Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/UhOqHPI150kC_i2BQ8-CAWElnlE.roa
File: UhOqHPI150kC_i2BQ8-CAWElnlE.roa (raw, json)
Hash identifier: ll3wVNSBgJYo4vcxdTDSywiHstuI+PSjQ11/peLV9QI=
Subject key identifier: 52:13:AA:1C:F2:35:E7:49:02:FE:2D:81:43:CF:82:01:61:25:9E:51
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 01856FF0650D16D69E863F820B57E6F1B296
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/UhOqHPI150kC_i2BQ8-CAWElnlE.roa
Signing time: Mon 02 Jan 2023 00:45:03 +0000
ROA not before: Mon 02 Jan 2023 00:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394161
IP address blocks: 213.244.145.0/24 maxlen: 24
62.67.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:65:0d:16:d6:9e:86:3f:82:0b:57:e6:f1:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 00:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5213aa1cf235e74902fe2d8143cf820161259e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:b2:3a:1a:5a:c7:83:28:54:2d:e4:0f:51:
fc:01:f4:63:aa:33:49:1a:ae:fe:2a:4c:7b:25:73:
f6:cf:02:6c:14:35:5a:56:d8:5b:07:8f:d7:f5:34:
73:54:09:4f:2f:d6:8b:44:88:d8:28:41:52:1e:12:
e6:48:59:bd:60:4b:23:60:41:be:10:d8:5d:a5:32:
d6:cf:89:b2:94:73:38:c2:1d:2a:73:d0:39:72:a1:
1c:b4:d0:f5:ce:16:5a:b8:8e:43:06:b4:3c:77:a7:
24:4b:82:b3:67:af:bf:cf:33:07:83:68:0f:9e:e4:
3c:0a:69:3b:17:43:68:46:d7:59:36:38:ec:57:59:
d2:7b:f4:84:19:02:a8:d3:0d:f0:1f:8f:d9:f5:7e:
18:18:27:af:0e:25:01:9b:dc:8e:af:6d:59:09:c5:
8c:bd:b2:e0:3c:38:d0:cf:49:d7:e3:b7:58:2a:07:
a9:9d:b4:e9:a5:bf:0c:7b:b4:11:11:7a:26:55:c6:
be:11:89:b0:2f:90:71:69:fc:36:9e:9e:5c:61:b6:
70:a3:33:a9:03:e8:c7:ec:f6:20:2b:49:f1:ff:6b:
33:ba:69:f3:9b:32:1c:da:bd:ff:fb:25:15:27:cb:
dd:5a:04:53:df:f1:19:1f:94:4b:8f:ee:21:ec:9a:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:AA:1C:F2:35:E7:49:02:FE:2D:81:43:CF:82:01:61:25:9E:51
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/UhOqHPI150kC_i2BQ8-CAWElnlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.67.197.0/24
213.244.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2a:a1:0b:e7:00:88:f8:9f:97:1e:7e:de:8b:03:53:ff:84:
02:1e:25:c6:bf:fb:a9:aa:38:14:c0:6b:53:ba:c1:1f:85:bb:
9d:c1:b6:03:da:26:43:44:69:d2:25:48:83:35:f7:48:74:1b:
c7:3a:65:1a:00:b2:66:98:cc:69:3c:8b:34:34:75:63:da:b2:
af:5a:bc:ea:3b:32:cc:58:c9:6f:47:a0:02:44:16:9b:e6:80:
c9:99:7e:55:bb:51:b0:53:b0:55:70:16:24:2e:2d:69:96:18:
f0:53:88:07:71:a8:68:03:60:c7:71:18:ee:92:f5:f6:58:31:
3e:c1:b9:29:5b:78:49:36:55:dd:c2:82:85:5f:43:a0:1e:b9:
42:1b:04:2d:dc:89:e5:9f:7b:23:12:21:e1:7c:64:4e:80:cf:
48:47:fa:a2:4e:c1:25:dd:06:7a:a5:16:b1:c1:65:0a:31:50:
72:e7:e7:48:0c:6b:96:83:5c:b4:5f:f0:64:97:de:32:04:97:
18:ab:68:c9:83:a9:c8:c7:c5:20:76:88:72:bb:e5:0d:0c:41:
1e:e9:10:3f:9f:2d:e2:0d:5b:a8:9b:44:5e:bd:df:28:11:35:
6f:6f:7f:b0:d2:67:40:57:f2:1d:bc:34:06:6c:51:a7:1c:ef:
94:ca:d9:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv8GUNFtaehj+CC1fm8bKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk
MzcxMjkwHhcNMjMwMTAyMDA0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjEzYWExY2YyMzVlNzQ5MDJmZTJkODE0M2NmODIwMTYxMjU5ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rSyOhpax4MoVC3kD1H8AfRjqjNJ
Gq7+Kkx7JXP2zwJsFDVaVthbB4/X9TRzVAlPL9aLRIjYKEFSHhLmSFm9YEsjYEG+
ENhdpTLWz4mylHM4wh0qc9A5cqEctND1zhZauI5DBrQ8d6ckS4KzZ6+/zzMHg2gP
nuQ8Cmk7F0NoRtdZNjjsV1nSe/SEGQKo0w3wH4/Z9X4YGCevDiUBm9yOr21ZCcWM
vbLgPDjQz0nX47dYKgepnbTppb8Me7QREXomVca+EYmwL5Bxafw2np5cYbZwozOp
A+jH7PYgK0nx/2szumnzmzIc2r3/+yUVJ8vdWgRT3/EZH5RLj+4h7Jp6SwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFITqhzyNedJAv4tgUPPggFhJZ5RMB8GA1UdIwQY
MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt
M2JiNGQ2MjAwNTE4LzEvVWhPcUhQSTE1MGtDX2kyQlE4LUNBV0VsbmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4
LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkPFAwQA
1fSRMA0GCSqGSIb3DQEBCwUAA4IBAQAsKqEL5wCI+J+XHn7eiwNT/4QCHiXGv/up
qjgUwGtTusEfhbudwbYD2iZDRGnSJUiDNfdIdBvHOmUaALJmmMxpPIs0NHVj2rKv
WrzqOzLMWMlvR6ACRBab5oDJmX5Vu1GwU7BVcBYkLi1plhjwU4gHcahoA2DHcRju
kvX2WDE+wbkpW3hJNlXdwoKFX0OgHrlCGwQt3Inln3sjEiHhfGROgM9IR/qiTsEl
3QZ6pRaxwWUKMVBy5+dIDGuWg1y0X/Bkl94yBJcYq2jJg6nIx8Ugdohyu+UNDEEe
6RA/ny3iDVuom0Revd8oETVvb3+w0mdAV/IdvDQGbFGnHO+Uytnr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org