Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/2WKX0E5jV6VZhpkr-LBzzEKb51c.roa
File: 2WKX0E5jV6VZhpkr-LBzzEKb51c.roa (raw, json)
Hash identifier: r2gR11fg492LnW+rH5BPu8kMldwX8DYqr3B9o31OJV0=
Subject key identifier: D9:62:97:D0:4E:63:57:A5:59:86:99:2B:F8:B0:73:CC:42:9B:E7:57
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018AFC4C130CC4918DD9BC6A1C064EE38B9A
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/2WKX0E5jV6VZhpkr-LBzzEKb51c.roa
Signing time: Wed 04 Oct 2023 20:05:58 +0000
ROA not before: Wed 04 Oct 2023 20:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197563
IP address blocks: 178.18.231.0/24 maxlen: 24
2a03:5f80:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:4c:13:0c:c4:91:8d:d9:bc:6a:1c:06:4e:e3:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Oct 4 20:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d96297d04e6357a55986992bf8b073cc429be757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:ac:a6:bc:8a:b3:d2:af:34:80:0e:ea:51:
12:b5:af:36:96:cf:88:35:32:91:30:09:76:8a:8e:
00:19:52:68:2a:44:73:1e:d0:0b:04:81:9f:07:47:
19:ee:f7:84:f3:39:f4:fd:eb:9d:8f:14:79:a0:5e:
f7:ad:19:f9:b0:2e:e0:f2:3c:c4:10:c4:34:92:b1:
09:b6:f1:3b:f2:eb:92:d3:57:a8:8e:e7:94:b9:b8:
2c:7f:3e:9a:eb:05:f4:23:22:91:9a:ae:a9:10:79:
38:43:5c:d5:9f:67:9d:84:80:7e:9e:c3:ea:10:96:
18:5f:b6:84:be:90:ad:f7:3e:9d:f9:b6:7a:74:eb:
86:56:b7:ce:3f:63:8c:93:c1:51:02:49:47:b5:1b:
93:28:81:39:59:4f:d6:dd:b1:fc:c6:26:13:fa:10:
66:73:5c:3f:52:e8:da:2e:a1:de:b6:a3:ab:fd:79:
f5:65:3a:92:1c:52:92:b6:ac:8a:93:63:98:6d:fc:
31:f7:56:f9:1f:a9:a8:11:28:95:73:35:e5:c5:60:
3a:45:11:42:bd:2b:0c:eb:d0:38:38:86:68:5f:54:
b5:13:94:96:42:f3:d9:d6:2c:ac:81:d9:fe:7c:e8:
91:6f:af:ad:85:af:4c:f5:9a:3d:e6:a2:92:d5:d6:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:97:D0:4E:63:57:A5:59:86:99:2B:F8:B0:73:CC:42:9B:E7:57
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/2WKX0E5jV6VZhpkr-LBzzEKb51c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.231.0/24
IPv6:
2a03:5f80:8::/48
Signature Algorithm: sha256WithRSAEncryption
89:ab:b6:a6:d1:3f:ec:2c:83:3d:25:42:23:b6:9f:55:08:0a:
f4:a2:eb:33:7f:57:7e:78:4b:7d:b1:73:7f:a4:b3:6a:c8:47:
4c:27:47:85:7c:df:f0:73:db:f9:45:16:0e:ff:72:33:55:2c:
ec:98:e9:2d:64:c3:2d:55:5a:a5:9b:4d:a5:be:8c:66:c4:22:
21:4a:f5:78:b5:e1:bd:c8:6a:23:57:17:56:a3:52:1d:d9:62:
73:de:a9:18:63:9e:64:9c:ba:db:7e:dd:88:f6:f0:75:64:64:
f5:7f:9e:8a:44:80:24:ed:89:50:9c:56:70:d1:eb:2a:38:b0:
ab:53:79:46:8a:03:84:3d:e3:9a:d2:23:21:ce:df:ca:56:ce:
90:97:ef:62:c9:11:e9:00:8f:02:b6:ad:8d:1c:e4:cb:e6:9b:
66:29:fb:3d:6f:f1:d4:59:fa:10:3d:ba:42:7b:64:e9:07:b0:
1e:fc:69:64:b3:d3:82:f4:6f:5f:b2:b2:1e:de:be:a5:6f:48:
de:36:4a:49:eb:00:20:58:c5:c1:e7:7a:fd:e9:7d:93:28:8d:
e8:1e:88:95:1e:4e:9f:8f:3b:c9:ca:8e:d5:e8:c0:a3:63:ac:
f8:72:45:f1:0e:31:bd:ae:98:d5:46:b5:79:5e:b8:6f:ca:57:
a8:c9:e7:7b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr8TBMMxJGN2bxqHAZO44uaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjMxMDA0MjAwNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTYyOTdkMDRlNjM1N2E1NTk4Njk5MmJmOGIwNzNjYzQyOWJlNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJSspryKs9KvNIAO6lESta82ls+I
NTKRMAl2io4AGVJoKkRzHtALBIGfB0cZ7veE8zn0/eudjxR5oF73rRn5sC7g8jzE
EMQ0krEJtvE78uuS01eojueUubgsfz6a6wX0IyKRmq6pEHk4Q1zVn2edhIB+nsPq
EJYYX7aEvpCt9z6d+bZ6dOuGVrfOP2OMk8FRAklHtRuTKIE5WU/W3bH8xiYT+hBm
c1w/UujaLqHetqOr/Xn1ZTqSHFKStqyKk2OYbfwx91b5H6moESiVczXlxWA6RRFC
vSsM69A4OIZoX1S1E5SWQvPZ1iysgdn+fOiRb6+tha9M9Zo95qKS1dbdEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNlil9BOY1elWYaZK/iwc8xCm+dXMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvMldLWDBFNWpWNlZaaHBrci1MQnp6RUtiNTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAshLnMA8E
AgACMAkDBwAqA1+AAAgwDQYJKoZIhvcNAQELBQADggEBAImrtqbRP+wsgz0lQiO2
n1UICvSi6zN/V354S32xc3+ks2rIR0wnR4V83/Bz2/lFFg7/cjNVLOyY6S1kwy1V
WqWbTaW+jGbEIiFK9Xi14b3IaiNXF1ajUh3ZYnPeqRhjnmScutt+3Yj28HVkZPV/
nopEgCTtiVCcVnDR6yo4sKtTeUaKA4Q945rSIyHO38pWzpCX72LJEekAjwK2rY0c
5Mvmm2Yp+z1v8dRZ+hA9ukJ7ZOkHsB78aWSz04L0b1+ysh7evqVvSN42SknrACBY
xcHnev3pfZMojegeiJUeTp+PO8nKjtXowKNjrPhyRfEOMb2umNVGtXleuG/KV6jJ
53s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:08 2024 by rpki-client on console-ams.rpki-client.org