Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/X_9aEsfQaVOQ-FtYAXRSMmLQshg.roa
File: X_9aEsfQaVOQ-FtYAXRSMmLQshg.roa (raw, json)
Hash identifier: E3m0tB0ma8MxezHrAfgEAeR6hUSq5avsTmQqg7I8fyk=
Subject key identifier: 5F:FF:5A:12:C7:D0:69:53:90:F8:5B:58:01:74:52:32:62:D0:B2:18
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B5323F98E46A968B74198D31FD28977
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/X_9aEsfQaVOQ-FtYAXRSMmLQshg.roa
Signing time: Sun 01 Jan 2023 03:14:48 +0000
ROA not before: Sun 01 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 213.238.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:23:f9:8e:46:a9:68:b7:41:98:d3:1f:d2:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fff5a12c7d0695390f85b580174523262d0b218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:44:5f:68:90:53:b9:22:ec:76:3f:fc:2f:
e7:69:2d:48:4e:59:2d:80:37:46:b8:39:ee:34:3b:
6b:f1:5e:4e:4c:30:e8:d5:f4:b5:7c:2f:96:26:ba:
2e:30:b3:8b:01:ab:e2:cb:68:ab:89:f0:2a:97:eb:
54:1b:00:74:08:bd:2f:a7:fa:69:b1:04:85:88:9e:
76:7a:8a:ab:b3:db:95:6c:bd:e1:ef:a2:78:bf:89:
09:76:78:08:7c:ef:74:b8:39:cd:b2:21:2f:dd:d4:
aa:61:6b:dd:4d:ba:52:2d:bf:4f:2a:08:e9:32:7e:
2b:60:68:fc:c5:7e:26:5c:bf:e9:52:de:04:25:92:
02:12:2e:99:bd:a6:44:60:37:0b:15:c2:d9:ad:9f:
a8:85:81:d7:a2:f4:11:56:dc:16:93:6f:51:bc:4d:
93:dc:bf:95:e9:d9:60:4d:21:26:72:61:4d:d6:19:
6f:9b:b0:e8:af:f1:21:d6:5a:9c:1f:35:58:02:bc:
77:dd:39:38:67:dd:83:af:4f:66:b5:ee:37:0c:2a:
17:21:0a:01:3c:c8:cd:12:9d:a0:ca:57:9d:b4:85:
8d:0f:9b:3a:f4:68:5d:a1:49:b8:36:b2:5c:b9:f4:
05:bb:e8:cc:58:cd:93:d1:b8:43:3a:33:0f:75:5f:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:5A:12:C7:D0:69:53:90:F8:5B:58:01:74:52:32:62:D0:B2:18
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/X_9aEsfQaVOQ-FtYAXRSMmLQshg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:96:84:62:4c:b6:70:47:96:0b:34:42:d1:fa:11:4a:86:19:
54:94:03:fc:58:c1:0a:7a:a8:be:80:70:e7:c8:6a:30:c3:aa:
3e:c3:a3:70:2e:11:10:03:46:69:8d:ad:57:ad:4e:73:15:dd:
f2:24:67:18:02:2b:87:87:c6:50:c4:da:98:33:3c:15:9a:b1:
ec:0b:99:7f:75:ed:95:ab:b0:2d:a1:43:80:7e:41:54:cb:62:
37:1c:46:d2:4a:3a:69:55:b8:95:bc:85:f7:51:56:ca:84:1c:
72:33:f8:02:10:d9:4e:9d:ab:c8:a1:cf:4a:a5:d2:da:6b:6d:
07:5e:11:9f:d8:0c:f2:27:92:b9:40:52:71:03:24:de:60:f3:
8b:8c:37:ef:15:ae:0f:ba:42:84:c2:2c:3b:6e:75:4d:4f:74:
49:c6:d0:ad:ee:00:51:9a:1f:69:a3:79:5e:3b:83:da:32:89:
63:01:04:eb:a5:00:50:92:49:8b:49:52:52:59:79:59:8b:17:
f1:1e:e5:01:92:a8:1b:d5:bf:c4:91:9c:b0:54:ee:81:1a:70:
e2:40:ab:67:48:9f:e1:c1:72:f9:f2:b9:d1:a1:51:78:03:83:
c0:ea:29:ac:c4:77:41:53:c3:95:8e:41:82:0b:3c:4e:4e:4f:
73:49:5a:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrUyP5jkapaLdBmNMf0ol3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjMwMTAxMDMxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmZmNWExMmM3ZDA2OTUzOTBmODViNTgwMTc0NTIzMjYyZDBiMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7JEX2iQU7ki7HY//C/naS1ITlkt
gDdGuDnuNDtr8V5OTDDo1fS1fC+WJrouMLOLAaviy2irifAql+tUGwB0CL0vp/pp
sQSFiJ52eoqrs9uVbL3h76J4v4kJdngIfO90uDnNsiEv3dSqYWvdTbpSLb9PKgjp
Mn4rYGj8xX4mXL/pUt4EJZICEi6ZvaZEYDcLFcLZrZ+ohYHXovQRVtwWk29RvE2T
3L+V6dlgTSEmcmFN1hlvm7Dor/Eh1lqcHzVYArx33Tk4Z92Dr09mte43DCoXIQoB
PMjNEp2gyledtIWND5s69GhdoUm4NrJcufQFu+jMWM2T0bhDOjMPdV9UEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF//WhLH0GlTkPhbWAF0UjJi0LIYMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvWF85YUVzZlFhVk9RLUZ0WUFYUlNNbUxRc2hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e62MA0G
CSqGSIb3DQEBCwUAA4IBAQDAloRiTLZwR5YLNELR+hFKhhlUlAP8WMEKeqi+gHDn
yGoww6o+w6NwLhEQA0Zpja1XrU5zFd3yJGcYAiuHh8ZQxNqYMzwVmrHsC5l/de2V
q7AtoUOAfkFUy2I3HEbSSjppVbiVvIX3UVbKhBxyM/gCENlOnavIoc9KpdLaa20H
XhGf2AzyJ5K5QFJxAyTeYPOLjDfvFa4PukKEwiw7bnVNT3RJxtCt7gBRmh9po3le
O4PaMoljAQTrpQBQkkmLSVJSWXlZixfxHuUBkqgb1b/EkZywVO6BGnDiQKtnSJ/h
wXL58rnRoVF4A4PA6imsxHdBU8OVjkGCCzxOTk9zSVos
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org