Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/phHGA8HWAnMbIbOL3ewZAuPdCLA.roa
File: phHGA8HWAnMbIbOL3ewZAuPdCLA.roa (raw, json)
Hash identifier: 3hBjFP/tpQqm6xcGHHzjAvb8H9Eb/WBaarhZQEhy8ow=
Subject key identifier: A6:11:C6:03:C1:D6:02:73:1B:21:B3:8B:DD:EC:19:02:E3:DD:08:B0
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 018CC8704CDAF70A20CF4EE07C236FBBDF6D
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/phHGA8HWAnMbIbOL3ewZAuPdCLA.roa
Signing time: Tue 02 Jan 2024 04:30:51 +0000
ROA not before: Tue 02 Jan 2024 04:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39098
IP address blocks: 156.10.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:4c:da:f7:0a:20:cf:4e:e0:7c:23:6f:bb:df:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Jan 2 04:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a611c603c1d602731b21b38bddec1902e3dd08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:cd:c0:d9:5b:03:f1:94:dd:31:8c:07:8f:
6f:aa:8e:3d:26:67:b9:ec:38:6e:8a:9a:09:26:30:
93:28:60:db:59:e9:da:eb:c7:3d:ee:12:f4:5e:c4:
19:17:48:e0:9d:1c:e1:de:a0:fe:51:93:b6:94:c2:
b0:65:b3:98:07:ab:87:93:36:3d:c2:f9:14:a9:ef:
5c:58:1e:82:da:87:f0:eb:2b:4e:11:20:fe:cc:39:
9d:6a:78:5a:5c:8b:ce:0f:92:91:e5:af:39:7b:a4:
b7:05:84:d2:f4:25:0e:03:5d:bd:21:34:f7:cb:4a:
26:ee:66:44:32:6f:c4:e5:ff:26:46:52:7d:59:34:
60:68:bd:93:b9:03:3d:09:d6:42:2e:f1:5f:36:b8:
07:1e:c2:1a:a9:bc:82:c9:2e:b4:55:31:ac:72:97:
8d:6f:12:48:ab:de:89:2a:2d:19:8a:11:e7:2e:44:
42:83:5d:fb:06:71:20:f6:bf:e2:9b:33:b9:a0:a7:
b1:3f:dc:6c:50:22:0f:9d:30:56:96:be:1f:cb:69:
6b:f3:91:d0:87:7c:c1:c2:c9:a6:ba:07:95:6e:ed:
f0:72:dd:e7:34:0a:b1:51:b7:8f:7f:3c:91:83:ab:
6d:fc:c3:48:1d:ca:c7:32:a1:d4:1f:28:a2:fa:18:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:C6:03:C1:D6:02:73:1B:21:B3:8B:DD:EC:19:02:E3:DD:08:B0
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/phHGA8HWAnMbIbOL3ewZAuPdCLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:b1:ab:43:d1:f6:c4:dc:20:c1:44:56:2d:1c:85:c8:13:dd:
71:b7:52:a8:e4:63:02:6a:85:32:de:d9:c7:c4:8b:d2:3b:ba:
4d:11:e4:69:02:27:38:10:61:61:f4:93:95:c6:2a:e1:f7:56:
c9:b4:4f:04:32:19:fe:32:08:ed:01:ce:76:01:ae:c9:0b:78:
46:18:fc:91:66:ae:a1:78:30:ca:aa:71:27:bc:07:55:7b:2f:
bd:73:c7:d1:71:5f:c7:13:c1:36:62:23:24:b4:e9:6c:f1:03:
ce:76:06:02:c4:de:be:dd:c3:3a:50:d7:22:4b:0e:bf:ea:5a:
92:20:e7:fb:da:b6:db:e6:6d:81:1b:25:12:24:0e:5f:e4:d4:
57:d4:ae:c3:97:76:f0:c2:c3:76:03:77:98:e7:70:3d:25:e0:
7a:dc:fc:97:d6:8d:16:a8:1b:04:da:ec:9b:f9:cd:ff:74:58:
f5:aa:57:7e:90:b3:c4:d5:62:34:f9:6f:1f:46:ff:a4:fd:98:
5f:3f:35:6b:b5:93:76:1a:d8:b0:5b:de:e3:13:80:91:fe:b4:
ff:9f:31:76:e8:46:f3:3e:eb:ba:64:f8:38:d7:6c:21:dc:20:
d7:8e:cc:6a:e4:f2:f1:90:fd:b9:bd:e0:ce:99:02:92:5c:17:
37:b5:e4:52
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzIcEza9wogz07gfCNvu99tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmZmYWE5YjdmY2U0MDgyNzE4MWE1YWEwYWNlZTk5YTQ2
NjkxNTYwHhcNMjQwMTAyMDQzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjExYzYwM2MxZDYwMjczMWIyMWIzOGJkZGVjMTkwMmUzZGQwOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUHNwNlbA/GU3TGMB49vqo49Jme5
7DhuipoJJjCTKGDbWena68c97hL0XsQZF0jgnRzh3qD+UZO2lMKwZbOYB6uHkzY9
wvkUqe9cWB6C2ofw6ytOESD+zDmdanhaXIvOD5KR5a85e6S3BYTS9CUOA129ITT3
y0om7mZEMm/E5f8mRlJ9WTRgaL2TuQM9CdZCLvFfNrgHHsIaqbyCyS60VTGscpeN
bxJIq96JKi0ZihHnLkRCg137BnEg9r/imzO5oKexP9xsUCIPnTBWlr4fy2lr85HQ
h3zBwsmmugeVbu3wct3nNAqxUbePfzyRg6tt/MNIHcrHMqHUHyii+hjWJwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKYRxgPB1gJzGyGzi93sGQLj3QiwMB8GA1UdIwQY
MBaAFHBv+qm3/OQIJxgaWqCs7pmkZpFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTY3OGYtYzYwNS00NjU1LTkzNTkt
MTBmZWRjY2QyOTI0LzEvcGhIR0E4SFdBbk1iSWJPTDNld1pBdVBkQ0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yOTY3OGYtYzYwNS00NjU1LTkzNTktMTBmZWRjY2QyOTI0
LzEvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAowDQYJ
KoZIhvcNAQELBQADggEBAHaxq0PR9sTcIMFEVi0chcgT3XG3UqjkYwJqhTLe2cfE
i9I7uk0R5GkCJzgQYWH0k5XGKuH3Vsm0TwQyGf4yCO0BznYBrskLeEYY/JFmrqF4
MMqqcSe8B1V7L71zx9FxX8cTwTZiIyS06WzxA852BgLE3r7dwzpQ1yJLDr/qWpIg
5/vattvmbYEbJRIkDl/k1FfUrsOXdvDCw3YDd5jncD0l4Hrc/JfWjRaoGwTa7Jv5
zf90WPWqV36Qs8TVYjT5bx9G/6T9mF8/NWu1k3Ya2LBb3uMTgJH+tP+fMXboRvM+
67pk+DjXbCHcINeOzGrk8vGQ/bm94M6ZApJcFze15FI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:58:39 2025 by rpki-client