Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H3RkEiwQCVIMo3eBMtqfub4POfg.roa
File: H3RkEiwQCVIMo3eBMtqfub4POfg.roa (raw, json)
Hash identifier: O5o5xF7uTP8zmySufvjQv3Nq5E9TFXpV5bojgxGI/jE=
Subject key identifier: 1F:74:64:12:2C:10:09:52:0C:A3:77:81:32:DA:9F:B9:BE:0F:39:F8
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DF4339C61D4EF77976CFB5FAE89C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H3RkEiwQCVIMo3eBMtqfub4POfg.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 269846
IP address blocks: 181.41.152.0/24 maxlen: 24
181.41.152.0/23 maxlen: 23
181.41.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:df:43:39:c6:1d:4e:f7:79:76:cf:b5:fa:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7464122c1009520ca3778132da9fb9be0f39f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:2d:e7:62:ed:f1:2d:73:45:fe:d0:54:7f:
e5:8a:4b:ea:17:a6:c7:03:11:4d:7a:17:4a:29:e5:
1f:6e:13:a8:4f:f4:cf:b8:ea:41:0b:9d:a9:7c:ad:
a1:fc:04:35:bd:10:fd:c3:02:99:a1:c9:aa:6a:c0:
82:c1:51:7b:02:26:7d:27:17:30:bb:2b:86:1b:85:
39:b2:a2:1f:d0:e8:16:e9:3a:a2:88:b7:6f:d0:2c:
c5:0e:eb:9d:4d:92:6e:7c:31:62:b3:f7:37:bc:41:
b9:55:13:eb:ca:91:fd:66:72:33:77:32:44:e0:1c:
0c:b1:dc:cf:5d:b7:53:5a:4f:2c:e0:5e:ef:3c:84:
b8:3f:dc:b6:0f:fe:43:b3:fa:04:e3:b0:fa:bb:0a:
5f:9e:0e:1e:74:5e:a3:f9:19:32:34:1c:f7:4d:f4:
15:fa:32:d3:af:d0:4d:0c:f6:37:10:f1:13:c8:2b:
62:ed:67:86:9c:9b:2b:73:8f:88:5a:62:96:ff:56:
8d:ba:27:ea:d9:9f:41:9a:e2:2a:e2:ec:18:e1:e7:
64:44:8f:68:7a:4e:10:de:7e:21:58:7a:46:f2:1c:
bc:e5:67:c1:89:01:e6:4d:5d:10:14:f6:4a:f3:80:
3f:4f:e8:a9:9c:61:41:dd:35:68:c5:a7:32:3b:96:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:64:12:2C:10:09:52:0C:A3:77:81:32:DA:9F:B9:BE:0F:39:F8
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H3RkEiwQCVIMo3eBMtqfub4POfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.152.0/23
Signature Algorithm: sha256WithRSAEncryption
51:8b:16:70:fb:b6:24:0f:0b:4d:32:04:91:fc:ac:bd:a2:be:
ad:7e:94:54:12:0c:20:19:e0:24:77:4b:dd:5f:14:25:c9:6c:
78:b0:4b:35:cc:2c:cd:94:64:cc:6b:72:ee:d3:6c:21:e9:1b:
02:24:12:0f:9b:6f:f0:30:9c:85:7c:07:d8:be:5c:61:9c:a0:
03:d2:25:2b:49:5b:5c:12:47:ff:9b:9c:70:e7:6c:2b:fa:f7:
7e:ae:7c:ed:9b:bd:1a:63:28:57:ea:c5:1e:88:a3:ec:a9:93:
8c:15:76:a6:8f:64:bb:4b:3e:e6:9c:05:bc:5d:28:f4:50:77:
c1:5b:69:0c:92:e6:ed:9a:3d:87:6c:f2:3c:7e:d6:be:6a:8f:
87:62:06:5d:6b:98:95:a5:a9:ef:6d:f1:c6:d3:2d:73:7b:be:
96:f3:5c:4e:81:04:9a:3f:e0:c2:9f:f5:9f:af:b1:2b:5d:35:
94:45:9f:11:2e:a9:63:c0:1f:7d:f0:c3:f7:ef:62:84:18:a8:
01:e5:c7:3f:8f:6e:fa:09:f9:48:93:28:f4:f8:4f:76:57:8d:
ef:27:8c:fc:ad:e2:b7:96:0d:ed:3a:82:11:11:53:2f:0d:f1:
d8:94:28:ab:e5:62:9a:cd:66:4d:dd:ff:0d:85:ba:b8:8e:f6:
0b:a1:05:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1N9DOcYdTvd5ds+1+uicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTAxMTkzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjc0NjQxMjJjMTAwOTUyMGNhMzc3ODEzMmRhOWZiOWJlMGYzOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Ut52Lt8S1zRf7QVH/likvqF6bH
AxFNehdKKeUfbhOoT/TPuOpBC52pfK2h/AQ1vRD9wwKZocmqasCCwVF7AiZ9Jxcw
uyuGG4U5sqIf0OgW6TqiiLdv0CzFDuudTZJufDFis/c3vEG5VRPrypH9ZnIzdzJE
4BwMsdzPXbdTWk8s4F7vPIS4P9y2D/5Ds/oE47D6uwpfng4edF6j+RkyNBz3TfQV
+jLTr9BNDPY3EPETyCti7WeGnJsrc4+IWmKW/1aNuifq2Z9BmuIq4uwY4edkRI9o
ek4Q3n4hWHpG8hy85WfBiQHmTV0QFPZK84A/T+ipnGFB3TVoxacyO5aFGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB90ZBIsEAlSDKN3gTLan7m+Dzn4MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvSDNSa0Vpd1FDVklNbzNlQk10cWZ1YjRQT2ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtSmYMA0G
CSqGSIb3DQEBCwUAA4IBAQBRixZw+7YkDwtNMgSR/Ky9or6tfpRUEgwgGeAkd0vd
XxQlyWx4sEs1zCzNlGTMa3Lu02wh6RsCJBIPm2/wMJyFfAfYvlxhnKAD0iUrSVtc
Ekf/m5xw52wr+vd+rnztm70aYyhX6sUeiKPsqZOMFXamj2S7Sz7mnAW8XSj0UHfB
W2kMkubtmj2HbPI8fta+ao+HYgZda5iVpanvbfHG0y1ze76W81xOgQSaP+DCn/Wf
r7ErXTWURZ8RLqljwB998MP372KEGKgB5cc/j276CflIkyj0+E92V43vJ4z8reK3
lg3tOoIREVMvDfHYlCir5WKazWZN3f8Nhbq4jvYLoQXd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:35 2024 by rpki-client on console-ams.rpki-client.org