Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/2HsGOgGRwb7wpgaxsOAZzhB-5pU.roa
File: 2HsGOgGRwb7wpgaxsOAZzhB-5pU.roa (raw, json)
Hash identifier: erNWlbnsdY4Dgad8gb/up6cwLWBaHcC+xEe3BB3bBCY=
Subject key identifier: D8:7B:06:3A:01:91:C1:BE:F0:A6:06:B1:B0:E0:19:CE:10:7E:E6:95
Certificate issuer: /CN=85af77d448a811387a71527fc334dcc4ff71de8f
Certificate serial: 018570B095AB05338E02E621E883B8E68C7B
Authority key identifier: 85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/2HsGOgGRwb7wpgaxsOAZzhB-5pU.roa
Signing time: Mon 02 Jan 2023 04:14:58 +0000
ROA not before: Mon 02 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 192.175.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:95:ab:05:33:8e:02:e6:21:e8:83:b8:e6:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af77d448a811387a71527fc334dcc4ff71de8f
Validity
Not Before: Jan 2 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d87b063a0191c1bef0a606b1b0e019ce107ee695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:c7:b1:53:64:be:f6:52:6d:ca:b2:ff:58:
c2:86:9e:4d:da:eb:39:52:ea:97:41:64:f2:3c:cb:
c4:59:a9:d5:d1:f7:a7:a4:64:53:4d:4e:d3:fa:5b:
7f:c2:e0:e4:e8:bb:83:fe:48:6a:63:be:cf:4b:69:
4f:cf:a9:84:c6:de:a6:d7:c0:88:65:4e:63:05:5c:
fb:e7:16:6c:d4:3e:5d:8c:5a:bb:ff:ae:33:dd:c5:
80:59:92:90:ff:16:ed:87:70:9e:c6:4f:01:f7:6f:
92:9f:af:19:da:ef:1e:a9:ca:d3:24:80:a3:6c:af:
97:ce:f0:84:38:4d:70:a3:f1:94:07:2a:92:08:4c:
b7:52:2b:18:d2:47:a2:0d:55:2a:a9:af:ee:33:d4:
66:66:30:e5:e1:57:88:73:47:40:a3:fb:fe:fd:63:
16:fc:d0:d4:c7:9e:92:9a:2d:6d:b8:e5:52:f2:a3:
52:15:cf:7b:d6:ad:21:8a:c7:83:4b:9a:35:18:cd:
79:ed:ff:d3:0f:0d:0e:a7:8c:f4:80:66:99:30:86:
6a:0a:8d:24:48:ef:7c:85:71:a6:4e:e3:fa:30:a5:
cd:47:a7:41:b4:78:6b:16:80:dc:68:47:f8:09:b6:
5d:9f:f1:f7:fd:66:21:ae:73:b6:a2:4f:f2:e3:9d:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:06:3A:01:91:C1:BE:F0:A6:06:B1:B0:E0:19:CE:10:7E:E6:95
X509v3 Authority Key Identifier:
keyid:85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/2HsGOgGRwb7wpgaxsOAZzhB-5pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.175.1.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4c:cc:e4:22:b2:49:e6:6c:b9:89:9a:f9:1a:bd:46:e6:9f:
17:86:66:dc:36:63:35:c2:67:df:23:3f:c9:f4:46:c1:d7:22:
ba:41:7b:c2:13:d6:b9:b8:6f:38:97:b1:3c:03:71:0f:5e:f8:
87:64:7c:cf:2e:ce:ff:2f:6d:19:20:06:99:07:c9:3f:6b:be:
30:4d:d5:c2:45:24:b3:2d:75:e5:29:81:17:15:6d:5f:b2:a1:
bb:30:48:34:2e:75:60:01:86:d8:31:11:47:92:f5:fd:99:91:
57:92:30:4c:c7:9c:81:c9:4a:6d:3a:f3:8d:10:56:54:8b:bb:
f5:b3:ef:56:fe:0a:3e:99:c7:24:c5:57:0c:43:df:c1:c9:32:
4b:a5:cf:cc:15:a7:3b:17:73:b8:43:fa:b3:57:78:47:5a:08:
38:bc:e9:82:10:c9:3e:83:29:87:34:97:df:0c:96:4a:6d:a7:
cf:25:67:de:ba:88:ac:dd:6d:d2:c9:69:c8:6a:7f:d4:8e:b4:
27:4b:24:8e:dc:4d:b5:13:b1:00:d6:0d:68:e9:1c:d4:0e:f3:
c1:f8:81:59:28:5d:9e:c2:2b:4b:56:f8:9f:dc:f2:a5:93:98:
15:ab:9f:fb:38:34:cd:98:4d:e7:0a:bc:54:93:46:6a:98:db:
cc:30:a9:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsJWrBTOOAuYh6IO45ox7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY3N2Q0NDhhODExMzg3YTcxNTI3ZmMzMzRkY2M0ZmY3
MWRlOGYwHhcNMjMwMTAyMDQxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODdiMDYzYTAxOTFjMWJlZjBhNjA2YjFiMGUwMTljZTEwN2VlNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcnHsVNkvvZSbcqy/1jChp5N2us5
UuqXQWTyPMvEWanV0fenpGRTTU7T+lt/wuDk6LuD/khqY77PS2lPz6mExt6m18CI
ZU5jBVz75xZs1D5djFq7/64z3cWAWZKQ/xbth3Cexk8B92+Sn68Z2u8eqcrTJICj
bK+XzvCEOE1wo/GUByqSCEy3UisY0keiDVUqqa/uM9RmZjDl4VeIc0dAo/v+/WMW
/NDUx56Smi1tuOVS8qNSFc971q0hiseDS5o1GM157f/TDw0Op4z0gGaZMIZqCo0k
SO98hXGmTuP6MKXNR6dBtHhrFoDcaEf4CbZdn/H3/WYhrnO2ok/y452kIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNh7BjoBkcG+8KYGsbDgGc4QfuaVMB8GA1UdIwQY
MBaAFIWvd9RIqBE4enFSf8M03MT/cd6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81NWRlNzMtZGQ1ZS00MTRmLWEzZDQt
MjFkN2RlMjQ5OWRlLzEvMkhzR09nR1J3Yjd3cGdheHNPQVp6aEItNXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81NWRlNzMtZGQ1ZS00MTRmLWEzZDQtMjFkN2RlMjQ5OWRl
LzEvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8BMA0G
CSqGSIb3DQEBCwUAA4IBAQCqTMzkIrJJ5my5iZr5Gr1G5p8XhmbcNmM1wmffIz/J
9EbB1yK6QXvCE9a5uG84l7E8A3EPXviHZHzPLs7/L20ZIAaZB8k/a74wTdXCRSSz
LXXlKYEXFW1fsqG7MEg0LnVgAYbYMRFHkvX9mZFXkjBMx5yByUptOvONEFZUi7v1
s+9W/go+mcckxVcMQ9/ByTJLpc/MFac7F3O4Q/qzV3hHWgg4vOmCEMk+gymHNJff
DJZKbafPJWfeuois3W3SyWnIan/UjrQnSySO3E21E7EA1g1o6RzUDvPB+IFZKF2e
witLVvif3PKlk5gVq5/7ODTNmE3nCrxUk0ZqmNvMMKl4
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:49 2024 by rpki-client on console-ams.rpki-client.org