Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/w_qSiP4drXQcdgB-Y7ZEttmegLE.roa
File: w_qSiP4drXQcdgB-Y7ZEttmegLE.roa (raw, json)
Hash identifier: hGqP22YeX/6lqqUYBqL1vYCSrJ2F8IIbYSgQuwjmr84=
Subject key identifier: C3:FA:92:88:FE:1D:AD:74:1C:76:00:7E:63:B6:44:B6:D9:9E:80:B1
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018675547F7F13F5B154801001C1804F08B9
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/w_qSiP4drXQcdgB-Y7ZEttmegLE.roa
Signing time: Tue 21 Feb 2023 18:55:17 +0000
ROA not before: Tue 21 Feb 2023 18:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49549
IP address blocks: 178.250.189.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
2a0f:cdc4::/32 maxlen: 32
2a0f:cdc2::/32 maxlen: 32
2a0f:cdc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 Feb 2023 09:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:54:7f:7f:13:f5:b1:54:80:10:01:c1:80:4f:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 21 18:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3fa9288fe1dad741c76007e63b644b6d99e80b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:2a:fe:29:99:be:f6:cd:c3:9b:c8:38:47:
fa:e4:1b:2c:78:f8:4b:0d:0e:2f:2a:0d:d3:e2:36:
e5:84:50:0e:04:ce:a6:a4:4b:68:0b:c7:5b:75:9f:
0c:b6:d4:86:27:f8:4b:50:6f:9e:be:7f:02:61:c1:
60:53:2c:e3:b9:28:b6:09:fe:e1:ed:66:4f:7c:87:
2d:b9:1b:dd:f5:83:f0:f5:7e:a9:67:d2:57:b7:1b:
5d:c8:d2:41:15:c6:9d:a7:16:7c:20:ba:e0:2a:76:
70:ce:0d:b3:1f:0d:1a:e9:62:64:31:ed:66:77:d5:
a8:22:7a:8c:11:0b:1f:8d:a0:bf:a4:3a:58:e8:85:
0d:f1:55:e9:49:6b:e3:a6:28:10:55:2a:0b:8c:22:
93:a6:44:58:4d:37:ed:40:ee:a3:31:45:0f:33:a4:
e4:b5:da:4b:57:4b:7e:60:92:04:5a:ab:c1:f6:8a:
cb:aa:38:ef:19:fb:81:a8:be:41:f0:49:aa:1c:4c:
dc:b2:76:0b:bc:8f:4a:05:df:1c:08:44:f0:e7:b0:
74:df:99:a9:b3:e1:45:c8:bc:0a:7f:c7:b0:93:4e:
ca:51:01:59:35:21:6a:fe:5d:b9:92:1b:0e:89:e0:
8e:f3:38:c0:38:9f:be:07:d1:6b:30:9a:4b:2a:77:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FA:92:88:FE:1D:AD:74:1C:76:00:7E:63:B6:44:B6:D9:9E:80:B1
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/w_qSiP4drXQcdgB-Y7ZEttmegLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.189.0/24
193.0.230.0/24
IPv6:
2a0f:cdc2::/32
2a0f:cdc4::/31
Signature Algorithm: sha256WithRSAEncryption
54:a6:51:29:00:0e:c4:10:91:f1:87:2a:7e:05:8a:73:e9:90:
8f:c9:c1:33:66:00:f1:af:75:3b:aa:1d:e7:d6:66:ae:c4:0c:
ba:24:d6:6b:14:2a:1e:ac:77:e0:12:75:11:37:b5:e3:eb:ef:
f1:dd:86:29:70:be:5b:eb:cc:46:3e:cd:e3:9d:b7:a5:a5:2a:
c7:0a:e5:3a:9e:b3:1d:a3:70:7a:36:9d:d4:f1:59:e5:7b:70:
0a:d4:0f:ff:d1:18:b3:6d:48:38:0a:ce:12:5a:ba:31:0a:1c:
1d:38:d8:1f:af:0a:11:6c:c0:5f:d7:bb:41:99:b8:68:69:0a:
5d:ff:ca:0a:68:6f:66:f1:8d:ff:82:ae:14:30:3a:78:27:af:
de:80:ad:01:a1:81:ea:88:a9:69:8b:d2:16:0e:b4:a3:58:ec:
39:c6:90:d4:4b:f6:7d:4e:cb:e8:df:ac:56:0d:8d:89:cc:a6:
a1:49:ff:cc:0d:bb:18:b1:53:a1:1f:82:09:93:6c:fe:b6:83:
59:32:b3:99:22:70:1e:a5:fb:47:80:0d:1e:79:8b:75:5e:05:
db:8b:65:b7:dc:a0:bc:14:c6:58:f8:f8:9a:34:d9:39:91:59:
59:4a:14:4b:27:86:bc:50:3f:3d:6c:36:d3:f0:28:07:9b:d6:
4d:82:de:76
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYZ1VH9/E/WxVIAQAcGATwi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi
ZjA2OTIwHhcNMjMwMjIxMTg1NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2ZhOTI4OGZlMWRhZDc0MWM3NjAwN2U2M2I2NDRiNmQ5OWU4MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNAq/imZvvbNw5vIOEf65BssePhL
DQ4vKg3T4jblhFAOBM6mpEtoC8dbdZ8MttSGJ/hLUG+evn8CYcFgUyzjuSi2Cf7h
7WZPfIctuRvd9YPw9X6pZ9JXtxtdyNJBFcadpxZ8ILrgKnZwzg2zHw0a6WJkMe1m
d9WoInqMEQsfjaC/pDpY6IUN8VXpSWvjpigQVSoLjCKTpkRYTTftQO6jMUUPM6Tk
tdpLV0t+YJIEWqvB9orLqjjvGfuBqL5B8EmqHEzcsnYLvI9KBd8cCETw57B035mp
s+FFyLwKf8ewk07KUQFZNSFq/l25khsOieCO8zjAOJ++B9FrMJpLKnd0ywIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMP6koj+Ha10HHYAfmO2RLbZnoCxMB8GA1UdIwQY
MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt
YWE5ZDY5MTgxMWU3LzEvd19xU2lQNGRyWFFjZGdCLVk3WkV0dG1lZ0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3
LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAsvq9AwQA
wQDmMBQEAgACMA4DBQAqD83CAwUBKg/NxDANBgkqhkiG9w0BAQsFAAOCAQEAVKZR
KQAOxBCR8YcqfgWKc+mQj8nBM2YA8a91O6od59ZmrsQMuiTWaxQqHqx34BJ1ETe1
4+vv8d2GKXC+W+vMRj7N4523paUqxwrlOp6zHaNwejad1PFZ5XtwCtQP/9EYs21I
OArOElq6MQocHTjYH68KEWzAX9e7QZm4aGkKXf/KCmhvZvGN/4KuFDA6eCev3oCt
AaGB6oipaYvSFg60o1jsOcaQ1Ev2fU7L6N+sVg2NicymoUn/zA27GLFToR+CCZNs
/raDWTKzmSJwHqX7R4ANHnmLdV4F24tlt9ygvBTGWPj4mjTZOZFZWUoUSyeGvFA/
PWw20/AoB5vWTYLedg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-fra.rpki-client.org