Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/zH3hFowumjZs9yh-wZG0qOIVgdY.roa
File: zH3hFowumjZs9yh-wZG0qOIVgdY.roa (raw, json)
Hash identifier: WROEDgoGPP6/ZL3UJ5Jbrp9mWc9V+1Q+ysITbv6M8Js=
Subject key identifier: CC:7D:E1:16:8C:2E:9A:36:6C:F7:28:7E:C1:91:B4:A8:E2:15:81:D6
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018C87A972A098B6BF5295E9189E58B30DCC
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/zH3hFowumjZs9yh-wZG0qOIVgdY.roa
Signing time: Wed 20 Dec 2023 14:37:58 +0000
ROA not before: Wed 20 Dec 2023 14:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 5.180.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:a9:72:a0:98:b6:bf:52:95:e9:18:9e:58:b3:0d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Dec 20 14:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc7de1168c2e9a366cf7287ec191b4a8e21581d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:eb:62:85:1e:22:4e:f1:02:e6:11:9f:67:
7c:8d:65:33:5a:8c:dc:a8:f6:13:3b:4d:3e:46:ac:
16:e7:33:f3:a4:85:ed:af:07:7c:19:c8:b8:0d:e8:
4d:1b:90:60:61:4e:b6:20:ea:ed:19:db:ee:5d:26:
b1:03:dc:e9:d2:93:f3:9b:3f:48:e7:b1:0f:b5:83:
c1:62:15:94:5d:2b:61:55:73:28:18:af:e0:01:fd:
1e:45:c8:3a:7d:45:1a:d6:82:3e:25:10:31:69:22:
c8:b1:d3:a1:68:64:66:bd:f0:d3:24:29:0a:92:14:
92:2c:a4:df:09:52:43:05:68:9b:4d:05:62:55:1f:
da:29:63:04:26:78:cf:cc:6e:80:e2:dd:56:f0:79:
af:01:ca:8b:27:31:68:b7:66:3f:f8:ef:b9:79:88:
eb:d6:48:5d:c3:55:24:4a:12:4b:f0:c1:9f:f1:8c:
7c:e7:59:48:37:14:33:4b:9e:de:b0:73:6f:48:7b:
65:d1:83:8c:4f:e1:02:70:f6:63:59:95:a4:e7:be:
2f:44:83:f5:06:20:d0:13:b3:5a:01:4e:ea:14:44:
3c:88:7a:3e:98:5d:96:f2:0b:7b:ea:50:9b:ab:95:
93:95:ea:be:a3:dc:ea:43:d0:53:0a:33:a0:01:bd:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:E1:16:8C:2E:9A:36:6C:F7:28:7E:C1:91:B4:A8:E2:15:81:D6
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/zH3hFowumjZs9yh-wZG0qOIVgdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
96:90:be:8b:89:c9:10:cc:c6:25:a5:1f:cf:db:03:63:92:13:
4c:51:00:c9:d8:03:9c:9d:39:5e:2b:a8:5d:f1:e4:fc:67:53:
1d:fc:77:a8:ae:62:f9:cf:51:e1:fb:f1:de:4c:91:99:4c:36:
c1:d6:e0:a7:25:e0:1d:96:df:9b:c3:21:5f:33:eb:74:7a:ea:
d5:1b:fd:54:66:57:96:cc:82:bb:40:45:2c:c1:70:81:64:c0:
df:57:d2:cb:fa:9a:db:77:bb:3c:96:c9:f2:cf:05:cb:8d:78:
78:b3:6f:66:59:a9:7a:53:20:7d:c3:5e:2c:ff:0d:f6:42:15:
36:25:f4:05:20:72:9f:b6:b4:0f:bf:e2:15:9d:5e:1b:aa:bc:
82:91:94:5b:43:4f:c7:22:d5:88:e3:70:d1:07:d5:92:a9:0a:
2b:3b:0e:37:ae:a1:01:5c:ba:a7:41:ae:d7:0c:02:55:43:a0:
7f:8c:dc:c5:5c:ec:9e:0b:9b:be:f1:77:e2:a9:35:04:ed:bd:
08:35:d3:62:75:27:0f:c8:f0:51:2e:8b:c9:35:39:f2:e1:66:
3f:0c:3e:a5:f4:9b:b6:0b:29:13:d6:53:f9:42:12:e8:8e:0b:
31:39:61:05:15:c6:85:5e:8f:23:ba:47:73:b2:e6:1a:61:06:
1b:f5:ed:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyHqXKgmLa/UpXpGJ5Ysw3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjMxMjIwMTQzNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzdkZTExNjhjMmU5YTM2NmNmNzI4N2VjMTkxYjRhOGUyMTU4MWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8DrYoUeIk7xAuYRn2d8jWUzWozc
qPYTO00+RqwW5zPzpIXtrwd8Gci4DehNG5BgYU62IOrtGdvuXSaxA9zp0pPzmz9I
57EPtYPBYhWUXSthVXMoGK/gAf0eRcg6fUUa1oI+JRAxaSLIsdOhaGRmvfDTJCkK
khSSLKTfCVJDBWibTQViVR/aKWMEJnjPzG6A4t1W8HmvAcqLJzFot2Y/+O+5eYjr
1khdw1UkShJL8MGf8Yx851lINxQzS57esHNvSHtl0YOMT+ECcPZjWZWk574vRIP1
BiDQE7NaAU7qFEQ8iHo+mF2W8gt76lCbq5WTleq+o9zqQ9BTCjOgAb02lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMx94RaMLpo2bPcofsGRtKjiFYHWMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvekgzaEZvd3VtalpzOXloLXdaRzBxT0lWZ2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbSZMA0G
CSqGSIb3DQEBCwUAA4IBAQCWkL6LickQzMYlpR/P2wNjkhNMUQDJ2AOcnTleK6hd
8eT8Z1Md/HeormL5z1Hh+/HeTJGZTDbB1uCnJeAdlt+bwyFfM+t0eurVG/1UZleW
zIK7QEUswXCBZMDfV9LL+prbd7s8lsnyzwXLjXh4s29mWal6UyB9w14s/w32QhU2
JfQFIHKftrQPv+IVnV4bqryCkZRbQ0/HItWI43DRB9WSqQorOw43rqEBXLqnQa7X
DAJVQ6B/jNzFXOyeC5u+8XfiqTUE7b0INdNidScPyPBRLovJNTny4WY/DD6l9Ju2
CykT1lP5QhLojgsxOWEFFcaFXo8jukdzsuYaYQYb9e1y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:41 2024 by rpki-client on console-ams.rpki-client.org