Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hSJCrLHucM7thV__x8ITksaup88.roa
File: hSJCrLHucM7thV__x8ITksaup88.roa (raw, json)
Hash identifier: B14xHhrKaTVI5iUgQJsr/MAfncFlw0CfRDNp/gggNB8=
Subject key identifier: 85:22:42:AC:B1:EE:70:CE:ED:85:5F:FF:C7:C2:13:92:C6:AE:A7:CF
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0188718046FD42EA1FA27318C4157A008982
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hSJCrLHucM7thV__x8ITksaup88.roa
Signing time: Wed 31 May 2023 11:10:12 +0000
ROA not before: Wed 31 May 2023 11:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 5.10.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:80:46:fd:42:ea:1f:a2:73:18:c4:15:7a:00:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 31 11:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=852242acb1ee70ceed855fffc7c21392c6aea7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:89:90:95:3b:d4:1e:4b:8e:b7:60:28:1a:
9a:ce:dc:69:a7:4b:29:73:e3:79:b7:f2:2f:cd:b0:
a7:b7:f5:d7:aa:e9:c4:c2:98:87:55:74:a7:19:07:
d3:68:f8:52:a4:44:d0:04:07:74:32:1b:42:39:5e:
4d:20:f5:d4:68:2b:c6:81:e4:46:de:56:4f:0e:ca:
ce:b5:1d:33:d1:52:9a:12:90:3b:c4:1a:02:56:6d:
1d:92:96:8e:ed:8e:06:88:b9:d4:2d:d0:5b:c1:4c:
ca:bb:42:f8:bf:45:a1:f5:3a:4a:98:15:9e:6c:10:
cf:1e:ee:a0:3b:5e:16:bc:05:df:af:5c:fe:ad:45:
f2:30:4d:aa:66:d0:26:d3:bb:cd:ac:93:1c:47:ed:
70:1b:4c:6a:5e:ab:83:f0:ec:b7:c3:20:9d:dc:8c:
42:b5:4c:9f:a8:ed:89:3d:1a:98:67:c0:20:f1:b5:
c9:bb:0c:cb:e7:4f:ab:6e:0b:10:05:e8:a6:71:ba:
bd:57:76:37:bd:03:3b:cd:fe:21:65:ac:de:15:91:
c2:94:22:3f:9a:80:b9:1e:19:2c:57:91:d5:f6:bd:
fd:23:59:57:7a:27:1d:b1:68:1c:42:34:38:3a:c3:
6c:df:cc:79:f9:ef:05:65:41:d3:43:63:f3:20:c3:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:42:AC:B1:EE:70:CE:ED:85:5F:FF:C7:C2:13:92:C6:AE:A7:CF
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hSJCrLHucM7thV__x8ITksaup88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d4:51:10:b4:09:05:c0:82:d3:dd:bb:48:4b:2c:66:ad:a5:
84:6a:a9:5c:e0:5a:20:76:d9:5c:84:88:6a:c5:8d:89:7c:f8:
2f:cb:4b:68:31:cb:de:0f:69:6a:52:d3:b7:2c:1d:a7:95:db:
75:85:0d:f6:8f:5d:49:41:12:73:04:84:9f:61:33:f1:80:91:
e4:a9:35:d5:3d:29:b8:43:cb:26:2c:f9:89:38:73:97:a8:ff:
b1:19:ad:f5:98:38:ae:ba:1b:00:5d:8b:83:61:55:2d:a9:5a:
f5:d2:bc:0e:16:77:c6:33:cb:7f:a0:1f:28:88:d9:f0:88:c0:
a5:05:82:d3:eb:9b:fb:e3:08:09:57:f1:e1:c7:a4:64:ab:c0:
3a:b6:6c:f5:0e:28:cc:73:e0:50:ab:79:1b:84:3f:cc:c2:3c:
2d:bf:95:0d:a6:f9:49:ee:8c:b7:1c:60:b2:31:25:12:a5:25:
c1:26:d0:00:e5:fa:67:c4:dd:00:bb:89:6e:a4:c6:47:a4:01:
2a:51:8d:1c:54:7e:1f:f7:f0:bd:50:81:17:10:59:2a:56:9e:
26:19:95:94:d8:60:ad:c2:32:e3:dd:06:8b:d4:f7:0d:6a:c3:
82:2c:ad:75:bc:6b:64:63:f8:87:17:ac:34:fa:8d:ef:a8:b9:
56:08:14:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhxgEb9QuofonMYxBV6AImCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwNTMxMTExMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTIyNDJhY2IxZWU3MGNlZWQ4NTVmZmZjN2MyMTM5MmM2YWVhN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgGJkJU71B5LjrdgKBqaztxpp0sp
c+N5t/IvzbCnt/XXqunEwpiHVXSnGQfTaPhSpETQBAd0MhtCOV5NIPXUaCvGgeRG
3lZPDsrOtR0z0VKaEpA7xBoCVm0dkpaO7Y4GiLnULdBbwUzKu0L4v0Wh9TpKmBWe
bBDPHu6gO14WvAXfr1z+rUXyME2qZtAm07vNrJMcR+1wG0xqXquD8Oy3wyCd3IxC
tUyfqO2JPRqYZ8Ag8bXJuwzL50+rbgsQBeimcbq9V3Y3vQM7zf4hZazeFZHClCI/
moC5HhksV5HV9r39I1lXeicdsWgcQjQ4OsNs38x5+e8FZUHTQ2PzIMN4owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUiQqyx7nDO7YVf/8fCE5LGrqfPMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvaFNKQ3JMSHVjTTd0aFZfX3g4SVRrc2F1cDg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQr7MA0G
CSqGSIb3DQEBCwUAA4IBAQBu1FEQtAkFwILT3btISyxmraWEaqlc4FogdtlchIhq
xY2JfPgvy0toMcveD2lqUtO3LB2nldt1hQ32j11JQRJzBISfYTPxgJHkqTXVPSm4
Q8smLPmJOHOXqP+xGa31mDiuuhsAXYuDYVUtqVr10rwOFnfGM8t/oB8oiNnwiMCl
BYLT65v74wgJV/Hhx6Rkq8A6tmz1DijMc+BQq3kbhD/Mwjwtv5UNpvlJ7oy3HGCy
MSUSpSXBJtAA5fpnxN0Au4lupMZHpAEqUY0cVH4f9/C9UIEXEFkqVp4mGZWU2GCt
wjLj3QaL1PcNasOCLK11vGtkY/iHF6w0+o3vqLlWCBQj
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:09 2024 by rpki-client on console-ams.rpki-client.org