Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/4JhI-RVYK2QonyOR4sROUQ4uSXg.roa
File: 4JhI-RVYK2QonyOR4sROUQ4uSXg.roa (raw, json)
Hash identifier: yHbDKB1JCnFw5Ij39WynIsyFO95mnymo45iL4QjizFg=
Subject key identifier: E0:98:48:F9:15:58:2B:64:28:9F:23:91:E2:C4:4E:51:0E:2E:49:78
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01856C01410F73D2E96239C2C966F706AF10
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/4JhI-RVYK2QonyOR4sROUQ4uSXg.roa
Signing time: Sun 01 Jan 2023 06:24:59 +0000
ROA not before: Sun 01 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197297
IP address blocks: 178.19.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:41:0f:73:d2:e9:62:39:c2:c9:66:f7:06:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e09848f915582b64289f2391e2c44e510e2e4978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:83:a5:8a:a4:97:95:26:b3:0d:6b:7d:a0:
b4:67:8b:11:e9:d2:5a:18:ae:50:0c:d1:07:51:fb:
91:d2:98:2f:2c:6f:12:de:8e:2f:e7:cf:08:2e:b9:
2c:96:f6:fc:ee:f1:7c:39:e8:2b:c1:ed:be:18:7d:
54:8f:a4:da:0a:5c:17:c8:48:a0:10:08:af:3b:5c:
ea:14:75:30:aa:b7:4d:7a:b1:4a:d8:12:da:f8:85:
6b:88:1c:5b:46:29:8d:fe:fb:79:84:97:fa:fa:b1:
ac:2f:9e:dc:22:7d:e4:b3:4a:8b:9a:ca:11:65:12:
6e:2f:06:53:43:73:ae:80:5e:c1:c8:7a:e2:27:7c:
13:89:f5:58:d4:11:50:08:e2:80:82:b9:80:aa:55:
01:d0:46:bb:e5:a4:9d:7c:6d:8e:d0:cf:e9:70:33:
03:1f:19:ff:6f:de:f4:58:0e:e7:a1:19:4c:e2:30:
12:64:aa:26:6c:85:b3:56:f2:2c:ff:08:b5:2e:91:
98:0c:ea:95:cb:61:52:64:70:ba:51:7e:a5:43:7f:
16:50:69:4a:40:e8:8e:c1:b0:d9:34:0c:39:3a:b7:
a6:b7:89:15:70:6b:87:e5:88:33:2a:3e:3a:ad:0d:
42:29:85:aa:b2:d6:76:2b:03:54:03:f6:69:f3:ba:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:98:48:F9:15:58:2B:64:28:9F:23:91:E2:C4:4E:51:0E:2E:49:78
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/4JhI-RVYK2QonyOR4sROUQ4uSXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.73.0/24
Signature Algorithm: sha256WithRSAEncryption
89:84:40:74:a1:70:45:0d:ac:7e:25:31:67:ac:79:8c:7e:0d:
a9:1d:70:69:dc:ed:a9:5b:e7:e4:da:6b:dc:0a:c2:88:52:1a:
06:ae:09:66:01:f2:10:ac:3c:bb:8c:a6:cd:24:85:8c:1c:34:
de:c4:6f:d4:80:dc:be:d6:ac:d1:99:d3:a2:25:d4:3e:e1:e0:
8a:84:34:cc:1d:71:54:56:6e:78:6e:b3:70:6e:55:8f:93:9b:
44:6f:59:84:26:51:df:f9:26:12:a2:a7:d1:29:dd:85:ef:11:
70:87:5e:99:6d:e7:79:1a:f7:40:0e:93:95:70:9c:3c:e1:12:
d8:68:0c:66:5f:0a:4f:e8:7d:7f:0f:d2:d3:c9:6a:5f:b7:eb:
6e:68:0b:c6:c3:51:61:f5:77:07:49:60:06:bd:d7:a6:31:4a:
6b:4b:e1:63:76:fe:ed:d0:d1:fd:48:da:2b:94:9b:e6:d1:59:
b2:7b:7b:c4:e3:4f:c2:2f:8b:7a:7f:7b:1d:bb:43:d7:92:d5:
ee:ce:43:26:82:ac:aa:2a:a0:85:4d:85:f0:0b:1d:e0:98:c7:
96:19:87:77:58:33:12:d3:cc:1a:83:37:5b:8c:b5:25:ec:e2:
3f:a3:df:f5:77:3b:ab:3e:c0:61:61:60:15:1c:e3:c8:e6:be:
8d:a3:b1:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsAUEPc9LpYjnCyWb3Bq8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw
ODc5NDcwHhcNMjMwMTAxMDYyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDk4NDhmOTE1NTgyYjY0Mjg5ZjIzOTFlMmM0NGU1MTBlMmU0OTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkiDpYqkl5Umsw1rfaC0Z4sR6dJa
GK5QDNEHUfuR0pgvLG8S3o4v588ILrkslvb87vF8Oegrwe2+GH1Uj6TaClwXyEig
EAivO1zqFHUwqrdNerFK2BLa+IVriBxbRimN/vt5hJf6+rGsL57cIn3ks0qLmsoR
ZRJuLwZTQ3OugF7ByHriJ3wTifVY1BFQCOKAgrmAqlUB0Ea75aSdfG2O0M/pcDMD
Hxn/b970WA7noRlM4jASZKombIWzVvIs/wi1LpGYDOqVy2FSZHC6UX6lQ38WUGlK
QOiOwbDZNAw5Oremt4kVcGuH5YgzKj46rQ1CKYWqstZ2KwNUA/Zp87r1UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOCYSPkVWCtkKJ8jkeLETlEOLkl4MB8GA1UdIwQY
MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt
NTk5NTc3ODdiMDE1LzEvNEpoSS1SVllLMlFvbnlPUjRzUk9VUTR1U1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1
LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshNJMA0G
CSqGSIb3DQEBCwUAA4IBAQCJhEB0oXBFDax+JTFnrHmMfg2pHXBp3O2pW+fk2mvc
CsKIUhoGrglmAfIQrDy7jKbNJIWMHDTexG/UgNy+1qzRmdOiJdQ+4eCKhDTMHXFU
Vm54brNwblWPk5tEb1mEJlHf+SYSoqfRKd2F7xFwh16Zbed5GvdADpOVcJw84RLY
aAxmXwpP6H1/D9LTyWpft+tuaAvGw1Fh9XcHSWAGvdemMUprS+Fjdv7t0NH9SNor
lJvm0Vmye3vE40/CL4t6f3sdu0PXktXuzkMmgqyqKqCFTYXwCx3gmMeWGYd3WDMS
08wagzdbjLUl7OI/o9/1dzurPsBhYWAVHOPI5r6No7Gu
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:11 2024 by rpki-client on console-ams.rpki-client.org