Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CseWYdX5cTxHlhyedfQqxGkrMZU.roa
File: CseWYdX5cTxHlhyedfQqxGkrMZU.roa (raw, json)
Hash identifier: FxZCKRDKSw30IAlChWWsJDeFiVICidVFdpB/yKu1Kto=
Subject key identifier: 0A:C7:96:61:D5:F9:71:3C:47:96:1C:9E:75:F4:2A:C4:69:2B:31:95
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018573900EFEEB0ABA423B7708FF24A3AA27
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CseWYdX5cTxHlhyedfQqxGkrMZU.roa
Signing time: Mon 02 Jan 2023 17:38:18 +0000
ROA not before: Mon 02 Jan 2023 17:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 78.108.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:0e:fe:eb:0a:ba:42:3b:77:08:ff:24:a3:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac79661d5f9713c47961c9e75f42ac4692b3195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:6c:d9:7d:6a:5a:ac:9e:28:59:d4:5b:31:
b4:b5:8b:bb:60:df:12:2d:01:2a:c0:91:7c:c3:a1:
60:59:9c:7e:04:44:2e:57:b4:92:65:af:7f:ab:b9:
6f:14:7a:97:25:7c:c5:e5:6c:a4:2a:fa:bc:27:7d:
4e:41:2f:10:f1:51:37:c8:d5:68:7f:65:c7:45:42:
18:c4:63:7e:7d:f5:83:1e:1f:fb:f5:96:98:65:32:
f2:70:94:82:88:59:82:6a:85:49:cb:72:df:f1:00:
fd:ab:74:9c:28:78:30:d8:44:31:a9:d3:8b:fe:4d:
ae:7c:48:f5:69:a9:85:27:6b:a9:8c:37:ae:7d:d0:
08:82:53:93:23:81:ad:e6:e7:7c:42:d4:f1:45:a3:
08:45:8d:64:02:97:19:ca:c1:f6:16:e6:1e:67:77:
48:14:ed:fe:d5:0a:58:75:73:8a:2f:5e:86:22:17:
ff:1e:8a:ec:11:db:70:43:81:d7:63:7d:d9:28:07:
74:b9:44:97:a2:d9:bf:d2:24:4b:cf:c1:41:10:47:
45:d0:ad:2e:e5:bd:ed:0f:4e:d8:ca:55:57:b9:bc:
b2:d9:ed:c0:69:1e:59:6f:06:3b:1c:2f:e8:7c:99:
81:1c:6b:26:cc:15:31:26:8c:6f:80:3a:04:33:f1:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:96:61:D5:F9:71:3C:47:96:1C:9E:75:F4:2A:C4:69:2B:31:95
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CseWYdX5cTxHlhyedfQqxGkrMZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:76:a0:33:d9:3e:25:c3:8e:d5:ff:35:1b:db:7c:12:c1:de:
0b:24:be:7d:e5:f3:7a:9c:6c:61:52:49:41:64:6e:47:36:c4:
b0:27:99:2d:c5:31:7b:d6:cd:f3:d8:96:77:8a:77:92:4c:23:
fc:44:fe:06:cf:8a:99:02:ff:95:8e:d2:f3:06:52:69:71:15:
60:10:c7:d9:51:c9:f3:5d:1a:87:61:c4:3e:12:86:81:cc:dd:
d3:3f:dd:84:f9:04:86:1b:f5:53:50:01:05:19:a3:10:43:7d:
c2:fb:4d:5e:e4:df:4b:a6:a6:0d:39:95:32:db:e0:ca:04:ed:
27:fc:2a:c2:ff:20:c9:db:47:a7:43:f4:17:18:ed:26:66:72:
2c:b6:ee:a9:63:30:f9:c9:1e:9d:43:8e:72:3a:8b:aa:b6:a0:
7f:8c:54:f4:c6:c8:ce:de:7d:84:a8:8a:99:8a:80:6f:44:63:
f6:2f:b4:08:2c:f0:93:93:a0:b6:38:94:06:a2:f0:9a:5b:9a:
8f:b3:9a:4b:58:69:fc:ec:f2:ba:c9:a3:bc:9b:35:a7:e5:14:
32:81:bc:e7:1a:db:f0:a3:7f:d4:59:15:f8:71:36:11:b0:b3:
be:c8:eb:f7:0d:68:35:66:f3:62:ba:09:a2:75:2d:9d:8f:99:
98:7b:6d:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzkA7+6wq6Qjt3CP8ko6onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwMTAyMTczODE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWM3OTY2MWQ1Zjk3MTNjNDc5NjFjOWU3NWY0MmFjNDY5MmIzMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA5s2X1qWqyeKFnUWzG0tYu7YN8S
LQEqwJF8w6FgWZx+BEQuV7SSZa9/q7lvFHqXJXzF5WykKvq8J31OQS8Q8VE3yNVo
f2XHRUIYxGN+ffWDHh/79ZaYZTLycJSCiFmCaoVJy3Lf8QD9q3ScKHgw2EQxqdOL
/k2ufEj1aamFJ2upjDeufdAIglOTI4Gt5ud8QtTxRaMIRY1kApcZysH2FuYeZ3dI
FO3+1QpYdXOKL16GIhf/HorsEdtwQ4HXY33ZKAd0uUSXotm/0iRLz8FBEEdF0K0u
5b3tD07YylVXubyy2e3AaR5ZbwY7HC/ofJmBHGsmzBUxJoxvgDoEM/FXOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFArHlmHV+XE8R5YcnnX0KsRpKzGVMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvQ3NlV1lkWDVjVHhIbGh5ZWRmUXF4R2tyTVpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmzbMA0G
CSqGSIb3DQEBCwUAA4IBAQChdqAz2T4lw47V/zUb23wSwd4LJL595fN6nGxhUklB
ZG5HNsSwJ5ktxTF71s3z2JZ3ineSTCP8RP4Gz4qZAv+VjtLzBlJpcRVgEMfZUcnz
XRqHYcQ+EoaBzN3TP92E+QSGG/VTUAEFGaMQQ33C+01e5N9LpqYNOZUy2+DKBO0n
/CrC/yDJ20enQ/QXGO0mZnIstu6pYzD5yR6dQ45yOouqtqB/jFT0xsjO3n2EqIqZ
ioBvRGP2L7QILPCTk6C2OJQGovCaW5qPs5pLWGn87PK6yaO8mzWn5RQygbznGtvw
o3/UWRX4cTYRsLO+yOv3DWg1ZvNiugmidS2dj5mYe21A
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:20 2024 by rpki-client on console-fra.rpki-client.org