Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/3V_VIVc5nTSyEj00x17OW8KbWZ4.roa
File: 3V_VIVc5nTSyEj00x17OW8KbWZ4.roa (raw, json)
Hash identifier: kdrAIINLebbfdWezjcyFHcBb2o0U0gB8vkBDfLaJL6E=
Subject key identifier: DD:5F:D5:21:57:39:9D:34:B2:12:3D:34:C7:5E:CE:5B:C2:9B:59:9E
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139B5C63DCC93FA0F1C5D020A4B66E9
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/3V_VIVc5nTSyEj00x17OW8KbWZ4.roa
Signing time: Mon 02 Jan 2023 06:44:45 +0000
ROA not before: Mon 02 Jan 2023 06:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212962
IP address blocks: 185.78.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b5:c6:3d:cc:93:fa:0f:1c:5d:02:0a:4b:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5fd52157399d34b2123d34c75ece5bc29b599e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:dc:41:60:5f:f5:0f:70:af:d8:f1:33:c1:
bb:b6:f0:25:c7:61:d7:9a:df:58:48:88:5c:e4:b6:
cb:4c:47:8f:31:56:e4:2b:f9:c4:81:e7:9f:a2:29:
58:ac:29:af:17:b2:9a:04:81:de:12:a9:b9:b3:04:
94:4b:99:da:63:1c:20:66:b0:90:d8:6f:84:65:19:
77:bd:6b:a1:58:ae:e3:c3:07:7d:f0:38:70:57:a4:
d4:f5:17:de:a0:4d:c2:5a:62:96:8d:2e:65:2a:71:
e4:a3:c6:e6:38:6e:00:f3:31:e4:c2:2d:ef:3d:be:
49:5c:27:a8:b4:4f:0a:8b:3a:b5:51:83:16:65:c8:
83:bd:10:6c:47:53:8d:10:d7:d2:75:a5:43:88:2a:
81:7b:de:9f:8a:a2:46:b8:b4:76:f8:fa:36:2e:55:
e0:3c:29:3a:16:98:84:01:42:13:ad:9b:6a:cd:04:
38:28:6d:93:81:54:bd:49:8e:c4:de:7c:e1:76:5c:
e8:e5:45:0a:42:96:4a:57:4c:50:28:9f:90:7d:5f:
ce:14:29:24:75:83:7c:86:0e:15:4c:e7:a2:e3:36:
ae:eb:60:60:fe:94:8e:22:e6:da:f7:4f:55:99:af:
60:10:60:5a:df:75:28:c4:19:89:b1:ce:22:55:12:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:D5:21:57:39:9D:34:B2:12:3D:34:C7:5E:CE:5B:C2:9B:59:9E
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/3V_VIVc5nTSyEj00x17OW8KbWZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.235.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0d:3b:37:30:13:36:e4:3f:0b:a5:1e:2c:0e:32:27:66:57:
a5:e6:4e:fa:09:7f:8d:34:56:c0:c8:97:e4:05:80:04:9f:6b:
ee:1b:2a:fb:c4:15:72:d1:42:a2:5b:08:cf:a1:45:dd:1f:f8:
93:81:47:bd:50:63:83:bb:94:24:9f:2f:30:a1:16:23:b2:ce:
ef:76:5a:05:0b:99:f1:78:3b:14:5c:ae:98:82:54:a0:a8:6d:
fd:37:5c:a6:29:b7:a7:70:a8:49:73:f1:b8:c5:d7:65:e2:18:
a1:1c:16:6a:7d:8d:70:bb:89:86:cf:f6:23:66:9d:04:c7:88:
1f:07:d5:2e:c2:31:ef:ab:33:74:2a:b5:80:74:0a:d5:40:21:
ce:12:fb:5c:56:12:2c:98:55:a9:b1:d6:53:5c:a5:9d:6c:6e:
3e:b4:98:ed:91:f1:56:c8:25:f4:0d:d2:24:69:52:72:74:2d:
cb:51:3c:e8:d9:00:fd:67:b5:18:a3:51:ae:63:9c:c5:67:da:
d9:32:de:38:32:b7:ac:9d:07:79:de:cd:c1:08:19:33:99:33:
99:c0:97:cb:ed:99:fe:e7:d8:a9:cc:55:0c:89:91:59:02:99:
2a:5f:cb:f5:75:ae:82:a9:66:ab:98:c0:00:5a:9f:f7:b1:2b:
91:b0:4f:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxObXGPcyT+g8cXQIKS2bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjMwMTAyMDY0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDVmZDUyMTU3Mzk5ZDM0YjIxMjNkMzRjNzVlY2U1YmMyOWI1OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAbcQWBf9Q9wr9jxM8G7tvAlx2HX
mt9YSIhc5LbLTEePMVbkK/nEgeefoilYrCmvF7KaBIHeEqm5swSUS5naYxwgZrCQ
2G+EZRl3vWuhWK7jwwd98DhwV6TU9RfeoE3CWmKWjS5lKnHko8bmOG4A8zHkwi3v
Pb5JXCeotE8Kizq1UYMWZciDvRBsR1ONENfSdaVDiCqBe96fiqJGuLR2+Po2LlXg
PCk6FpiEAUITrZtqzQQ4KG2TgVS9SY7E3nzhdlzo5UUKQpZKV0xQKJ+QfV/OFCkk
dYN8hg4VTOei4zau62Bg/pSOIuba909Vma9gEGBa33UoxBmJsc4iVRJuLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1f1SFXOZ00shI9NMdezlvCm1meMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvM1ZfVklWYzVuVFN5RWowMHgxN09XOEtiV1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU7rMA0G
CSqGSIb3DQEBCwUAA4IBAQAhDTs3MBM25D8LpR4sDjInZlel5k76CX+NNFbAyJfk
BYAEn2vuGyr7xBVy0UKiWwjPoUXdH/iTgUe9UGODu5Qkny8woRYjss7vdloFC5nx
eDsUXK6YglSgqG39N1ymKbencKhJc/G4xddl4hihHBZqfY1wu4mGz/YjZp0Ex4gf
B9UuwjHvqzN0KrWAdArVQCHOEvtcVhIsmFWpsdZTXKWdbG4+tJjtkfFWyCX0DdIk
aVJydC3LUTzo2QD9Z7UYo1GuY5zFZ9rZMt44MresnQd53s3BCBkzmTOZwJfL7Zn+
59ipzFUMiZFZApkqX8v1da6CqWarmMAAWp/3sSuRsE8G
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:59 2024 by rpki-client on console-fra.rpki-client.org