Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/76wGpg2QXngO4JbnxtdHKHP4nLs.roa
File: 76wGpg2QXngO4JbnxtdHKHP4nLs.roa (raw, json)
Hash identifier: l0lt6Hht2yLqfk52oQbdZTwMcN7ixk5jFryS/FR7pw4=
Subject key identifier: EF:AC:06:A6:0D:90:5E:78:0E:E0:96:E7:C6:D7:47:28:73:F8:9C:BB
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 01856DD4292E83CE512F7C160FCAAB571EC6
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/76wGpg2QXngO4JbnxtdHKHP4nLs.roa
Signing time: Sun 01 Jan 2023 14:54:58 +0000
ROA not before: Sun 01 Jan 2023 14:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207945
IP address blocks: 78.156.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:29:2e:83:ce:51:2f:7c:16:0f:ca:ab:57:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Jan 1 14:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efac06a60d905e780ee096e7c6d7472873f89cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:99:5b:4b:e1:49:e6:8b:f0:dc:12:22:4e:
45:51:75:bf:fd:dc:0b:5c:4c:03:47:1d:99:3d:78:
4a:1d:61:40:b6:5f:63:8c:85:7b:a1:57:9e:ee:cc:
51:e4:1f:67:91:90:86:38:d9:c6:08:5f:60:da:29:
e3:d4:16:2b:e5:f3:75:d8:26:07:69:fb:6a:df:91:
06:60:5b:30:86:f8:01:e3:79:86:71:3f:15:10:4c:
f2:a8:03:d6:78:78:53:97:2b:31:5b:25:a9:de:8d:
e4:51:6c:70:d8:f7:1b:c2:30:c9:17:b3:cf:10:7f:
4e:be:13:0c:6f:0a:fd:4b:a1:82:dd:2b:a0:7e:78:
07:ed:44:9b:4f:70:ac:d8:1c:d3:b1:b0:8e:45:0c:
80:b2:b6:9c:52:1d:3e:c3:c5:3e:a0:8a:d0:24:9c:
1c:3f:32:55:aa:cb:3c:d2:05:2c:ca:90:85:9a:d3:
3c:d4:e1:21:75:2a:33:55:5e:62:7e:70:9d:79:4c:
0e:41:94:b2:3a:67:2f:6b:92:10:df:6b:18:1d:e0:
fe:5a:58:2c:e0:b7:e4:ab:22:c9:de:ef:aa:63:89:
44:04:92:8d:5d:40:23:cd:8a:72:de:f2:44:18:53:
9f:df:9c:f5:07:b7:db:56:ed:6e:6b:64:99:87:0f:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AC:06:A6:0D:90:5E:78:0E:E0:96:E7:C6:D7:47:28:73:F8:9C:BB
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/76wGpg2QXngO4JbnxtdHKHP4nLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.140.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0d:89:c4:a2:4e:92:d0:6b:11:12:c4:9e:75:04:82:98:fa:
82:10:2b:0b:e6:8f:c9:ba:9c:38:3e:67:4d:28:98:eb:76:53:
9c:7b:0c:f5:a8:21:e4:45:04:01:59:71:25:b1:65:ae:e6:f6:
f8:bb:0e:7f:d2:45:3a:18:30:ed:49:36:a0:f5:17:6f:9e:9b:
95:bd:bd:63:42:71:bc:c7:52:dc:89:29:4c:2f:31:03:71:82:
82:43:94:76:5b:3d:61:d9:02:35:58:0f:c2:c0:8d:6e:91:bf:
1d:e4:ad:72:4a:7e:7f:f9:4c:e5:00:d5:98:8e:05:2d:ba:4d:
77:ad:0a:9c:b2:67:98:ae:f8:f2:60:2a:87:49:54:d2:8f:6f:
d9:cd:cf:22:d6:e1:99:fa:59:b1:8f:c8:e5:ad:1c:d0:fe:be:
79:f9:24:0b:c4:6b:1f:74:71:92:f2:5e:16:da:0e:db:0d:c6:
ec:e8:53:7d:52:e3:a1:27:48:52:0c:c2:ec:60:3b:af:41:90:
f5:94:de:10:0b:84:e2:66:6b:b0:7b:6f:9e:80:6a:6d:22:d8:
5d:23:ab:01:58:56:2e:4f:28:36:a6:62:f2:f7:b2:eb:da:66:
6d:7c:1b:6e:ab:18:cc:8f:24:5a:34:ed:c8:0f:65:be:a8:0c:
9b:1e:07:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt1Ckug85RL3wWD8qrVx7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTBjYTFiYWY5ZjlmNmZlMTNkODllMjY2NDQ3MDQ5M2Zl
NjVlNjUwHhcNMjMwMTAxMTQ1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmFjMDZhNjBkOTA1ZTc4MGVlMDk2ZTdjNmQ3NDcyODczZjg5Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AiZW0vhSeaL8NwSIk5FUXW//dwL
XEwDRx2ZPXhKHWFAtl9jjIV7oVee7sxR5B9nkZCGONnGCF9g2inj1BYr5fN12CYH
aftq35EGYFswhvgB43mGcT8VEEzyqAPWeHhTlysxWyWp3o3kUWxw2PcbwjDJF7PP
EH9OvhMMbwr9S6GC3SugfngH7USbT3Cs2BzTsbCORQyAsracUh0+w8U+oIrQJJwc
PzJVqss80gUsypCFmtM81OEhdSozVV5ifnCdeUwOQZSyOmcva5IQ32sYHeD+Wlgs
4LfkqyLJ3u+qY4lEBJKNXUAjzYpy3vJEGFOf35z1B7fbVu1ua2SZhw8+tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+sBqYNkF54DuCW58bXRyhz+Jy7MB8GA1UdIwQY
MBaAFGFQyhuvn59v4T2J4mZEcEk/5l5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUt
OTQ3ZWFkOWYxNGVkLzEvNzZ3R3BnMlFYbmdPNEpibnh0ZEhLSFA0bkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUtOTQ3ZWFkOWYxNGVk
LzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATpyMMA0G
CSqGSIb3DQEBCwUAA4IBAQBJDYnEok6S0GsREsSedQSCmPqCECsL5o/Jupw4PmdN
KJjrdlOcewz1qCHkRQQBWXElsWWu5vb4uw5/0kU6GDDtSTag9RdvnpuVvb1jQnG8
x1LciSlMLzEDcYKCQ5R2Wz1h2QI1WA/CwI1ukb8d5K1ySn5/+UzlANWYjgUtuk13
rQqcsmeYrvjyYCqHSVTSj2/Zzc8i1uGZ+lmxj8jlrRzQ/r55+SQLxGsfdHGS8l4W
2g7bDcbs6FN9UuOhJ0hSDMLsYDuvQZD1lN4QC4TiZmuwe2+egGptIthdI6sBWFYu
Tyg2pmLy97Lr2mZtfBtuqxjMjyRaNO3ID2W+qAybHgdO
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:16 2024 by rpki-client on console.sobornost.net