Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/zuFeffjGn_PE4hXripNXbTzyYcQ.roa
File: zuFeffjGn_PE4hXripNXbTzyYcQ.roa (raw, json)
Hash identifier: +G1VzvX32M9gJTrP1BJSJM6QbKLj16HVQsddUajRAVc=
Subject key identifier: CE:E1:5E:7D:F8:C6:9F:F3:C4:E2:15:EB:8A:93:57:6D:3C:F2:61:C4
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 018570D5170D56092413CA8EF633ACABF2E1
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/zuFeffjGn_PE4hXripNXbTzyYcQ.roa
Signing time: Mon 02 Jan 2023 04:54:51 +0000
ROA not before: Mon 02 Jan 2023 04:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134408
IP address blocks: 178.237.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:17:0d:56:09:24:13:ca:8e:f6:33:ac:ab:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 04:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee15e7df8c69ff3c4e215eb8a93576d3cf261c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:ed:c2:fc:7b:2b:74:f9:17:17:96:65:47:
b4:8c:bf:99:0e:79:73:3d:f8:79:32:d1:99:5c:d7:
57:2d:90:79:48:cc:bb:33:f0:70:ef:e6:22:17:63:
0d:4d:b9:20:f8:0e:1b:d9:c0:0b:ff:15:bc:f5:03:
53:f0:a6:50:e3:0a:5a:30:bf:7c:93:db:a8:74:5d:
2c:06:01:ba:3d:43:8e:8f:77:c1:a3:60:d0:54:d1:
87:f0:41:40:5d:c6:d2:03:a4:1a:1f:d3:61:a2:10:
b1:e1:54:4a:f8:23:0c:fa:39:7c:16:35:ef:68:2d:
92:77:5d:72:98:d7:5b:42:ec:b6:e1:fd:c7:60:6e:
d5:06:93:48:a4:1b:b8:fc:f7:db:40:d1:d6:38:df:
24:9b:f0:23:9c:91:68:7a:17:1a:f9:3e:91:43:60:
f4:cb:2c:c2:db:c5:e5:1a:24:fd:e8:d4:7d:38:89:
6e:6a:11:3d:ec:fb:f3:f9:03:6a:65:fb:2d:f4:e7:
de:f3:a2:c5:f3:67:9e:be:6c:68:9d:ee:3e:04:ec:
5f:0a:e0:c8:da:e1:61:83:5f:f6:34:b5:52:a9:27:
6c:c1:b3:86:f0:d9:1b:b0:0f:36:c6:8e:5d:55:3b:
c9:a4:ba:5a:ec:d9:30:c8:b6:e7:30:8c:0b:4b:50:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E1:5E:7D:F8:C6:9F:F3:C4:E2:15:EB:8A:93:57:6D:3C:F2:61:C4
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/zuFeffjGn_PE4hXripNXbTzyYcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.171.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7b:44:24:e8:e6:85:f0:9b:51:c4:98:77:5f:2f:58:d9:35:
b6:58:bd:5c:56:11:b9:21:2f:bf:40:05:34:b1:eb:45:9c:4d:
9a:ce:f5:cb:c5:6f:d3:32:5f:c9:46:eb:95:c0:ca:c7:6b:0d:
da:71:3f:f1:59:cf:ec:04:42:12:d5:7d:64:16:6d:64:d2:3f:
08:ff:c4:f6:24:ea:49:15:49:bb:b4:ca:7b:b8:d4:50:0c:13:
e7:1c:73:24:ef:d4:04:8b:f2:54:74:4c:f8:7a:e8:ce:6c:fc:
21:fc:c0:db:19:56:0a:78:2e:65:6e:5b:d8:1d:cf:1b:1d:7d:
32:7d:f8:f1:97:1a:4a:bd:ae:55:71:67:f7:0a:66:2c:e6:d0:
8c:06:0d:7e:e4:81:b1:75:ba:3c:21:48:97:c0:9a:f0:4c:30:
ee:ee:ae:e1:fd:fb:75:78:cd:ef:d3:bc:f2:dc:2f:29:35:4d:
43:e3:6b:15:28:46:5c:2e:48:b1:8f:d4:42:4d:53:a2:6e:0d:
10:72:70:f7:73:4e:6d:3a:2f:f5:61:32:5b:52:72:f2:77:2c:
20:44:0e:a1:e2:b8:d5:d1:90:f7:6c:30:bc:26:28:ed:28:0c:
d6:41:72:51:7e:64:8e:2c:c1:2d:6e:31:b3:bf:32:7e:b3:47:
f5:e8:db:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1RcNVgkkE8qO9jOsq/LhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw
ZGVlMGYwHhcNMjMwMTAyMDQ1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWUxNWU3ZGY4YzY5ZmYzYzRlMjE1ZWI4YTkzNTc2ZDNjZjI2MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUjtwvx7K3T5FxeWZUe0jL+ZDnlz
Pfh5MtGZXNdXLZB5SMy7M/Bw7+YiF2MNTbkg+A4b2cAL/xW89QNT8KZQ4wpaML98
k9uodF0sBgG6PUOOj3fBo2DQVNGH8EFAXcbSA6QaH9NhohCx4VRK+CMM+jl8FjXv
aC2Sd11ymNdbQuy24f3HYG7VBpNIpBu4/PfbQNHWON8km/AjnJFoehca+T6RQ2D0
yyzC28XlGiT96NR9OIluahE97Pvz+QNqZfst9Ofe86LF82eevmxone4+BOxfCuDI
2uFhg1/2NLVSqSdswbOG8NkbsA82xo5dVTvJpLpa7NkwyLbnMIwLS1ClAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7hXn34xp/zxOIV64qTV2088mHEMB8GA1UdIwQY
MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt
NmFlYTkwNTdjODAwLzEvenVGZWZmakduX1BFNGhYcmlwTlhiVHp5WWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw
LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu2rMA0G
CSqGSIb3DQEBCwUAA4IBAQBye0Qk6OaF8JtRxJh3Xy9Y2TW2WL1cVhG5IS+/QAU0
setFnE2azvXLxW/TMl/JRuuVwMrHaw3acT/xWc/sBEIS1X1kFm1k0j8I/8T2JOpJ
FUm7tMp7uNRQDBPnHHMk79QEi/JUdEz4eujObPwh/MDbGVYKeC5lblvYHc8bHX0y
ffjxlxpKva5VcWf3CmYs5tCMBg1+5IGxdbo8IUiXwJrwTDDu7q7h/ft1eM3v07zy
3C8pNU1D42sVKEZcLkixj9RCTVOibg0QcnD3c05tOi/1YTJbUnLydywgRA6h4rjV
0ZD3bDC8JijtKAzWQXJRfmSOLMEtbjGzvzJ+s0f16NsF
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:19 2024 by rpki-client on console-ams.rpki-client.org