Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/wbZkJZLVRCuxV2LVpD9FhY3Kv_w.roa
File: wbZkJZLVRCuxV2LVpD9FhY3Kv_w.roa (raw, json)
Hash identifier: pYYdhRlJR9XQH65NBeniGFvj8UquZLbkExmj+r6C0KQ=
Subject key identifier: C1:B6:64:25:92:D5:44:2B:B1:57:62:D5:A4:3F:45:85:8D:CA:BF:FC
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 01856D81AABFD5132B8F146D0817565A7C2A
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/wbZkJZLVRCuxV2LVpD9FhY3Kv_w.roa
Signing time: Sun 01 Jan 2023 13:24:52 +0000
ROA not before: Sun 01 Jan 2023 13:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 147.78.229.0/24 maxlen: 32
147.78.231.0/24 maxlen: 32
147.78.230.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:aa:bf:d5:13:2b:8f:14:6d:08:17:56:5a:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: Jan 1 13:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1b6642592d5442bb15762d5a43f45858dcabffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:00:1a:f5:aa:f5:82:40:65:e2:b2:e0:25:
86:c2:c2:77:a0:a8:31:b2:0a:d9:47:b3:da:04:06:
33:a1:da:af:d3:54:1f:ec:7c:0d:1d:5e:e9:4e:dd:
09:9e:5c:68:f3:d6:4d:41:30:f2:01:ab:81:09:2f:
2b:8d:29:e0:f4:32:b4:96:56:46:64:f9:e5:39:47:
88:fc:c5:3a:3e:83:82:07:85:43:f0:79:ae:76:c1:
54:e7:c5:57:e1:6d:b7:c1:ac:b9:aa:dd:ba:a5:8d:
4b:2b:01:b4:32:2e:73:5a:dc:18:79:ee:d3:9b:38:
79:4c:08:c5:4d:b0:f5:87:51:12:be:7c:a6:25:81:
09:fd:81:ae:9d:d3:15:ac:98:70:7c:e4:45:40:f9:
93:15:b2:67:27:85:aa:af:90:f1:84:9b:3d:bd:e8:
bb:53:95:19:13:fd:b0:d8:92:66:41:18:d8:04:7a:
61:82:64:5c:bc:81:23:76:cc:aa:c3:bf:99:0c:9d:
60:92:76:d4:57:02:ba:ef:f6:80:68:80:4e:59:a1:
3f:d3:e6:ce:bc:d9:7e:b1:ab:a9:aa:16:e9:07:a9:
a1:fb:94:72:6f:50:e3:ca:76:c6:34:39:b5:37:69:
53:c2:83:64:66:17:0f:0d:16:60:7b:24:83:32:6c:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:64:25:92:D5:44:2B:B1:57:62:D5:A4:3F:45:85:8D:CA:BF:FC
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/wbZkJZLVRCuxV2LVpD9FhY3Kv_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.229.0-147.78.231.255
Signature Algorithm: sha256WithRSAEncryption
e2:ab:b1:b2:09:bd:06:a3:4a:2c:06:81:58:1f:c2:4f:3a:60:
77:5a:9b:dd:86:20:5c:e1:2c:b7:62:2a:8e:01:0a:c5:6c:26:
62:2c:a6:7d:7f:61:75:a0:42:8b:83:a3:fb:f9:8a:14:7c:fc:
b6:42:a2:ab:22:36:3e:b3:51:fe:63:43:00:bc:d0:4c:0f:c9:
9d:aa:b2:b5:51:54:47:1b:5f:a4:93:d0:2f:3d:17:3a:80:fc:
d4:59:38:b2:1b:2e:8c:36:93:3a:17:23:76:50:4e:cf:50:71:
f3:d5:64:d8:50:09:f0:68:6d:a7:b6:08:de:9a:c8:36:06:42:
db:95:3d:97:97:d0:fd:0b:ad:d3:1f:b7:88:77:f9:95:69:b5:
3e:c9:02:53:09:79:7d:22:1e:89:78:0b:40:92:9b:0c:b5:cb:
66:d8:c3:5d:f7:ce:ff:cd:fa:67:d3:97:14:89:91:4d:95:c9:
7d:28:c2:a8:d8:31:14:c1:e9:45:0f:35:83:d9:d9:f2:51:e3:
3e:5c:57:f8:2c:83:73:a7:4f:48:cc:d9:2d:c7:b3:e8:50:90:
1e:1f:9e:58:34:f7:18:0c:90:95:b4:a2:67:c8:b1:b0:57:f6:
39:42:34:b2:9b:33:36:68:be:8b:dc:ed:86:5c:ca:ed:78:06:
fc:0f:2b:f7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtgaq/1RMrjxRtCBdWWnwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjI0ZDg5NWJmOWMwYTVmZDAwMGE0NWEzNDc1MTBiMmEw
ODdmYjgwHhcNMjMwMTAxMTMyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWI2NjQyNTkyZDU0NDJiYjE1NzYyZDVhNDNmNDU4NThkY2FiZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntcAGvWq9YJAZeKy4CWGwsJ3oKgx
sgrZR7PaBAYzodqv01Qf7HwNHV7pTt0Jnlxo89ZNQTDyAauBCS8rjSng9DK0llZG
ZPnlOUeI/MU6PoOCB4VD8HmudsFU58VX4W23way5qt26pY1LKwG0Mi5zWtwYee7T
mzh5TAjFTbD1h1ESvnymJYEJ/YGundMVrJhwfORFQPmTFbJnJ4Wqr5DxhJs9vei7
U5UZE/2w2JJmQRjYBHphgmRcvIEjdsyqw7+ZDJ1gknbUVwK67/aAaIBOWaE/0+bO
vNl+saupqhbpB6mh+5Ryb1DjynbGNDm1N2lTwoNkZhcPDRZgeySDMmzvXwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMG2ZCWS1UQrsVdi1aQ/RYWNyr/8MB8GA1UdIwQY
MBaAFFSyTYlb+cCl/QAKRaNHUQsqCH+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAt
ZmNiOWJkMDViMWFiLzEvd2Jaa0paTFZSQ3V4VjJMVnBEOUZoWTNLdl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAtZmNiOWJkMDViMWFi
LzEvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACTTuUD
BAOTTuAwDQYJKoZIhvcNAQELBQADggEBAOKrsbIJvQajSiwGgVgfwk86YHdam92G
IFzhLLdiKo4BCsVsJmIspn1/YXWgQouDo/v5ihR8/LZCoqsiNj6zUf5jQwC80EwP
yZ2qsrVRVEcbX6ST0C89FzqA/NRZOLIbLow2kzoXI3ZQTs9QcfPVZNhQCfBobae2
CN6ayDYGQtuVPZeX0P0LrdMft4h3+ZVptT7JAlMJeX0iHol4C0CSmwy1y2bYw133
zv/N+mfTlxSJkU2VyX0owqjYMRTB6UUPNYPZ2fJR4z5cV/gsg3OnT0jM2S3Hs+hQ
kB4fnlg09xgMkJW0omfIsbBX9jlCNLKbMzZovovc7YZcyu14BvwPK/c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:50 2024 by rpki-client on console-ams.rpki-client.org