Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4PxuigS3jdQiqJlloNpR1G2rMB8.roa
File: 4PxuigS3jdQiqJlloNpR1G2rMB8.roa (raw, json)
Hash identifier: zEAntRd6uHAgZ+dFKEjj2MybVvYrpJkvngy80mMz4jk=
Subject key identifier: E0:FC:6E:8A:04:B7:8D:D4:22:A8:99:65:A0:DA:51:D4:6D:AB:30:1F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FC834D4594487FFCB0B1E1D0F8C67
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4PxuigS3jdQiqJlloNpR1G2rMB8.roa
Signing time: Tue 02 Jan 2024 04:30:18 +0000
ROA not before: Tue 02 Jan 2024 04:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 178.213.183.0/24 maxlen: 24
178.213.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c8:34:d4:59:44:87:ff:cb:0b:1e:1d:0f:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0fc6e8a04b78dd422a89965a0da51d46dab301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:ec:7b:3a:f8:fd:6a:97:fb:c4:4a:46:aa:
d5:18:de:cb:49:9b:3f:f1:74:dc:5e:2e:19:f1:4d:
79:98:9b:88:6d:04:7e:d9:d9:39:a2:87:d9:62:d0:
c4:f4:4d:8d:1a:d1:2f:f5:27:0a:aa:06:5f:f0:b6:
7e:0c:61:9a:46:41:1a:91:18:39:5d:73:66:df:b7:
6d:e5:43:12:24:08:58:3d:9a:35:20:eb:c2:5e:c5:
ab:ed:6d:2e:66:21:e4:72:14:04:9d:41:1a:99:fc:
e2:c9:40:61:f4:f5:29:16:91:a6:4e:56:a5:1e:b3:
9d:38:00:76:02:56:31:c7:14:18:d1:64:a2:77:87:
15:1d:5b:12:a7:da:c5:df:11:34:44:84:15:a2:6f:
cb:25:74:79:1b:80:80:f0:3c:ae:a5:2b:b1:ff:d5:
47:4a:ff:b4:41:1a:ef:fb:d5:bb:d0:00:16:5e:e2:
5d:d4:5f:0a:25:dc:1d:a3:bc:2c:62:5f:d7:d8:e5:
4e:fd:02:bf:a5:28:ee:9c:4b:33:86:8b:d1:12:c0:
8e:b3:72:c2:77:f7:c0:24:56:78:bb:3e:e3:38:bf:
62:1e:83:1e:e0:9f:90:94:07:ba:9d:0d:88:9a:92:
c1:db:75:fa:74:f8:2e:fe:51:f8:91:63:36:38:d4:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:6E:8A:04:B7:8D:D4:22:A8:99:65:A0:DA:51:D4:6D:AB:30:1F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4PxuigS3jdQiqJlloNpR1G2rMB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.182.0/23
Signature Algorithm: sha256WithRSAEncryption
51:31:fa:8c:18:6d:6c:e3:99:df:c5:e9:a7:19:55:bf:4b:a1:
3e:eb:b6:c3:8e:28:c5:b1:b0:d9:55:5e:ef:e0:8f:8e:73:9b:
b5:31:ca:10:49:4c:47:22:91:e3:7a:b8:54:5e:74:d5:76:2d:
18:3a:e9:ea:81:ab:7a:02:e8:14:ea:bb:a1:15:96:76:02:8d:
04:a8:5b:01:46:55:86:38:f3:2f:a0:aa:3a:de:61:c4:d9:56:
a0:3e:d9:35:a8:aa:39:f6:34:05:c6:0c:5c:0a:e7:1d:5e:98:
12:40:33:4e:79:da:c4:f5:dc:45:de:39:33:dd:e3:39:e8:8c:
8a:5e:d6:87:5a:7b:93:1e:3d:3f:b9:49:db:a6:46:a6:8a:70:
e4:9f:86:ec:b6:40:da:b5:63:57:d8:c9:95:b3:1b:38:7d:58:
7d:37:0f:b8:84:0e:d1:9a:ac:c1:28:24:e4:c7:5e:53:7a:1d:
01:6a:53:c9:f7:6e:00:8b:20:dd:f5:c7:bc:6b:89:42:47:5d:
e2:72:33:bc:36:dc:a6:5f:32:06:a3:b8:60:a6:84:ce:dc:54:
fc:76:a5:a0:6e:b0:b2:32:c8:ec:e9:12:a1:a0:d4:80:33:fe:
53:48:31:0b:21:d1:58:d2:9f:ac:1b:92:c4:b5:36:31:e8:32:
3d:73:ad:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb8g01FlEh//LCx4dD4xnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwMTAyMDQzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGZjNmU4YTA0Yjc4ZGQ0MjJhODk5NjVhMGRhNTFkNDZkYWIzMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bzsezr4/WqX+8RKRqrVGN7LSZs/
8XTcXi4Z8U15mJuIbQR+2dk5oofZYtDE9E2NGtEv9ScKqgZf8LZ+DGGaRkEakRg5
XXNm37dt5UMSJAhYPZo1IOvCXsWr7W0uZiHkchQEnUEamfziyUBh9PUpFpGmTlal
HrOdOAB2AlYxxxQY0WSid4cVHVsSp9rF3xE0RIQVom/LJXR5G4CA8DyupSux/9VH
Sv+0QRrv+9W70AAWXuJd1F8KJdwdo7wsYl/X2OVO/QK/pSjunEszhovREsCOs3LC
d/fAJFZ4uz7jOL9iHoMe4J+QlAe6nQ2ImpLB23X6dPgu/lH4kWM2ONSYVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOD8booEt43UIqiZZaDaUdRtqzAfMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvNFB4dWlnUzNqZFFpcUpsbG9OcFIxRzJyTUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBstW2MA0G
CSqGSIb3DQEBCwUAA4IBAQBRMfqMGG1s45nfxemnGVW/S6E+67bDjijFsbDZVV7v
4I+Oc5u1McoQSUxHIpHjerhUXnTVdi0YOunqgat6AugU6ruhFZZ2Ao0EqFsBRlWG
OPMvoKo63mHE2VagPtk1qKo59jQFxgxcCucdXpgSQDNOedrE9dxF3jkz3eM56IyK
XtaHWnuTHj0/uUnbpkaminDkn4bstkDatWNX2MmVsxs4fVh9Nw+4hA7RmqzBKCTk
x15Teh0BalPJ924AiyDd9ce8a4lCR13icjO8NtymXzIGo7hgpoTO3FT8dqWgbrCy
Msjs6RKhoNSAM/5TSDELIdFY0p+sG5LEtTYx6DI9c62a
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:10 2025 by rpki-client