Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OSIaYmiOVV0nL_zC83zalU47Bjs.roa
File: OSIaYmiOVV0nL_zC83zalU47Bjs.roa (raw, json)
Hash identifier: 9zepktmhYG6wQZXeWrlK2xq5ofd6Ytj73OwzN83Ory4=
Subject key identifier: 39:22:1A:62:68:8E:55:5D:27:2F:FC:C2:F3:7C:DA:95:4E:3B:06:3B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186067A5ED5B3890179DB3B8D4C6F0D2E5A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OSIaYmiOVV0nL_zC83zalU47Bjs.roa
Signing time: Tue 31 Jan 2023 06:18:48 +0000
ROA not before: Tue 31 Jan 2023 06:18:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 5.178.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:7a:5e:d5:b3:89:01:79:db:3b:8d:4c:6f:0d:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 31 06:18:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39221a62688e555d272ffcc2f37cda954e3b063b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:6f:f4:6d:ce:3f:b1:7c:40:6c:0a:39:4a:
73:6c:97:47:3d:ec:9d:59:db:48:ae:07:cb:f1:f5:
f7:17:d7:03:bb:e6:8c:ec:c1:7b:7b:cd:7f:01:92:
fc:46:1a:98:de:0e:3f:9e:e5:c7:cb:db:12:5d:44:
ae:e0:2c:e6:ec:03:cb:ef:54:c6:13:b8:9d:29:8f:
3e:5b:c7:54:f9:72:1e:78:05:47:06:16:4e:c8:74:
2a:7b:1d:c7:2e:d4:8d:f3:c8:bc:fc:6e:7a:6d:40:
f6:8b:c1:a8:fa:f5:fc:7c:53:bd:da:18:57:7f:6c:
08:16:f0:e2:a3:57:77:84:d7:5d:10:a8:d6:ce:a3:
21:da:65:b2:7a:47:54:60:b2:f8:54:a3:21:ce:c8:
1d:06:13:65:e3:a6:87:1a:9d:cb:ab:29:96:6c:d0:
25:d3:96:f0:be:e6:2e:b2:7a:b7:70:e8:df:48:c4:
92:19:b6:4f:3d:72:01:c6:87:3a:f0:d2:68:2a:4b:
f1:13:21:9c:b8:4d:f9:cb:0d:cf:7f:31:96:d9:54:
7f:61:ea:40:6b:08:06:c1:c9:63:63:5e:59:8c:58:
fa:e6:c9:53:01:41:73:f0:a8:12:b4:26:52:97:93:
35:df:26:22:45:69:dd:47:20:8d:21:b1:14:f7:f3:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:1A:62:68:8E:55:5D:27:2F:FC:C2:F3:7C:DA:95:4E:3B:06:3B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OSIaYmiOVV0nL_zC83zalU47Bjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ce:98:f7:86:55:2c:63:4e:36:43:97:2c:fa:00:3f:b6:25:
33:6d:58:45:ab:ef:60:d0:0f:39:ae:72:15:7a:ef:42:89:cd:
c1:a0:a1:bd:81:16:5a:c2:95:e7:25:46:9d:18:96:1b:f1:63:
80:79:95:7c:e2:82:fc:3a:f6:21:93:73:eb:ee:2b:97:7f:ee:
b4:db:3b:2e:e9:1f:53:8e:a5:da:20:bd:f7:7c:b6:01:00:82:
9e:dd:c0:1b:87:7a:1a:5a:e8:ec:18:5a:01:05:de:49:c1:18:
0f:6e:ab:d6:60:b7:3c:4a:11:12:89:fe:ba:2c:33:76:dd:bc:
68:ab:50:c5:36:e8:fd:1d:13:67:d0:84:61:7e:0c:cd:9c:d3:
29:9d:d8:ba:d5:15:db:27:4e:ef:57:31:56:d7:b2:54:03:04:
fa:67:e0:d9:f9:c6:e7:47:1c:7f:65:29:04:8e:9a:e2:8b:eb:
03:15:2a:8e:e6:e3:6d:ce:18:31:08:3e:87:f1:27:e3:f9:9e:
01:61:9b:4e:eb:df:51:02:18:9f:13:c2:59:23:15:c5:2f:81:
99:cf:99:ba:a6:3e:46:be:13:0d:0b:c8:fd:18:bd:5f:84:a6:
8d:45:0e:65:3c:f6:24:d2:27:3b:7d:15:59:f1:f5:09:ab:5d:
e1:20:9d:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYGel7Vs4kBeds7jUxvDS5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTMxMDYxODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTIyMWE2MjY4OGU1NTVkMjcyZmZjYzJmMzdjZGE5NTRlM2IwNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJBv9G3OP7F8QGwKOUpzbJdHPeyd
WdtIrgfL8fX3F9cDu+aM7MF7e81/AZL8RhqY3g4/nuXHy9sSXUSu4Czm7APL71TG
E7idKY8+W8dU+XIeeAVHBhZOyHQqex3HLtSN88i8/G56bUD2i8Go+vX8fFO92hhX
f2wIFvDio1d3hNddEKjWzqMh2mWyekdUYLL4VKMhzsgdBhNl46aHGp3LqymWbNAl
05bwvuYusnq3cOjfSMSSGbZPPXIBxoc68NJoKkvxEyGcuE35yw3PfzGW2VR/YepA
awgGwcljY15ZjFj65slTAUFz8KgStCZSl5M13yYiRWndRyCNIbEU9/O0ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkiGmJojlVdJy/8wvN82pVOOwY7MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvT1NJYVltaU9WVjBuTF96QzgzemFsVTQ3QmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbIAMA0G
CSqGSIb3DQEBCwUAA4IBAQCczpj3hlUsY042Q5cs+gA/tiUzbVhFq+9g0A85rnIV
eu9Cic3BoKG9gRZawpXnJUadGJYb8WOAeZV84oL8OvYhk3Pr7iuXf+602zsu6R9T
jqXaIL33fLYBAIKe3cAbh3oaWujsGFoBBd5JwRgPbqvWYLc8ShESif66LDN23bxo
q1DFNuj9HRNn0IRhfgzNnNMpndi61RXbJ07vVzFW17JUAwT6Z+DZ+cbnRxx/ZSkE
jprii+sDFSqO5uNtzhgxCD6H8Sfj+Z4BYZtO699RAhifE8JZIxXFL4GZz5m6pj5G
vhMNC8j9GL1fhKaNRQ5lPPYk0ic7fRVZ8fUJq13hIJ3f
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org