Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/F10pot7nyqHaDtjvlC0mslWB8wo.roa
File: F10pot7nyqHaDtjvlC0mslWB8wo.roa (raw, json)
Hash identifier: ER8upD1kd7JohzVuZucUXjRk/FkWpJLitSubMk/zgZQ=
Subject key identifier: 17:5D:29:A2:DE:E7:CA:A1:DA:0E:D8:EF:94:2D:26:B2:55:81:F3:0A
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01856F54A8FBEF1D5D2F14CE642A51FD15E9
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/F10pot7nyqHaDtjvlC0mslWB8wo.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13132
IP address blocks: 153.96.252.0/24 maxlen: 24
153.96.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a8:fb:ef:1d:5d:2f:14:ce:64:2a:51:fd:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=175d29a2dee7caa1da0ed8ef942d26b25581f30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:c4:07:61:a6:46:25:71:cf:05:cd:28:ac:
c5:8d:a3:17:ac:bb:99:df:e8:e7:eb:78:19:13:e7:
40:cf:ee:ad:57:38:61:3e:da:b5:28:14:2a:8e:7f:
ae:bc:61:d7:cd:04:1d:a2:37:45:14:db:1f:02:2b:
74:78:a1:8c:48:47:61:d3:27:23:22:74:61:ee:af:
cd:47:98:cf:4b:6f:5b:ea:e4:94:4b:3b:dd:99:0c:
01:90:83:39:21:35:0e:d6:12:50:37:ce:55:0d:a7:
d2:91:b7:4c:68:d2:cf:9b:bc:70:88:28:74:70:38:
3b:71:e8:42:66:54:79:c2:7c:98:0e:50:87:44:17:
84:ee:96:fe:25:2d:0c:a3:65:25:68:33:fb:44:48:
39:5a:97:7a:17:45:7d:58:98:8d:15:98:1c:32:a1:
dc:fb:55:51:96:2f:93:85:11:dc:c9:06:49:71:05:
9c:94:fb:96:be:c0:c7:7f:ad:d5:b8:fc:5c:e8:b4:
d9:76:c3:e7:8b:e7:6e:78:75:89:fe:52:c5:28:ec:
50:f7:1e:93:d1:6d:72:10:c8:16:4e:38:54:7f:13:
a7:fd:fd:af:ba:d6:ad:3e:a9:cf:88:bf:18:ef:8a:
6b:57:f8:ab:a6:9f:92:9c:3f:d6:87:40:fd:71:70:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:29:A2:DE:E7:CA:A1:DA:0E:D8:EF:94:2D:26:B2:55:81:F3:0A
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/F10pot7nyqHaDtjvlC0mslWB8wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.251.0-153.96.252.255
Signature Algorithm: sha256WithRSAEncryption
08:b5:37:80:cd:a7:8d:93:ad:7a:86:18:21:c6:d3:dd:7c:4a:
39:12:f7:6d:16:4a:93:f5:c8:53:69:ee:ea:53:b3:f5:f5:40:
67:c0:72:17:8a:97:4c:8a:48:73:21:c0:84:1d:e1:64:33:8c:
cf:31:7f:ef:a5:5d:49:e5:1e:99:76:3f:cd:3d:40:37:a8:3e:
5c:21:a7:bd:30:09:1b:1c:96:54:d5:24:59:c8:52:dc:3f:f0:
a8:b2:0d:58:73:36:6d:c2:1f:7d:12:21:c1:b2:1e:b0:15:0e:
3f:31:e8:68:5a:a8:06:34:05:b2:0c:f4:8e:04:08:e9:41:91:
71:51:af:62:ef:c4:12:dd:9d:d5:69:6e:38:9c:7d:3d:8b:a3:
e0:ea:5d:38:68:82:db:21:f7:1d:26:53:49:73:d1:c9:d4:9a:
af:3f:9b:f7:cf:03:1a:46:64:9f:d1:cd:24:02:2c:7e:0b:02:
f0:a6:9e:57:75:0a:10:8c:0e:98:b2:c1:ec:6d:b4:90:ce:39:
b6:87:b9:4c:1d:75:94:3d:c1:69:e1:aa:fe:9f:81:e0:bc:49:
a1:74:04:2b:4e:68:76:43:0f:28:61:cc:7f:23:f7:8a:7c:78:
38:a5:5e:87:5d:5f:ed:d9:24:02:26:d3:bb:f5:34:2b:61:af:
07:18:bb:1d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvVKj77x1dLxTOZCpR/RXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2
NDIwZGYwHhcNMjMwMTAxMjE1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzVkMjlhMmRlZTdjYWExZGEwZWQ4ZWY5NDJkMjZiMjU1ODFmMzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLjEB2GmRiVxzwXNKKzFjaMXrLuZ
3+jn63gZE+dAz+6tVzhhPtq1KBQqjn+uvGHXzQQdojdFFNsfAit0eKGMSEdh0ycj
InRh7q/NR5jPS29b6uSUSzvdmQwBkIM5ITUO1hJQN85VDafSkbdMaNLPm7xwiCh0
cDg7cehCZlR5wnyYDlCHRBeE7pb+JS0Mo2UlaDP7REg5Wpd6F0V9WJiNFZgcMqHc
+1VRli+ThRHcyQZJcQWclPuWvsDHf63VuPxc6LTZdsPni+dueHWJ/lLFKOxQ9x6T
0W1yEMgWTjhUfxOn/f2vutatPqnPiL8Y74prV/irpp+SnD/Wh0D9cXDS9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBddKaLe58qh2g7Y75QtJrJVgfMKMB8GA1UdIwQY
MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct
YWQ4ZmJlYWE4ZGQ5LzEvRjEwcG90N255cUhhRHRqdmxDMG1zbFdCOHdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5
LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACZYPsD
BACZYPwwDQYJKoZIhvcNAQELBQADggEBAAi1N4DNp42TrXqGGCHG0918SjkS920W
SpP1yFNp7upTs/X1QGfAcheKl0yKSHMhwIQd4WQzjM8xf++lXUnlHpl2P809QDeo
Plwhp70wCRscllTVJFnIUtw/8KiyDVhzNm3CH30SIcGyHrAVDj8x6GhaqAY0BbIM
9I4ECOlBkXFRr2LvxBLdndVpbjicfT2Lo+DqXThogtsh9x0mU0lz0cnUmq8/m/fP
AxpGZJ/RzSQCLH4LAvCmnld1ChCMDpiywexttJDOObaHuUwddZQ9wWnhqv6fgeC8
SaF0BCtOaHZDDyhhzH8j94p8eDilXoddX+3ZJAIm07v1NCthrwcYux0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org