Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/SC0VJ4zcLQBgH64Bc0R4kErnxUg.roa
File: SC0VJ4zcLQBgH64Bc0R4kErnxUg.roa (raw, json)
Hash identifier: /VabW/4eMj0EBrX8xvfw3+Hh3+T/r98KnoxUDgoJbE4=
Subject key identifier: 48:2D:15:27:8C:DC:2D:00:60:1F:AE:01:73:44:78:90:4A:E7:C5:48
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 018751B208BD204E35765D2ACA9413E0E117
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/SC0VJ4zcLQBgH64Bc0R4kErnxUg.roa
Signing time: Wed 05 Apr 2023 13:53:54 +0000
ROA not before: Wed 05 Apr 2023 13:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 132.74.0.0/16 maxlen: 16
132.74.0.0/15 maxlen: 15
132.75.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:b2:08:bd:20:4e:35:76:5d:2a:ca:94:13:e0:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Apr 5 13:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482d15278cdc2d00601fae01734478904ae7c548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:88:6b:9f:e5:f6:7b:4e:83:3c:7c:97:e5:
df:de:6a:9a:2e:18:35:e5:db:e6:2b:44:34:e3:76:
80:8d:67:d5:b4:02:3f:ed:8a:61:12:cf:7d:d4:b5:
ab:36:e6:f8:11:dc:23:5c:b9:83:b3:06:a7:d5:51:
46:d9:5c:4f:e1:01:ff:fa:43:9d:de:df:69:b9:ba:
b8:fe:ca:50:6d:26:1e:4d:44:1f:94:32:8f:94:e3:
31:6e:1a:18:c2:8f:5d:6a:17:0f:5a:6d:c7:06:93:
2f:48:ce:f0:76:85:31:9d:4a:f9:d4:34:a2:2f:96:
1c:0d:ba:90:7f:22:3c:f4:29:7f:16:03:01:62:aa:
79:67:d6:9a:28:9f:31:3e:c2:0d:d5:20:85:8b:c6:
cf:90:5a:2a:93:c2:59:e5:f9:97:47:36:cb:db:35:
e1:ff:f2:8c:a3:5b:a0:de:a6:e4:8c:88:ea:8b:f3:
e7:a6:87:23:9b:11:76:dd:60:03:4c:d1:cc:35:1f:
d7:7e:e6:c6:1f:ff:2b:8e:92:de:e2:07:8b:f3:0d:
c3:c7:cd:08:4a:be:0b:c0:46:77:78:35:1a:56:a8:
51:78:a8:5f:7f:31:50:b5:67:9c:5b:5c:32:c7:ea:
f5:01:52:08:bd:9b:0c:be:53:a6:11:2b:f5:1e:53:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:15:27:8C:DC:2D:00:60:1F:AE:01:73:44:78:90:4A:E7:C5:48
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/SC0VJ4zcLQBgH64Bc0R4kErnxUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:65:45:e7:1a:7d:fb:61:7d:25:ab:66:70:2e:d8:2c:74:20:
e0:89:a7:13:31:9f:7b:e5:6b:3f:f3:80:a4:8f:55:7d:7b:64:
37:e4:25:fb:02:7f:d0:73:83:ae:4e:ce:38:a2:ed:6c:99:1d:
2e:51:bf:e9:c3:3b:ce:70:ca:f1:b6:47:65:03:a6:0e:0e:14:
67:f5:b9:f7:4a:ca:f7:70:3d:2c:e0:a2:d0:07:40:6d:bf:6d:
93:65:ac:c4:5c:4c:18:11:63:53:bf:ef:55:6c:51:0f:3e:7e:
6e:33:c7:04:0b:d1:32:f3:95:48:4b:a1:18:c4:f8:25:a5:59:
37:11:b5:63:e4:16:f2:7b:96:6e:bd:ee:e7:79:56:2a:2a:78:
74:3c:21:52:b3:56:cf:e2:32:be:7d:ef:b5:62:70:0b:a7:2a:
b1:20:76:10:d0:62:d7:0b:b1:f9:87:00:05:03:47:92:a3:b4:
8f:59:e4:84:43:c5:b2:6d:a2:6f:e9:cf:06:6a:38:2a:2c:ce:
17:dd:59:d1:cf:db:a8:e4:b5:3e:7a:9b:b4:08:3f:97:1d:80:
47:22:a4:7f:53:46:1c:31:d8:6f:61:88:b1:de:6f:78:fb:a6:
2c:1f:7b:d8:0e:87:62:f6:8c:e2:a0:a9:c1:d4:84:26:31:74:
9e:ef:ee:48
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYdRsgi9IE41dl0qypQT4OEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5
MjUxMTcwHhcNMjMwNDA1MTM1MzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODJkMTUyNzhjZGMyZDAwNjAxZmFlMDE3MzQ0Nzg5MDRhZTdjNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/uIa5/l9ntOgzx8l+Xf3mqaLhg1
5dvmK0Q043aAjWfVtAI/7YphEs991LWrNub4EdwjXLmDswan1VFG2VxP4QH/+kOd
3t9pubq4/spQbSYeTUQflDKPlOMxbhoYwo9dahcPWm3HBpMvSM7wdoUxnUr51DSi
L5YcDbqQfyI89Cl/FgMBYqp5Z9aaKJ8xPsIN1SCFi8bPkFoqk8JZ5fmXRzbL2zXh
//KMo1ug3qbkjIjqi/PnpocjmxF23WADTNHMNR/XfubGH/8rjpLe4geL8w3Dx80I
Sr4LwEZ3eDUaVqhReKhffzFQtWecW1wyx+r1AVIIvZsMvlOmESv1HlOVGwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFEgtFSeM3C0AYB+uAXNEeJBK58VIMB8GA1UdIwQY
MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt
NDJiM2Q2OGI1Njc2LzEvU0MwVko0emNMUUJnSDY0QmMwUjRrRXJueFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2
LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEowDQYJ
KoZIhvcNAQELBQADggEBAJBlRecaffthfSWrZnAu2Cx0IOCJpxMxn3vlaz/zgKSP
VX17ZDfkJfsCf9Bzg65Ozjii7WyZHS5Rv+nDO85wyvG2R2UDpg4OFGf1ufdKyvdw
PSzgotAHQG2/bZNlrMRcTBgRY1O/71VsUQ8+fm4zxwQL0TLzlUhLoRjE+CWlWTcR
tWPkFvJ7lm697ud5VioqeHQ8IVKzVs/iMr5977VicAunKrEgdhDQYtcLsfmHAAUD
R5KjtI9Z5IRDxbJtom/pzwZqOCoszhfdWdHP26jktT56m7QIP5cdgEcipH9TRhwx
2G9hiLHeb3j7piwfe9gOh2L2jOKgqcHUhCYxdJ7v7kg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org