Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Ww7QAj1zRFmrJd1VSRVihJzEBjc.roa
File: Ww7QAj1zRFmrJd1VSRVihJzEBjc.roa (raw, json)
Hash identifier: YpbIX8qyuDq/ApBMOpWrlCQyZLa9LhmheO/KR+khbrY=
Subject key identifier: 5B:0E:D0:02:3D:73:44:59:AB:25:DD:55:49:15:62:84:9C:C4:06:37
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01857246FCE212C90C64AA62C6F85006FC54
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Ww7QAj1zRFmrJd1VSRVihJzEBjc.roa
Signing time: Mon 02 Jan 2023 11:38:52 +0000
ROA not before: Mon 02 Jan 2023 11:38:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207168
IP address blocks: 178.236.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fc:e2:12:c9:0c:64:aa:62:c6:f8:50:06:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 2 11:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b0ed0023d734459ab25dd55491562849cc40637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1a:7c:aa:cf:98:53:d4:f0:7d:1b:7d:92:91:
49:07:91:f0:87:86:46:69:44:dd:39:bf:b2:b1:e1:
f2:be:58:0e:4e:b2:8b:9d:29:27:c1:08:6f:83:00:
a7:9d:ae:7c:e2:11:7e:01:73:5e:e7:73:03:25:8f:
f4:36:06:6b:ea:25:f3:3b:06:1c:1b:8c:bf:8f:2b:
e4:40:c4:30:0f:cb:65:30:d3:be:da:07:74:99:b3:
e9:57:74:8e:45:0b:b0:f7:3d:19:a9:97:fb:4f:d2:
d2:63:83:06:57:ac:ef:21:5f:8c:91:49:3b:3e:36:
c1:97:25:d5:08:6d:68:d4:b2:46:61:b1:7f:6d:5f:
a7:da:1e:f2:eb:f4:cb:cf:12:43:19:bd:f0:70:b6:
d9:4b:76:da:be:64:de:32:eb:49:8d:3e:13:6e:e3:
49:99:c6:00:c1:20:ca:5d:72:14:62:7a:54:27:8d:
be:5f:41:9c:1a:85:f9:c7:0d:54:6b:e7:f2:4a:2d:
11:e2:5e:14:0f:08:90:d8:37:e2:9c:57:7a:af:5f:
6d:77:9a:44:ca:c6:cf:31:84:a3:8d:5f:7b:2b:fe:
d7:f6:93:11:cb:e4:dc:c6:8f:64:ce:99:b4:7b:e5:
47:ac:43:f7:89:9c:17:fd:b6:d3:34:20:a8:55:23:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:D0:02:3D:73:44:59:AB:25:DD:55:49:15:62:84:9C:C4:06:37
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Ww7QAj1zRFmrJd1VSRVihJzEBjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d4:ec:80:9f:9a:61:60:98:a5:0a:16:39:20:a6:cb:06:6f:
71:a4:ae:f0:38:00:0a:99:ec:bd:6e:e6:f8:3f:d6:b9:4e:3d:
57:1c:fd:6c:76:96:d2:8e:c3:9d:24:8e:98:40:3f:0f:00:a2:
ae:ec:95:9a:d8:78:3c:5f:8e:e4:3a:81:54:03:99:a8:15:ea:
a0:7e:cc:09:60:3c:42:ac:71:ff:cc:40:87:a6:04:7d:ab:ab:
f3:98:cb:c7:7e:97:bb:04:8c:5a:90:83:e9:81:f6:ce:de:17:
ee:03:07:d2:a4:4c:e7:5d:9b:fa:8e:43:bd:39:7b:92:12:e0:
52:6e:d4:0d:a3:76:b8:a4:08:15:5f:73:27:ee:2b:e9:8b:49:
6e:f5:a9:25:c7:cd:fb:42:95:87:1d:78:17:d0:f3:23:70:07:
de:fc:3d:a8:af:67:96:30:b7:1b:7d:85:d6:09:f6:50:79:5c:
ed:74:f6:66:73:a6:90:ab:a1:0a:83:d8:d9:cc:32:11:8d:a6:
70:1e:d8:67:75:96:a3:76:65:a3:0b:94:f7:c4:e9:b6:1d:e3:
b8:fe:5c:b6:a0:d7:0a:94:6c:4f:c6:6c:37:67:1a:5b:fb:92:
f9:0a:2c:13:7f:00:9c:ce:f9:86:e6:0b:64:a7:7e:76:96:7d:
07:82:55:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRvziEskMZKpixvhQBvxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjMwMTAyMTEzODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjBlZDAwMjNkNzM0NDU5YWIyNWRkNTU0OTE1NjI4NDljYzQwNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRp8qs+YU9TwfRt9kpFJB5Hwh4ZG
aUTdOb+yseHyvlgOTrKLnSknwQhvgwCnna584hF+AXNe53MDJY/0NgZr6iXzOwYc
G4y/jyvkQMQwD8tlMNO+2gd0mbPpV3SORQuw9z0ZqZf7T9LSY4MGV6zvIV+MkUk7
PjbBlyXVCG1o1LJGYbF/bV+n2h7y6/TLzxJDGb3wcLbZS3bavmTeMutJjT4TbuNJ
mcYAwSDKXXIUYnpUJ42+X0GcGoX5xw1Ua+fySi0R4l4UDwiQ2DfinFd6r19td5pE
ysbPMYSjjV97K/7X9pMRy+Tcxo9kzpm0e+VHrEP3iZwX/bbTNCCoVSNscwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFsO0AI9c0RZqyXdVUkVYoScxAY3MB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvV3c3UUFqMXpSRm1ySmQxVlNSVmloSnpFQmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuyLMA0G
CSqGSIb3DQEBCwUAA4IBAQAe1OyAn5phYJilChY5IKbLBm9xpK7wOAAKmey9bub4
P9a5Tj1XHP1sdpbSjsOdJI6YQD8PAKKu7JWa2Hg8X47kOoFUA5moFeqgfswJYDxC
rHH/zECHpgR9q6vzmMvHfpe7BIxakIPpgfbO3hfuAwfSpEznXZv6jkO9OXuSEuBS
btQNo3a4pAgVX3Mn7ivpi0lu9aklx837QpWHHXgX0PMjcAfe/D2or2eWMLcbfYXW
CfZQeVztdPZmc6aQq6EKg9jZzDIRjaZwHthndZajdmWjC5T3xOm2HeO4/ly2oNcK
lGxPxmw3Zxpb+5L5CiwTfwCczvmG5gtkp352ln0HglVJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:35 2024 by rpki-client on console-ams.rpki-client.org