Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/a2cKjJyMXMrFM_c5td2-GnTAIIk.roa
File: a2cKjJyMXMrFM_c5td2-GnTAIIk.roa (raw, json)
Hash identifier: ARyfLOfZsD3RvlIheC9ZAyRUyFoPS81Xi/vB3rGyfKU=
Subject key identifier: 6B:67:0A:8C:9C:8C:5C:CA:C5:33:F7:39:B5:DD:BE:1A:74:C0:20:89
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 01856F66DBF4E348E616E13026493D176B8F
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/a2cKjJyMXMrFM_c5td2-GnTAIIk.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198916
IP address blocks: 178.23.201.0/24 maxlen: 24
178.23.204.0/23 maxlen: 24
185.109.68.0/22 maxlen: 24
178.23.206.0/24 maxlen: 24
178.23.206.0/23 maxlen: 24
178.23.202.0/23 maxlen: 24
178.23.200.0/24 maxlen: 24
178.23.207.0/24 maxlen: 24
2a01:6080::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:db:f4:e3:48:e6:16:e1:30:26:49:3d:17:6b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b670a8c9c8c5ccac533f739b5ddbe1a74c02089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:72:1f:8b:f3:b2:62:c4:06:b2:ea:00:01:
7c:f6:a3:04:20:3e:18:09:d6:25:ea:1f:24:8b:63:
bf:5b:5f:95:2b:46:a5:27:92:d6:17:31:d6:56:49:
78:b2:e7:c4:2b:7b:33:c3:6f:05:da:d1:06:82:eb:
d2:10:ee:87:d7:1a:be:e7:96:7c:c2:a2:c0:f8:d2:
6f:7e:b2:97:10:35:24:fb:1b:12:62:7e:e1:1c:3c:
a8:d7:43:c5:f2:83:74:a6:13:36:f2:85:0f:61:2e:
d9:ff:bc:2e:12:ba:6a:6c:93:f9:af:40:9b:ca:d8:
5f:8a:16:81:3e:2a:e2:4c:bc:0e:2a:41:f4:23:b1:
b0:3f:9d:66:af:2f:7b:b2:b0:d6:ae:7e:ed:85:8a:
6a:e6:96:72:7d:7e:26:fd:48:88:b7:da:9a:b1:4a:
88:35:80:86:90:ce:b6:69:fa:58:53:89:3f:a6:45:
91:4e:6f:40:60:cd:2d:65:df:2e:3d:90:b8:61:3a:
55:15:15:d4:36:40:82:4c:36:40:13:56:46:54:71:
42:84:e8:9a:f1:c1:cd:d7:cd:12:69:8d:d2:bb:8a:
e8:76:22:26:f0:a9:7b:a8:cb:ab:ef:12:fd:91:64:
ae:97:06:73:ae:17:0f:68:27:7c:a6:c6:34:6e:a9:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:67:0A:8C:9C:8C:5C:CA:C5:33:F7:39:B5:DD:BE:1A:74:C0:20:89
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/a2cKjJyMXMrFM_c5td2-GnTAIIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.200.0/21
185.109.68.0/22
IPv6:
2a01:6080::/32
Signature Algorithm: sha256WithRSAEncryption
81:10:69:b8:1e:63:23:98:44:b5:81:86:d6:d6:ec:c4:22:15:
fc:a1:e1:4e:5c:62:4b:ac:10:61:1c:03:8c:79:1d:92:9c:c2:
e1:2b:07:16:87:b9:8b:f4:2a:ac:bd:61:4f:5b:d8:ea:c5:48:
b3:ad:6f:d6:2f:7f:4e:48:0b:1b:e5:f5:88:b4:be:53:bd:b6:
d1:2d:aa:ee:b1:64:91:dc:08:a8:39:0d:3e:8c:35:ac:9a:28:
cd:41:5d:71:c8:44:dc:32:16:cc:99:b8:cb:f0:b7:76:f3:80:
9c:7f:e3:7f:12:0e:45:f4:28:24:10:3e:c3:19:2c:20:7d:d7:
66:ae:d4:6f:5e:78:8a:0c:eb:f8:68:d3:e1:3e:1e:22:15:9b:
0d:6a:16:49:22:e6:b0:69:05:36:40:a8:31:c9:10:7a:d9:66:
d8:79:22:0f:e6:d8:b9:93:f4:f1:31:b8:ec:93:06:28:81:f5:
51:bf:58:80:74:54:1a:05:0a:d5:9a:ae:6f:1c:8b:49:97:33:
07:ec:d9:4e:91:8a:65:16:a9:ca:c6:85:e2:88:c0:36:6f:32:
f5:f3:7a:c5:17:be:53:3f:d5:bb:d8:41:28:5b:ee:ae:09:28:
2b:6f:a2:70:a5:c1:0d:33:7e:0f:b1:c1:f0:3b:f6:d3:d6:ed:
6a:09:3d:ae
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvZtv040jmFuEwJkk9F2uPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy
NTE0MmIwHhcNMjMwMTAxMjIxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjY3MGE4YzljOGM1Y2NhYzUzM2Y3MzliNWRkYmUxYTc0YzAyMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRlyH4vzsmLEBrLqAAF89qMEID4Y
CdYl6h8ki2O/W1+VK0alJ5LWFzHWVkl4sufEK3szw28F2tEGguvSEO6H1xq+55Z8
wqLA+NJvfrKXEDUk+xsSYn7hHDyo10PF8oN0phM28oUPYS7Z/7wuErpqbJP5r0Cb
ythfihaBPiriTLwOKkH0I7GwP51mry97srDWrn7thYpq5pZyfX4m/UiIt9qasUqI
NYCGkM62afpYU4k/pkWRTm9AYM0tZd8uPZC4YTpVFRXUNkCCTDZAE1ZGVHFChOia
8cHN180SaY3Su4rodiIm8Kl7qMur7xL9kWSulwZzrhcPaCd8psY0bqn8twIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGtnCoycjFzKxTP3ObXdvhp0wCCJMB8GA1UdIwQY
MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt
MTM2YzlmZmNiODJjLzEvYTJjS2pKeU1YTXJGTV9jNXRkMi1HblRBSUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj
LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDshfIAwQC
uW1EMA0EAgACMAcDBQAqAWCAMA0GCSqGSIb3DQEBCwUAA4IBAQCBEGm4HmMjmES1
gYbW1uzEIhX8oeFOXGJLrBBhHAOMeR2SnMLhKwcWh7mL9CqsvWFPW9jqxUizrW/W
L39OSAsb5fWItL5TvbbRLarusWSR3AioOQ0+jDWsmijNQV1xyETcMhbMmbjL8Ld2
84Ccf+N/Eg5F9CgkED7DGSwgfddmrtRvXniKDOv4aNPhPh4iFZsNahZJIuawaQU2
QKgxyRB62WbYeSIP5ti5k/TxMbjskwYogfVRv1iAdFQaBQrVmq5vHItJlzMH7NlO
kYplFqnKxoXiiMA2bzL183rFF75TP9W72EEoW+6uCSgrb6JwpcENM34PscHwO/bT
1u1qCT2u
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:26 2024 by rpki-client on console-fra.rpki-client.org