Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/6CobUBwxAY3v6AZ3Fi-sgTZ9dqc.roa
File: 6CobUBwxAY3v6AZ3Fi-sgTZ9dqc.roa (raw, json)
Hash identifier: OnfpurDDqHi+YFxTQNG1l2GyPihbuKTxmJZwrPRf378=
Subject key identifier: E8:2A:1B:50:1C:31:01:8D:EF:E8:06:77:16:2F:AC:81:36:7D:76:A7
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D9419382B0470B5E6914FDA08F405BE
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/6CobUBwxAY3v6AZ3Fi-sgTZ9dqc.roa
Signing time: Sun 01 Jan 2023 13:45:00 +0000
ROA not before: Sun 01 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211193
IP address blocks: 5.178.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:19:38:2b:04:70:b5:e6:91:4f:da:08:f4:05:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e82a1b501c31018defe80677162fac81367d76a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:ee:a2:67:e6:65:72:2d:7c:60:e0:54:e0:
fa:ec:fe:73:d3:ed:92:69:39:dd:59:96:7d:0d:6e:
79:09:a1:c2:6b:10:2c:c3:1a:38:d7:a3:bf:d3:cf:
a4:1b:4e:60:ba:15:f9:63:71:d0:31:1e:4c:73:b1:
38:70:0f:fd:21:03:62:db:94:c3:03:43:a0:83:46:
0e:3f:f8:a6:51:74:fe:81:a3:5e:89:49:38:2f:dd:
10:8e:48:09:ad:98:8f:18:84:a2:9b:30:8f:6c:78:
54:6c:a4:90:09:6c:86:ea:ec:c5:ff:77:b2:d5:57:
43:d1:10:5e:b6:23:b2:1f:e9:f3:53:27:fe:d9:85:
33:6f:a5:bf:cf:1c:06:65:04:38:eb:8d:a4:31:1a:
2b:11:dd:ff:1c:05:5d:2e:06:f3:7d:dd:d6:64:74:
b4:ab:46:ef:d4:50:d3:82:76:c0:71:30:3c:c0:5d:
5b:8e:d2:53:9b:af:45:1f:e5:4e:23:c0:29:24:f3:
d3:4a:5c:c1:be:87:ac:a4:23:0e:ff:02:6a:ae:b7:
2e:26:6a:59:8a:05:a7:e9:1a:34:a0:b8:ea:a4:56:
77:4b:04:73:5b:ba:ca:7c:0e:88:a6:fe:11:3c:b3:
a4:6b:8c:ca:75:99:c7:54:8f:82:d9:2c:fb:be:83:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:1B:50:1C:31:01:8D:EF:E8:06:77:16:2F:AC:81:36:7D:76:A7
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/6CobUBwxAY3v6AZ3Fi-sgTZ9dqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f0:f0:98:35:08:0f:10:2a:94:06:74:89:49:8c:ce:57:91:
51:6d:69:e6:58:09:85:9f:00:fa:5a:fe:11:4e:f1:e3:f2:5e:
88:7e:47:3c:0e:9b:e4:54:89:85:b0:09:ba:60:db:d5:13:77:
cc:b1:82:02:e9:bb:69:42:79:2a:98:df:77:3a:9c:26:c9:2b:
f9:3d:bc:56:f5:12:57:12:a6:8a:47:34:e9:bf:01:97:02:10:
ec:7f:6b:b2:b7:15:75:04:3d:19:8b:cf:c6:20:6e:f2:1c:f6:
6f:50:94:b6:82:5c:5f:5a:0e:de:4f:d7:65:85:8b:c6:e7:96:
3d:b1:3e:93:d5:6d:2e:0e:e9:d8:b7:7d:a1:df:0e:16:25:97:
6b:c4:a3:66:11:47:06:69:b8:ff:5b:5e:2e:3c:e1:7a:ec:4d:
f8:e2:8b:00:16:55:62:37:1d:1d:27:5b:d3:8d:ab:39:72:b3:
51:1d:ca:4b:f3:3c:27:4c:f1:a5:40:3f:3b:29:33:aa:a8:eb:
cf:4d:7f:16:eb:b0:86:27:1f:e0:bd:c2:41:63:f7:a6:dc:9a:
70:e0:8a:e2:4a:16:ad:59:21:f9:30:bc:fd:78:27:75:f8:e8:
79:3a:47:55:c2:27:f5:a1:71:18:62:c8:f0:92:25:4b:e8:1a:
6f:11:1c:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlBk4KwRwteaRT9oI9AW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTAxMTM0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODJhMWI1MDFjMzEwMThkZWZlODA2NzcxNjJmYWM4MTM2N2Q3NmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX3uomfmZXItfGDgVOD67P5z0+2S
aTndWZZ9DW55CaHCaxAswxo416O/08+kG05guhX5Y3HQMR5Mc7E4cA/9IQNi25TD
A0Ogg0YOP/imUXT+gaNeiUk4L90QjkgJrZiPGISimzCPbHhUbKSQCWyG6uzF/3ey
1VdD0RBetiOyH+nzUyf+2YUzb6W/zxwGZQQ4642kMRorEd3/HAVdLgbzfd3WZHS0
q0bv1FDTgnbAcTA8wF1bjtJTm69FH+VOI8ApJPPTSlzBvoespCMO/wJqrrcuJmpZ
igWn6Ro0oLjqpFZ3SwRzW7rKfA6Ipv4RPLOka4zKdZnHVI+C2Sz7voNcxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgqG1AcMQGN7+gGdxYvrIE2fXanMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvNkNvYlVCd3hBWTN2NkFaM0ZpLXNnVFo5ZHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbIDMA0G
CSqGSIb3DQEBCwUAA4IBAQCu8PCYNQgPECqUBnSJSYzOV5FRbWnmWAmFnwD6Wv4R
TvHj8l6Ifkc8DpvkVImFsAm6YNvVE3fMsYIC6btpQnkqmN93OpwmySv5PbxW9RJX
EqaKRzTpvwGXAhDsf2uytxV1BD0Zi8/GIG7yHPZvUJS2glxfWg7eT9dlhYvG55Y9
sT6T1W0uDunYt32h3w4WJZdrxKNmEUcGabj/W14uPOF67E344osAFlViNx0dJ1vT
jas5crNRHcpL8zwnTPGlQD87KTOqqOvPTX8W67CGJx/gvcJBY/em3Jpw4IriShat
WSH5MLz9eCd1+Oh5OkdVwif1oXEYYsjwkiVL6BpvERw5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org