Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/F4QkRevkKLURnshQcE-UVirigEY.roa
File: F4QkRevkKLURnshQcE-UVirigEY.roa (raw, json)
Hash identifier: q8PXR9/MkFEauBTqT9YFZhttR4WWrps14svWigK29g8=
Subject key identifier: 17:84:24:45:EB:E4:28:B5:11:9E:C8:50:70:4F:94:56:2A:E2:80:46
Certificate issuer: /CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
Certificate serial: 018570E74E4B2CD8E7EA40C97B6AF34032F2
Authority key identifier: D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/F4QkRevkKLURnshQcE-UVirigEY.roa
Signing time: Mon 02 Jan 2023 05:14:45 +0000
ROA not before: Mon 02 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 178.23.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4e:4b:2c:d8:e7:ea:40:c9:7b:6a:f3:40:32:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
Validity
Not Before: Jan 2 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17842445ebe428b5119ec850704f94562ae28046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:87:70:49:4d:2a:cf:36:46:9f:0b:75:f4:
34:e3:bf:00:90:33:99:ed:c3:3e:7e:9e:be:96:4f:
97:35:31:63:15:ec:3c:a2:e5:b0:09:2c:4e:d5:71:
78:2a:04:32:53:79:4c:8e:2f:a8:f5:a2:09:b4:f0:
41:ab:d9:c9:e7:20:1c:ba:cf:a0:ca:e7:6c:d4:f3:
26:5a:24:e2:b9:34:0e:4d:92:78:e1:79:f9:ba:0d:
7f:f1:c0:9f:f3:84:7a:3d:e7:9d:9f:2f:ef:65:3b:
a7:23:7b:88:e0:9d:79:9b:73:79:df:58:9f:4e:0e:
61:06:59:1c:66:d6:97:21:86:e4:a5:53:db:a1:e2:
d9:d6:ac:2b:ba:ba:01:19:8d:35:0a:5e:06:5c:15:
d2:87:d7:81:ac:f4:20:f6:db:19:d4:09:12:ff:9e:
93:5d:ea:cf:7a:a4:0c:68:a3:cf:09:21:81:11:2a:
29:9d:b6:9c:99:21:e9:fa:49:b0:2f:ba:5a:ba:e6:
ca:52:e6:28:49:b8:b7:96:c0:1f:5a:db:a3:dd:f1:
1c:2c:7f:67:24:63:91:81:f3:7b:40:f4:4c:2f:41:
90:43:95:b3:15:a9:3e:22:66:c9:ab:4b:66:a3:a4:
24:3c:8f:20:1b:9b:92:a1:87:38:a7:7c:48:da:db:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:24:45:EB:E4:28:B5:11:9E:C8:50:70:4F:94:56:2A:E2:80:46
X509v3 Authority Key Identifier:
keyid:D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/F4QkRevkKLURnshQcE-UVirigEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/0lGnPCqbtvnVyI4LOYiMipXFf4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
13:15:a6:fc:f5:f2:54:58:d1:e3:75:81:a5:61:a9:15:87:2e:
bc:65:39:e2:21:23:98:87:a5:04:6e:e9:35:9c:2b:a3:e0:d3:
78:d7:6e:c5:fd:bd:77:b8:bd:53:eb:4f:22:5a:52:13:5d:d7:
17:90:ec:55:63:b0:e4:98:c1:e5:39:4f:dd:6a:82:27:22:9a:
50:3e:c3:41:fd:f0:ff:80:51:0c:ab:d4:26:cf:5c:18:02:cd:
b2:7d:79:db:c4:2c:89:06:cb:cb:2d:0b:a9:a8:c2:67:fc:70:
f5:f7:79:6c:f7:3c:d5:ec:26:32:da:1d:6c:70:71:96:64:88:
ca:91:01:e8:74:3e:39:48:be:d5:4e:3a:ba:83:9b:c6:eb:24:
a4:15:82:55:47:8c:eb:43:43:de:5c:ca:91:d9:d0:fe:29:cd:
57:30:e0:a4:ca:8d:76:57:c7:c5:02:71:ea:6b:e0:34:ba:82:
e7:07:bc:b6:13:52:53:59:02:03:c5:63:fd:bf:e2:c9:49:55:
a2:c8:62:19:79:32:f6:e4:04:29:7b:30:b5:7e:1a:63:fb:00:
a5:63:ec:bf:c7:4d:84:90:30:31:60:68:0a:fb:1e:e2:74:d1:
be:f1:b7:fa:af:40:b5:ed:7e:d2:15:71:37:23:bb:62:08:22:
c1:2b:02:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw505LLNjn6kDJe2rzQDLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTFhNzNjMmE5YmI2ZjlkNWM4OGUwYjM5ODg4YzhhOTVj
NTdmODIwHhcNMjMwMTAyMDUxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzg0MjQ0NWViZTQyOGI1MTE5ZWM4NTA3MDRmOTQ1NjJhZTI4MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI2HcElNKs82Rp8LdfQ0478AkDOZ
7cM+fp6+lk+XNTFjFew8ouWwCSxO1XF4KgQyU3lMji+o9aIJtPBBq9nJ5yAcus+g
yuds1PMmWiTiuTQOTZJ44Xn5ug1/8cCf84R6Peedny/vZTunI3uI4J15m3N531if
Tg5hBlkcZtaXIYbkpVPboeLZ1qwruroBGY01Cl4GXBXSh9eBrPQg9tsZ1AkS/56T
XerPeqQMaKPPCSGBESopnbacmSHp+kmwL7pauubKUuYoSbi3lsAfWtuj3fEcLH9n
JGORgfN7QPRML0GQQ5WzFak+ImbJq0tmo6QkPI8gG5uSoYc4p3xI2tsJMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeEJEXr5Ci1EZ7IUHBPlFYq4oBGMB8GA1UdIwQY
MBaAFNJRpzwqm7b51ciOCzmIjIqVxX+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxHblBDcWJ0dm5WeUk0TE9ZaU1pcFhGZjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZTA4YTEtZjA4My00MzQwLWFmM2Ut
YmZlODAxYTQ1ZjFlLzEvRjRRa1JldmtLTFVSbnNoUWNFLVVWaXJpZ0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZTA4YTEtZjA4My00MzQwLWFmM2UtYmZlODAxYTQ1ZjFl
LzEvMGxHblBDcWJ0dm5WeUk0TE9ZaU1pcFhGZjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshe8MA0G
CSqGSIb3DQEBCwUAA4IBAQATFab89fJUWNHjdYGlYakVhy68ZTniISOYh6UEbuk1
nCuj4NN4127F/b13uL1T608iWlITXdcXkOxVY7DkmMHlOU/daoInIppQPsNB/fD/
gFEMq9Qmz1wYAs2yfXnbxCyJBsvLLQupqMJn/HD193ls9zzV7CYy2h1scHGWZIjK
kQHodD45SL7VTjq6g5vG6ySkFYJVR4zrQ0PeXMqR2dD+Kc1XMOCkyo12V8fFAnHq
a+A0uoLnB7y2E1JTWQIDxWP9v+LJSVWiyGIZeTL25AQpezC1fhpj+wClY+y/x02E
kDAxYGgK+x7idNG+8bf6r0C17X7SFXE3I7tiCCLBKwL4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org