Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa
File: eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa (raw, json)
Hash identifier: pTr5J+kMgdwaBK5RhC67fgapNrdztjBjeQqeCB22XmE=
Subject key identifier: 78:C2:EB:A3:66:15:06:F2:B4:77:1A:C5:91:37:E8:27:B3:BC:30:50
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295C8E2E5FEB50C559C77CAB4B2BAFD
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52468
IP address blocks: 81.199.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c8:e2:e5:fe:b5:0c:55:9c:77:ca:b4:b2:ba:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c2eba3661506f2b4771ac59137e827b3bc3050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:79:4e:e5:96:96:fa:8a:4a:07:df:c1:bd:
a6:c4:a1:29:e0:71:79:91:e8:9b:b2:76:c2:29:e9:
71:de:a0:a7:ab:9a:3c:df:09:1c:f7:f5:0d:42:35:
c6:0f:20:60:1d:3e:93:4c:dd:21:ef:f3:43:85:c0:
ec:e6:07:22:b3:1b:d2:e0:04:6e:93:9d:7f:2e:43:
d6:c9:47:78:ab:2e:26:15:ec:49:34:d5:41:7a:b8:
f6:35:f0:f9:c7:07:50:0c:b1:3b:8f:aa:ea:76:64:
bf:88:64:90:27:f8:cf:c9:1b:be:46:33:a1:71:d8:
d4:9e:7a:c7:9e:b6:0f:0f:b1:35:c4:ae:6e:b9:93:
71:b7:09:fe:f5:8e:99:bb:45:48:0e:fa:c0:3a:24:
6b:d3:51:a5:32:7d:90:4b:69:d2:14:6b:16:36:76:
14:88:19:c2:15:09:f8:74:7d:d0:20:25:3a:17:68:
20:bf:97:33:e5:32:ca:0f:b7:9e:5b:67:1d:64:ad:
8b:2a:1c:a4:8c:e4:4c:07:f4:a7:c7:e4:1b:0b:63:
b4:5e:6e:95:fe:7b:68:ea:89:ad:40:02:5d:5e:3f:
d2:45:77:c1:22:fe:ed:c1:1a:55:21:52:ad:0d:c8:
fa:75:ee:bb:ff:3c:26:ad:f9:31:32:a4:56:fa:c3:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:EB:A3:66:15:06:F2:B4:77:1A:C5:91:37:E8:27:B3:BC:30:50
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7e:c6:db:7d:e3:54:03:c3:ea:67:1f:b3:00:3f:8b:30:59:
76:58:8c:69:a4:79:a1:b7:0a:5e:36:6d:ca:ed:15:31:65:da:
87:dc:b2:c2:a5:5e:8c:89:f1:9b:3a:17:b5:5a:26:eb:a4:55:
88:4c:ce:20:8a:88:6e:c3:76:1f:91:38:d3:00:54:31:bf:fb:
14:24:4e:bf:6a:60:4f:8b:cc:2c:3c:68:0c:89:cd:34:b8:93:
78:0b:c0:fe:da:3a:99:80:ce:ef:7c:60:4c:0c:e0:ab:bc:62:
75:6b:93:af:5e:92:df:38:b0:4b:28:4b:4f:a3:f5:1f:7b:a2:
cc:4e:59:de:8e:5a:3b:ff:b9:08:c8:0c:6b:2e:9e:45:1b:56:
f0:0e:14:c4:05:19:af:11:6e:eb:03:d5:89:fb:34:c4:60:fe:
9f:7f:6e:8f:bf:b7:15:99:9b:32:93:d0:0d:5e:36:ad:1c:6d:
ad:85:ec:b8:9d:53:54:1c:55:73:fb:d5:56:e4:57:d5:9a:e2:
77:77:8c:15:a9:47:82:7a:a5:96:c7:f7:37:1a:3b:4d:08:a0:
3d:f4:9d:65:ee:da:a9:19:c6:13:0d:13:bf:f0:b2:bd:e2:1b:
68:75:de:c1:09:2d:d3:44:c0:7f:98:cd:a4:af:20:9e:35:8d:
42:c2:42:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVylcji5f61DFWcd8q0srr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjMwMTAyMTMwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMyZWJhMzY2MTUwNmYyYjQ3NzFhYzU5MTM3ZTgyN2IzYmMzMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcd5TuWWlvqKSgffwb2mxKEp4HF5
keibsnbCKelx3qCnq5o83wkc9/UNQjXGDyBgHT6TTN0h7/NDhcDs5gcisxvS4ARu
k51/LkPWyUd4qy4mFexJNNVBerj2NfD5xwdQDLE7j6rqdmS/iGSQJ/jPyRu+RjOh
cdjUnnrHnrYPD7E1xK5uuZNxtwn+9Y6Zu0VIDvrAOiRr01GlMn2QS2nSFGsWNnYU
iBnCFQn4dH3QICU6F2ggv5cz5TLKD7eeW2cdZK2LKhykjORMB/Snx+QbC2O0Xm6V
/nto6omtQAJdXj/SRXfBIv7twRpVIVKtDcj6de67/zwmrfkxMqRW+sPobwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjC66NmFQbytHcaxZE36CezvDBQMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvZU1Mcm8yWVZCdkswZHhyRmtUZm9KN084TUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcdzMA0G
CSqGSIb3DQEBCwUAA4IBAQCofsbbfeNUA8PqZx+zAD+LMFl2WIxppHmhtwpeNm3K
7RUxZdqH3LLCpV6MifGbOhe1WibrpFWITM4giohuw3YfkTjTAFQxv/sUJE6/amBP
i8wsPGgMic00uJN4C8D+2jqZgM7vfGBMDOCrvGJ1a5OvXpLfOLBLKEtPo/Ufe6LM
Tlnejlo7/7kIyAxrLp5FG1bwDhTEBRmvEW7rA9WJ+zTEYP6ff26Pv7cVmZsyk9AN
XjatHG2they4nVNUHFVz+9VW5FfVmuJ3d4wVqUeCeqWWx/c3GjtNCKA99J1l7tqp
GcYTDRO/8LK94htodd7BCS3TRMB/mM2kryCeNY1CwkI0
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:04 2024 by rpki-client on console-fra.rpki-client.org