Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/hePmONgEmNoEMYqcny04NDR_tjY.roa
File: hePmONgEmNoEMYqcny04NDR_tjY.roa (raw, json)
Hash identifier: o7M42QuFupQZcRBGR2NquwRlF0hMip0CAuNcCu5XPxY=
Subject key identifier: 85:E3:E6:38:D8:04:98:DA:04:31:8A:9C:9F:2D:38:34:34:7F:B6:36
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 0185736826F623F0B254D71E9D6BBF9ED466
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/hePmONgEmNoEMYqcny04NDR_tjY.roa
Signing time: Mon 02 Jan 2023 16:54:43 +0000
ROA not before: Mon 02 Jan 2023 16:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199345
IP address blocks: 176.124.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:26:f6:23:f0:b2:54:d7:1e:9d:6b:bf:9e:d4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Jan 2 16:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85e3e638d80498da04318a9c9f2d3834347fb636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:a1:da:84:6c:83:ff:cf:17:88:29:1e:9f:
fc:19:50:00:f8:42:4d:57:af:e8:0b:2c:39:17:d0:
5e:b5:c4:fa:94:23:be:8c:98:cc:f0:e7:28:73:98:
51:9b:85:d5:5d:74:b7:b7:98:f2:0a:b0:12:19:7e:
a9:b6:ad:be:87:77:ec:a9:b4:86:9d:c4:6f:26:c9:
78:90:4c:03:b4:c3:d4:d3:2c:e7:a5:68:81:1d:3e:
bb:c6:1a:62:37:aa:f7:1f:46:10:fa:11:b4:70:94:
60:dc:96:41:04:b1:d7:58:43:24:a2:e0:5a:ea:65:
cb:46:83:5e:36:16:a9:85:50:03:5b:c2:4d:f3:2e:
cc:24:f6:16:7b:a5:16:44:ea:a1:3b:47:8a:cd:2a:
df:43:c0:77:93:fd:70:21:01:e0:cc:e0:f4:e0:82:
8b:c0:b1:a8:25:c9:06:7e:89:52:38:1e:64:69:37:
91:13:32:6b:dc:0f:6f:e7:37:01:25:a1:a8:a4:92:
6d:d6:c7:39:d5:40:4c:e1:52:82:0a:60:c0:8c:4c:
cc:9d:bd:db:e5:31:ba:a2:00:cd:35:72:b8:09:3a:
6a:f4:61:a9:1c:50:5a:5a:92:fe:3c:b0:7c:c6:5a:
a5:c8:2c:cd:60:49:91:9a:66:d6:54:f9:a4:76:55:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:E6:38:D8:04:98:DA:04:31:8A:9C:9F:2D:38:34:34:7F:B6:36
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/hePmONgEmNoEMYqcny04NDR_tjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.148.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c4:a3:f8:ca:f8:4f:e0:f6:a5:c4:22:02:4e:09:fa:a6:37:
dd:8f:52:46:6d:6c:3f:f7:f3:84:41:96:83:6d:57:71:19:4c:
50:12:1c:d6:1e:e1:69:ae:81:d7:2a:e1:3e:9c:17:2e:59:ea:
2c:49:93:a1:71:5c:f4:22:16:31:07:e0:b3:33:dc:64:94:85:
e1:28:ac:e6:26:d7:1c:9d:11:0c:b5:54:8a:35:49:0e:c9:80:
c1:81:e2:8b:39:08:6b:7b:e2:d5:ee:2a:b1:7e:7d:3c:62:26:
56:65:74:8e:88:89:c8:11:53:17:ab:de:8a:4f:ba:6f:12:1d:
7b:65:3c:b3:ac:18:ac:d5:9d:2d:18:c4:d0:86:03:1c:ca:b7:
e6:69:2b:28:60:36:ea:7e:0e:bf:8b:be:51:92:09:13:2f:b1:
48:30:e7:50:cf:1e:98:4e:22:95:1e:ce:b2:c1:52:9c:c5:fe:
f3:16:2a:a5:9f:6f:5e:a3:a6:b4:8a:53:26:d6:7d:0a:f2:11:
2f:c7:6d:1a:1d:1e:e0:16:d1:da:44:16:74:f7:44:ce:1a:38:
e1:09:c0:62:4e:2d:16:cf:3a:66:26:0b:37:55:e5:02:9a:45:
2b:a8:ad:9b:e9:8a:b4:44:5f:50:39:b9:9b:34:3e:5f:41:a9:
d0:aa:fd:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzaCb2I/CyVNcenWu/ntRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWM0ODY4MDczOThhYzFjZWVjMDkyMWQwNGQ0MDlhNGY3
ZjQ3OWIwHhcNMjMwMTAyMTY1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWUzZTYzOGQ4MDQ5OGRhMDQzMThhOWM5ZjJkMzgzNDM0N2ZiNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkeh2oRsg//PF4gpHp/8GVAA+EJN
V6/oCyw5F9BetcT6lCO+jJjM8Ococ5hRm4XVXXS3t5jyCrASGX6ptq2+h3fsqbSG
ncRvJsl4kEwDtMPU0yznpWiBHT67xhpiN6r3H0YQ+hG0cJRg3JZBBLHXWEMkouBa
6mXLRoNeNhaphVADW8JN8y7MJPYWe6UWROqhO0eKzSrfQ8B3k/1wIQHgzOD04IKL
wLGoJckGfolSOB5kaTeREzJr3A9v5zcBJaGopJJt1sc51UBM4VKCCmDAjEzMnb3b
5TG6ogDNNXK4CTpq9GGpHFBaWpL+PLB8xlqlyCzNYEmRmmbWVPmkdlVj4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIXj5jjYBJjaBDGKnJ8tODQ0f7Y2MB8GA1UdIwQY
MBaAFCOsSGgHOYrBzuwJIdBNQJpPf0ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2Qt
NjE2MDViMjZmODJkLzEvaGVQbU9OZ0VtTm9FTVlxY255MDRORFJfdGpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2QtNjE2MDViMjZmODJk
LzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHyUMA0G
CSqGSIb3DQEBCwUAA4IBAQCXxKP4yvhP4PalxCICTgn6pjfdj1JGbWw/9/OEQZaD
bVdxGUxQEhzWHuFproHXKuE+nBcuWeosSZOhcVz0IhYxB+CzM9xklIXhKKzmJtcc
nREMtVSKNUkOyYDBgeKLOQhre+LV7iqxfn08YiZWZXSOiInIEVMXq96KT7pvEh17
ZTyzrBis1Z0tGMTQhgMcyrfmaSsoYDbqfg6/i75RkgkTL7FIMOdQzx6YTiKVHs6y
wVKcxf7zFiqln29eo6a0ilMm1n0K8hEvx20aHR7gFtHaRBZ090TOGjjhCcBiTi0W
zzpmJgs3VeUCmkUrqK2b6Yq0RF9QObmbND5fQanQqv0K
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:40 2024 by rpki-client on console-ams.rpki-client.org