Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/ut2YqYYYjxKNWOWEUjBmj2nQB2c.roa
File: ut2YqYYYjxKNWOWEUjBmj2nQB2c.roa (raw, json)
Hash identifier: 3NhqjR8M1y0hBVjnfkGOIIBz4YKaD5Q4kxU/aVVILys=
Subject key identifier: BA:DD:98:A9:86:18:8F:12:8D:58:E5:84:52:30:66:8F:69:D0:07:67
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01856EA6BE92355D25F13C8A846932E91262
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/ut2YqYYYjxKNWOWEUjBmj2nQB2c.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204392
IP address blocks: 78.159.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:be:92:35:5d:25:f1:3c:8a:84:69:32:e9:12:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=badd98a986188f128d58e5845230668f69d00767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:e1:e0:a0:80:f5:0a:3e:b7:a6:0e:77:e9:
4f:dd:f1:6c:44:b5:a9:b6:3c:73:19:8a:9c:3c:7f:
93:5d:94:34:f3:85:8c:b1:7e:c4:7a:f1:4c:f2:1b:
90:3d:b0:30:d0:67:f3:fc:67:91:f3:87:6c:72:21:
13:6d:fc:a9:a4:90:7d:c8:9c:62:16:64:fe:6f:f6:
60:f5:09:24:a7:83:eb:e0:f0:2e:19:63:bf:58:a2:
40:43:61:91:e7:1d:17:9b:71:60:5d:b7:47:22:88:
da:d7:4b:df:aa:95:e1:5b:20:55:ee:6c:73:c9:f0:
1e:73:f3:ee:e1:36:0f:ff:21:19:56:e4:73:10:33:
87:77:0e:00:72:63:10:a4:df:08:5b:9d:87:85:11:
8b:d5:02:0f:4a:13:32:ca:b4:ca:2b:2f:b9:19:2a:
42:78:61:61:f2:9c:14:df:8d:37:38:cc:0d:c1:36:
2a:27:a2:25:f2:88:64:7d:d4:df:7a:57:c5:7c:5c:
18:1e:25:73:14:3e:10:1c:76:66:61:38:19:13:7d:
38:ae:eb:ae:65:0f:b2:0e:46:bb:97:51:7b:7c:90:
9d:58:00:8d:85:8a:24:8c:f7:0f:83:f4:8c:a7:51:
f7:a4:52:e3:d4:d4:b1:eb:7e:86:1c:ed:38:76:b9:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DD:98:A9:86:18:8F:12:8D:58:E5:84:52:30:66:8F:69:D0:07:67
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/ut2YqYYYjxKNWOWEUjBmj2nQB2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d7:0d:2d:ac:83:f7:2c:96:47:66:ff:a4:cd:bd:2b:67:a8:
34:c6:f5:31:ad:82:df:a3:ca:d7:41:d7:d8:9b:06:73:10:ea:
75:61:c2:4a:f0:09:45:9d:25:26:17:bc:27:37:b7:19:8e:95:
2d:1d:ef:b1:dc:77:bb:3c:17:16:d9:e1:4c:3d:ae:fe:04:1f:
50:d5:f7:de:6b:60:3b:d4:f1:47:05:3a:1f:87:3f:ea:f6:54:
71:96:d2:1f:7c:9c:50:13:6b:c7:97:10:5f:ea:47:d4:66:e5:
48:49:f3:35:8b:11:94:6f:ad:36:3e:bd:c3:22:53:eb:4b:3f:
34:3a:92:ad:06:67:bf:cb:8a:88:27:e3:79:c6:5e:c6:b4:83:
8f:5f:f8:7e:93:ba:00:61:99:d5:30:6a:26:f1:c2:71:9b:c4:
2e:6b:c4:8f:61:aa:56:88:02:8f:c2:bd:6a:c9:40:e6:ed:c8:
41:bd:3e:9d:2a:8a:a3:9a:76:ef:d1:36:aa:ee:e8:5b:db:af:
18:94:fd:a9:71:60:86:a3:3c:78:65:0c:36:3d:48:aa:19:d6:
49:5b:b8:bb:49:20:79:29:5b:2e:04:a4:a4:4d:f9:c1:97:fe:
3b:a5:e6:9b:a6:4d:57:e6:a9:8e:2d:ac:c0:f9:36:eb:06:96:
b3:0f:55:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupr6SNV0l8TyKhGky6RJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjMwMTAxMTg0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWRkOThhOTg2MTg4ZjEyOGQ1OGU1ODQ1MjMwNjY4ZjY5ZDAwNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLPh4KCA9Qo+t6YOd+lP3fFsRLWp
tjxzGYqcPH+TXZQ084WMsX7EevFM8huQPbAw0Gfz/GeR84dsciETbfyppJB9yJxi
FmT+b/Zg9Qkkp4Pr4PAuGWO/WKJAQ2GR5x0Xm3FgXbdHIoja10vfqpXhWyBV7mxz
yfAec/Pu4TYP/yEZVuRzEDOHdw4AcmMQpN8IW52HhRGL1QIPShMyyrTKKy+5GSpC
eGFh8pwU3403OMwNwTYqJ6Il8ohkfdTfelfFfFwYHiVzFD4QHHZmYTgZE304ruuu
ZQ+yDka7l1F7fJCdWACNhYokjPcPg/SMp1H3pFLj1NSx636GHO04drkABwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrdmKmGGI8SjVjlhFIwZo9p0AdnMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvdXQyWXFZWVlqeEtOV09XRVVqQm1qMm5RQjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9YMA0G
CSqGSIb3DQEBCwUAA4IBAQBl1w0trIP3LJZHZv+kzb0rZ6g0xvUxrYLfo8rXQdfY
mwZzEOp1YcJK8AlFnSUmF7wnN7cZjpUtHe+x3He7PBcW2eFMPa7+BB9Q1ffea2A7
1PFHBTofhz/q9lRxltIffJxQE2vHlxBf6kfUZuVISfM1ixGUb602Pr3DIlPrSz80
OpKtBme/y4qIJ+N5xl7GtIOPX/h+k7oAYZnVMGom8cJxm8Qua8SPYapWiAKPwr1q
yUDm7chBvT6dKoqjmnbv0Taq7uhb268YlP2pcWCGozx4ZQw2PUiqGdZJW7i7SSB5
KVsuBKSkTfnBl/47peabpk1X5qmOLazA+TbrBpazD1VH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:44 2024 by rpki-client on console-ams.rpki-client.org