Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/pIB2wLpVJuwdWfErziXsAPX1OFI.roa
File: pIB2wLpVJuwdWfErziXsAPX1OFI.roa (raw, json)
Hash identifier: gmgYWYNkzgXg8Yepbb4THg7IeeVBMwsV3WMPo4Gmhso=
Subject key identifier: A4:80:76:C0:BA:55:26:EC:1D:59:F1:2B:CE:25:EC:00:F5:F5:38:52
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 0185719E7CD091DA7C18182FF0693DDDD450
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/pIB2wLpVJuwdWfErziXsAPX1OFI.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210220
IP address blocks: 178.218.244.0/22 maxlen: 22
2a0d:bfc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7c:d0:91:da:7c:18:18:2f:f0:69:3d:dd:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a48076c0ba5526ec1d59f12bce25ec00f5f53852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:77:b3:d3:3c:a6:c7:9e:f6:07:38:86:4d:
bb:4c:d0:5b:02:f8:c2:90:3e:ad:b3:c0:a7:5e:89:
b4:35:c6:14:5f:e0:12:0f:ad:22:63:9c:a8:a1:2f:
79:5a:94:8a:da:1b:53:b5:20:b8:69:04:da:cd:ba:
25:df:15:e9:0a:67:e0:6f:c4:82:14:7a:40:2b:af:
ce:03:f6:f8:ca:e8:4e:ad:97:fe:03:70:d4:30:80:
29:f4:a0:0d:03:e1:02:d7:d8:bc:5c:4c:a9:ef:eb:
4b:1e:f3:21:af:37:14:74:32:de:d4:c3:c8:ef:14:
91:f7:60:0b:bb:ba:ce:58:c0:cc:ed:c3:03:90:92:
7d:b0:c6:e3:b8:10:76:77:50:cb:d1:51:8a:70:da:
a7:8a:7a:c3:70:08:03:50:bb:df:33:35:a8:06:bc:
71:88:17:ae:01:72:2b:89:20:65:2b:20:c9:db:b4:
b1:da:a2:24:62:17:d2:1a:92:e0:02:02:48:4b:38:
f6:61:68:ac:00:43:ad:3a:c0:60:a5:d1:e6:ba:a6:
52:04:87:4f:72:e9:3b:36:ca:2e:7a:d9:ae:96:c7:
da:df:f8:e6:91:84:a0:d3:0c:34:07:2c:ae:2a:f5:
5c:39:3b:df:56:b0:c6:5a:94:41:d5:95:73:3c:78:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:76:C0:BA:55:26:EC:1D:59:F1:2B:CE:25:EC:00:F5:F5:38:52
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/pIB2wLpVJuwdWfErziXsAPX1OFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.244.0/22
IPv6:
2a0d:bfc0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:63:90:cd:1c:36:ec:ad:b7:24:d7:26:7c:0e:e2:8c:9b:af:
a7:37:fd:c6:a4:c3:a5:51:27:67:3f:2d:24:be:0b:80:24:97:
09:3d:1f:fd:0d:15:61:5b:f5:80:7e:43:13:38:cd:f0:86:0b:
1a:e5:67:4c:1f:20:24:c2:40:09:ce:ff:35:5a:29:bf:e8:4c:
2d:c0:c5:b4:bc:d1:b3:b3:13:c2:f8:cd:db:c0:1d:b3:d1:82:
7f:8b:b7:80:72:c3:f0:9d:c0:ef:69:78:21:a2:e8:da:e6:9b:
2d:06:93:0a:d7:bc:69:76:66:6b:ed:8f:f0:3c:a4:2b:34:3c:
35:e4:e5:1b:17:85:55:6e:95:44:46:71:20:49:8b:7a:9e:6d:
8c:99:57:99:8c:72:13:c4:37:8e:24:f5:d0:8c:99:8d:9b:50:
33:51:70:9c:6e:6b:a8:d2:09:f1:a0:8a:ec:53:15:14:2b:49:
c3:49:f0:28:e5:9d:58:de:0b:d8:cb:4a:52:24:89:74:c7:05:
d4:ef:59:12:d6:20:c5:03:fa:79:f1:85:3d:f7:6e:87:d0:ab:
81:4f:6c:5a:56:1a:c4:5a:87:0c:65:fc:18:dd:c5:56:6d:1f:
da:a6:44:83:11:bd:cd:9b:16:51:e5:48:04:4c:80:1e:77:52:
c8:4c:aa:5c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxnnzQkdp8GBgv8Gk93dRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2UwODE0MTY3ZWFhODE4OWZkODRkMzkwMjcwZWFkZjI5
NDgyY2IwHhcNMjMwMTAyMDgzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDgwNzZjMGJhNTUyNmVjMWQ1OWYxMmJjZTI1ZWMwMGY1ZjUzODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonN3s9M8psee9gc4hk27TNBbAvjC
kD6ts8CnXom0NcYUX+ASD60iY5yooS95WpSK2htTtSC4aQTazbol3xXpCmfgb8SC
FHpAK6/OA/b4yuhOrZf+A3DUMIAp9KANA+EC19i8XEyp7+tLHvMhrzcUdDLe1MPI
7xSR92ALu7rOWMDM7cMDkJJ9sMbjuBB2d1DL0VGKcNqninrDcAgDULvfMzWoBrxx
iBeuAXIriSBlKyDJ27Sx2qIkYhfSGpLgAgJISzj2YWisAEOtOsBgpdHmuqZSBIdP
cuk7Nsouetmulsfa3/jmkYSg0ww0ByyuKvVcOTvfVrDGWpRB1ZVzPHhAzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKSAdsC6VSbsHVnxK84l7AD19ThSMB8GA1UdIwQY
MBaAFMLOCBQWfqqBif2E05AnDq3ylILLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEt
ZTc3MTdiMjg3MDY2LzEvcElCMndMcFZKdXdkV2ZFcnppWHNBUFgxT0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEtZTc3MTdiMjg3MDY2
LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCstr0MA0E
AgACMAcDBQAqDb/AMA0GCSqGSIb3DQEBCwUAA4IBAQArY5DNHDbsrbck1yZ8DuKM
m6+nN/3GpMOlUSdnPy0kvguAJJcJPR/9DRVhW/WAfkMTOM3whgsa5WdMHyAkwkAJ
zv81Wim/6EwtwMW0vNGzsxPC+M3bwB2z0YJ/i7eAcsPwncDvaXghouja5pstBpMK
17xpdmZr7Y/wPKQrNDw15OUbF4VVbpVERnEgSYt6nm2MmVeZjHITxDeOJPXQjJmN
m1AzUXCcbmuo0gnxoIrsUxUUK0nDSfAo5Z1Y3gvYy0pSJIl0xwXU71kS1iDFA/p5
8YU9926H0KuBT2xaVhrEWocMZfwY3cVWbR/apkSDEb3NmxZR5UgETIAed1LITKpc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:55 2024 by rpki-client on console-ams.rpki-client.org