4.roa
Signing time: Thu 31 Aug 2023 06:49:04 +0000
ROA not before: Thu 31 Aug 2023 06:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398642
IP address blocks: 144.57.48.0/21 maxlen: 21
144.57.48.0/24 maxlen: 24
144.57.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:5a:45:e4:6e:cb:bc:ce:84:5b:c7:be:87:9f:bf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Aug 31 06:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c783ac5c32c521c8c2c32245a524a131c6e150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:f4:c7:48:05:3f:54:02:f9:8e:2f:94:f3:
ba:88:34:91:bc:44:cd:20:0f:c2:59:93:ca:c5:b5:
9a:90:90:97:f7:bc:9c:03:c8:6b:c4:fb:70:5a:30:
81:98:af:f1:03:9a:22:ba:22:5b:61:14:a9:cc:b1:
5a:6d:90:48:e2:69:01:ac:e5:61:c6:db:9a:0a:5d:
f8:0c:70:db:33:8a:bc:34:ef:94:10:63:91:bf:3f:
51:5f:f6:ec:0d:42:69:45:2c:c3:f5:02:1a:a2:72:
76:94:b3:3d:12:fd:9d:af:0f:fe:59:7a:9c:61:96:
9b:a6:97:82:f1:2e:6d:eb:e3:35:ce:9f:ea:14:ed:
98:ce:3a:89:2c:8a:e3:f7:d2:88:d4:cf:c7:79:2d:
f7:4a:4e:5e:21:28:06:b1:27:36:48:7a:0d:bc:b2:
2e:02:5a:dd:eb:e3:96:12:3d:e7:9e:5e:8d:00:fd:
5e:b5:fb:7f:f8:4e:09:ff:f1:cf:be:2f:2a:a7:5a:
d4:67:54:46:21:3d:7e:c3:2c:c6:f8:49:2e:fd:c8:
75:1c:81:ed:f8:2a:03:f7:07:5c:be:c2:ab:9b:ff:
f8:80:99:cd:6d:1e:10:de:65:60:01:68:86:df:88:
e2:a2:22:e1:89:7c:42:79:66:4b:f0:d8:4c:4e:b1:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:3A:C5:C3:2C:52:1C:8C:2C:32:24:5A:52:4A:13:1C:6E:15:0E
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/fHg6xcMsUhyMLDIkWlJKExxuFQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.48.0/21
Signature Algorithm: sha256WithRSAEncryption
27:5f:cd:04:37:21:3c:d8:cf:a0:9c:7b:c5:d9:ce:06:99:99:
57:90:38:80:8a:25:8c:49:eb:cf:90:df:c5:80:3e:42:a9:c8:
3a:b3:c7:84:63:9f:b1:66:cd:15:fb:df:1c:5c:b2:74:73:75:
e2:f2:5e:f8:53:3c:3b:0a:f9:31:1b:1a:53:41:7c:6f:f0:6f:
d6:78:33:87:f6:2d:1d:9f:bf:89:95:f9:6c:6c:d5:2e:60:d6:
a6:b4:ec:c6:fc:e7:15:6e:84:49:bf:d4:ba:65:97:19:66:1d:
02:fe:6c:d9:32:5a:61:87:1a:7a:63:69:ee:fb:a0:2a:90:9c:
47:fb:ca:da:7f:72:05:5a:be:85:2f:a5:1b:48:7e:04:e2:0d:
7b:bf:9b:82:4b:92:a4:49:e4:dd:52:f8:76:4a:16:e0:56:64:
21:18:34:5e:4c:c2:a2:3f:1c:4c:e6:9c:c9:58:15:69:57:00:
4e:e4:48:a7:19:91:ca:ba:c8:fc:a0:1c:bc:69:55:3a:47:04:
e9:00:f7:a9:aa:19:0d:a6:45:fa:bb:24:9d:34:d8:68:f3:64:
c0:9e:18:d0:ff:fc:8c:70:0d:3b:23:72:3c:7b:e2:03:77:bf:
d7:05:24:0c:d8:86:be:0b:87:0b:42:c3:cf:21:20:73:23:1b:
6d:45:f7:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpKWkXkbsu8zoRbx76Hn7+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWNhYWYzYTA5OTNiNzZhZTEzZTExOTEzNmRiZjAwNjk2
OTg5MTEwHhcNMjMwODMxMDY0OTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzc4M2FjNWMzMmM1MjFjOGMyYzMyMjQ1YTUyNGExMzFjNmUxNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlr0x0gFP1QC+Y4vlPO6iDSRvETN
IA/CWZPKxbWakJCX97ycA8hrxPtwWjCBmK/xA5oiuiJbYRSpzLFabZBI4mkBrOVh
xtuaCl34DHDbM4q8NO+UEGORvz9RX/bsDUJpRSzD9QIaonJ2lLM9Ev2drw/+WXqc
YZabppeC8S5t6+M1zp/qFO2YzjqJLIrj99KI1M/HeS33Sk5eISgGsSc2SHoNvLIu
Alrd6+OWEj3nnl6NAP1etft/+E4J//HPvi8qp1rUZ1RGIT1+wyzG+Eku/ch1HIHt
+CoD9wdcvsKrm//4gJnNbR4Q3mVgAWiG34jioiLhiXxCeWZL8NhMTrFgCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHx4OsXDLFIcjCwyJFpSShMcbhUOMB8GA1UdIwQY
MBaAFBpcqvOgmTt2rhPhGRNtvwBpaYkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUt
N2M1OTBiY2Y5ODFhLzEvZkhnNnhjTXNVaHlNTERJa1dsSktFeHh1RlE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUtN2M1OTBiY2Y5ODFh
LzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkDkwMA0G
CSqGSIb3DQEBCwUAA4IBAQAnX80ENyE82M+gnHvF2c4GmZlXkDiAiiWMSevPkN/F
gD5Cqcg6s8eEY5+xZs0V+98cXLJ0c3Xi8l74Uzw7CvkxGxpTQXxv8G/WeDOH9i0d
n7+JlflsbNUuYNamtOzG/OcVboRJv9S6ZZcZZh0C/mzZMlphhxp6Y2nu+6AqkJxH
+8raf3IFWr6FL6UbSH4E4g17v5uCS5KkSeTdUvh2ShbgVmQhGDReTMKiPxxM5pzJ
WBVpVwBO5EinGZHKusj8oBy8aVU6RwTpAPepqhkNpkX6uySdNNho82TAnhjQ//yM
cA07I3I8e+IDd7/XBSQM2Ia+C4cLQsPPISBzIxttRffE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:22 2024 by rpki-client on console-ams.rpki-client.org