Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/7nCaKh9fxgGY7bIMBQZ-zvCO4wA.roa
File: 7nCaKh9fxgGY7bIMBQZ-zvCO4wA.roa (raw, json)
Hash identifier: PkF1UkP6y0Tg3ra9KZFMHcmftzTq35Z21Ijj8fOSPyM=
Subject key identifier: EE:70:9A:2A:1F:5F:C6:01:98:ED:B2:0C:05:06:7E:CE:F0:8E:E3:00
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 018570153217BA78A8B2C07688D078227A44
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/7nCaKh9fxgGY7bIMBQZ-zvCO4wA.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34083
IP address blocks: 178.219.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:32:17:ba:78:a8:b2:c0:76:88:d0:78:22:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee709a2a1f5fc60198edb20c05067ecef08ee300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:44:6d:25:c3:e9:d3:1e:a1:f7:0e:fb:b7:
d9:9f:c8:64:a5:e3:75:0a:7c:e9:eb:39:43:1e:13:
7a:33:ab:69:37:47:1b:d7:ff:c2:09:cd:2f:3c:83:
fd:f2:86:58:7c:4c:45:2e:64:d9:af:a5:12:c4:17:
a3:90:18:f1:0c:5a:e7:b8:92:5c:d1:b3:de:aa:e4:
66:40:6f:ef:7d:f2:42:aa:5a:c0:d7:63:59:88:ae:
70:5c:b8:63:30:e9:24:ce:6d:c6:6b:33:f8:70:9d:
87:b7:21:c9:8f:25:2a:7c:ca:5d:de:23:c2:99:31:
8c:ac:12:70:6a:30:6f:ca:f9:9d:3b:f1:cf:f8:f2:
b0:43:e5:5f:5d:46:9b:c2:9f:f9:1d:3a:c4:18:86:
42:05:3f:6d:2e:e5:14:5e:c0:5e:62:84:24:e5:77:
4e:8c:a0:6f:0f:24:d9:f6:3a:cd:f6:b5:12:8b:1a:
08:23:bd:21:f6:6c:eb:11:8c:5e:44:57:28:cf:1f:
a6:a4:4a:ec:e1:bc:21:35:46:30:eb:fb:a4:43:96:
17:e0:8d:9e:b1:1a:f4:bd:f1:39:6f:d6:9f:04:e7:
2e:1f:6e:db:ee:03:93:7f:d5:49:cd:37:c2:ac:42:
cb:a8:63:04:43:e8:c0:1b:21:f9:ac:69:17:fc:a3:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:9A:2A:1F:5F:C6:01:98:ED:B2:0C:05:06:7E:CE:F0:8E:E3:00
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/7nCaKh9fxgGY7bIMBQZ-zvCO4wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.48.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:fe:46:df:c9:33:e2:4c:b5:42:89:0a:42:68:e8:27:8e:cf:
b6:27:95:8b:f6:2b:7a:46:d7:eb:97:d8:05:e3:ba:1e:db:ce:
6c:98:51:5a:63:53:fe:39:db:88:7f:8f:4b:a1:71:50:ed:41:
dd:f6:8c:ae:ab:ba:15:65:30:82:41:df:c5:b3:05:81:75:91:
a6:71:22:42:33:a3:c3:28:c0:84:f1:c8:3d:62:6c:ac:3d:cf:
7b:a6:47:1e:0d:b0:11:86:52:c5:41:9c:04:ff:7e:a3:7b:51:
01:79:23:b5:27:16:79:1e:0b:3c:24:3d:31:6f:25:b7:c1:15:
50:65:fc:c5:79:3e:55:71:89:c4:e4:84:5b:49:6a:25:47:7f:
4f:9b:ba:f1:04:91:f9:73:af:51:52:18:b9:e0:d4:ca:7a:2c:
a7:2b:e4:0d:b4:3b:61:8f:ae:a5:0d:10:61:f3:67:1e:e1:63:
91:a0:ad:08:f6:a9:bd:75:35:2f:82:95:e3:4e:a1:74:5c:0f:
28:d6:7c:64:9f:97:b5:ee:9b:62:27:9c:59:04:f3:71:e0:ac:
b2:77:18:0d:76:8e:a1:ac:8a:cb:40:11:23:93:dd:88:83:c0:
9f:dc:09:9e:24:a7:74:d4:0d:41:27:77:1d:26:a9:83:d9:f7:
d9:c1:7a:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwFTIXuniossB2iNB4InpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjMwMTAyMDEyNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTcwOWEyYTFmNWZjNjAxOThlZGIyMGMwNTA2N2VjZWYwOGVlMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXZEbSXD6dMeofcO+7fZn8hkpeN1
Cnzp6zlDHhN6M6tpN0cb1//CCc0vPIP98oZYfExFLmTZr6USxBejkBjxDFrnuJJc
0bPequRmQG/vffJCqlrA12NZiK5wXLhjMOkkzm3GazP4cJ2HtyHJjyUqfMpd3iPC
mTGMrBJwajBvyvmdO/HP+PKwQ+VfXUabwp/5HTrEGIZCBT9tLuUUXsBeYoQk5XdO
jKBvDyTZ9jrN9rUSixoII70h9mzrEYxeRFcozx+mpErs4bwhNUYw6/ukQ5YX4I2e
sRr0vfE5b9afBOcuH27b7gOTf9VJzTfCrELLqGMEQ+jAGyH5rGkX/KPC4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5wmiofX8YBmO2yDAUGfs7wjuMAMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvN25DYUtoOWZ4Z0dZN2JJTUJRWi16dkNPNHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstswMA0G
CSqGSIb3DQEBCwUAA4IBAQAa/kbfyTPiTLVCiQpCaOgnjs+2J5WL9it6Rtfrl9gF
47oe285smFFaY1P+OduIf49LoXFQ7UHd9oyuq7oVZTCCQd/FswWBdZGmcSJCM6PD
KMCE8cg9YmysPc97pkceDbARhlLFQZwE/36je1EBeSO1JxZ5Hgs8JD0xbyW3wRVQ
ZfzFeT5VcYnE5IRbSWolR39Pm7rxBJH5c69RUhi54NTKeiynK+QNtDthj66lDRBh
82ce4WORoK0I9qm9dTUvgpXjTqF0XA8o1nxkn5e17ptiJ5xZBPNx4KyydxgNdo6h
rIrLQBEjk92Ig8Cf3AmeJKd01A1BJ3cdJqmD2ffZwXqq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:12 2024 by rpki-client on console-fra.rpki-client.org