Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/suN_eMOhUP47yrCagF3gwBdxyxU.roa
File: suN_eMOhUP47yrCagF3gwBdxyxU.roa (raw, json)
Hash identifier: A7EMJZl0b9swh4RvrUjp8hegy6p2tmqS4dhfDTsrBPU=
Subject key identifier: B2:E3:7F:78:C3:A1:50:FE:3B:CA:B0:9A:80:5D:E0:C0:17:71:CB:15
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 0185734CAAF5C19E7E79F575A7A79DDA2172
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/suN_eMOhUP47yrCagF3gwBdxyxU.roa
Signing time: Mon 02 Jan 2023 16:24:42 +0000
ROA not before: Mon 02 Jan 2023 16:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26506
IP address blocks: 78.89.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:aa:f5:c1:9e:7e:79:f5:75:a7:a7:9d:da:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Jan 2 16:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2e37f78c3a150fe3bcab09a805de0c01771cb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:45:6b:59:4f:12:c7:70:2f:79:2b:42:b4:
30:d4:f5:78:cd:47:60:41:13:20:27:98:74:3b:25:
dc:c6:7d:36:68:28:06:8f:cd:af:48:dd:ac:b0:40:
f1:f8:e0:dc:fc:cf:91:70:b7:59:25:dc:57:60:44:
b3:8d:c1:aa:b3:17:73:99:a9:b8:76:4c:1a:4e:f1:
0f:20:da:6f:2e:4e:39:91:00:c6:4d:ce:1a:bc:a7:
de:14:05:06:70:ff:98:71:29:26:8c:cb:96:7e:70:
50:da:11:d0:b3:db:a6:1a:62:87:fd:ed:b3:1c:93:
5b:e5:34:ae:a1:05:b3:01:b7:0d:51:62:5d:34:97:
78:97:c7:04:63:c7:a6:56:c1:68:30:3e:f0:ac:80:
c1:91:3b:dd:2f:b7:31:2f:b9:18:35:d1:c5:4b:b6:
f2:9e:48:a3:f7:32:ed:09:0a:2c:56:4c:0f:33:24:
1b:45:6e:0b:63:ea:4b:56:64:f1:c2:3a:97:b5:f1:
2a:27:ed:d6:4f:94:b7:2e:65:86:84:2c:e2:fa:b2:
38:e5:84:c4:7d:00:50:bc:a4:c5:41:5c:a2:e0:a1:
9c:80:82:9c:0d:7a:86:e3:b5:af:c2:e1:32:f9:62:
d3:34:12:66:53:d7:23:ac:59:e6:12:82:6b:60:9f:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:7F:78:C3:A1:50:FE:3B:CA:B0:9A:80:5D:E0:C0:17:71:CB:15
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/suN_eMOhUP47yrCagF3gwBdxyxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.89.148.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c6:c1:b5:ae:cb:88:90:4b:da:1e:e4:78:ea:07:e9:2a:8d:
6c:58:20:b4:9a:28:63:aa:03:ca:dd:85:f8:d8:05:ea:63:c7:
18:3a:17:b2:01:4d:b5:7a:f0:1d:f9:35:e2:1f:5a:c6:59:40:
c6:5f:58:24:34:cc:5e:15:1f:fd:82:f3:22:4a:ff:95:22:37:
c9:a1:9e:94:00:9a:fc:33:be:bb:14:f5:ea:a3:09:36:0d:39:
1f:8e:c3:54:76:ef:f6:b8:7e:c1:d2:9f:23:50:21:29:8f:c9:
41:47:1a:e2:c9:b0:2d:63:4a:7b:45:69:ff:d4:2a:e4:84:75:
d8:c1:ed:8d:8a:9a:a1:f9:5c:4a:06:97:d5:70:84:48:6d:8d:
72:4a:be:12:ef:e4:db:30:27:4a:c4:89:f0:cb:aa:97:1e:9b:
39:27:e7:27:4e:48:67:0e:ce:1c:4b:13:06:4f:65:1d:68:71:
a6:e3:63:5c:0e:bc:ff:8d:98:fc:d3:d8:e1:94:09:cb:b5:15:
9f:3f:e3:f7:ce:95:bd:89:78:d7:48:47:16:c1:6f:db:13:6a:
87:fb:8f:30:83:9f:e1:b3:f7:8d:b0:af:78:89:d1:29:00:36:
8b:be:61:50:35:b1:ca:a2:b4:c6:fc:e3:b3:ba:5e:c2:23:66:
43:30:2d:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzTKr1wZ5+efV1p6ed2iFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NjM2YWI4MWEzNDNhOWZmZDgyNTdlYWNiMWRkZWM1Mzg5
NjY4MDQwHhcNMjMwMTAyMTYyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmUzN2Y3OGMzYTE1MGZlM2JjYWIwOWE4MDVkZTBjMDE3NzFjYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG5Fa1lPEsdwL3krQrQw1PV4zUdg
QRMgJ5h0OyXcxn02aCgGj82vSN2ssEDx+ODc/M+RcLdZJdxXYESzjcGqsxdzmam4
dkwaTvEPINpvLk45kQDGTc4avKfeFAUGcP+YcSkmjMuWfnBQ2hHQs9umGmKH/e2z
HJNb5TSuoQWzAbcNUWJdNJd4l8cEY8emVsFoMD7wrIDBkTvdL7cxL7kYNdHFS7by
nkij9zLtCQosVkwPMyQbRW4LY+pLVmTxwjqXtfEqJ+3WT5S3LmWGhCzi+rI45YTE
fQBQvKTFQVyi4KGcgIKcDXqG47WvwuEy+WLTNBJmU9cjrFnmEoJrYJ/pRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLLjf3jDoVD+O8qwmoBd4MAXccsVMB8GA1UdIwQY
MBaAFOZjargaNDqf/YJX6ssd3sU4lmgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQt
OTg3NmFlYmJkMmM5LzEvc3VOX2VNT2hVUDQ3eXJDYWdGM2d3QmR4eXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQtOTg3NmFlYmJkMmM5
LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlmUMA0G
CSqGSIb3DQEBCwUAA4IBAQB5xsG1rsuIkEvaHuR46gfpKo1sWCC0mihjqgPK3YX4
2AXqY8cYOheyAU21evAd+TXiH1rGWUDGX1gkNMxeFR/9gvMiSv+VIjfJoZ6UAJr8
M767FPXqowk2DTkfjsNUdu/2uH7B0p8jUCEpj8lBRxriybAtY0p7RWn/1CrkhHXY
we2Nipqh+VxKBpfVcIRIbY1ySr4S7+TbMCdKxInwy6qXHps5J+cnTkhnDs4cSxMG
T2UdaHGm42NcDrz/jZj809jhlAnLtRWfP+P3zpW9iXjXSEcWwW/bE2qH+48wg5/h
s/eNsK94idEpADaLvmFQNbHKorTG/OOzul7CI2ZDMC3H
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:37 2024 by rpki-client on console-ams.rpki-client.org