Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/b8U5sScA1jJdVtxEguN2mCaVrTY.roa
File: b8U5sScA1jJdVtxEguN2mCaVrTY.roa (raw, json)
Hash identifier: z29F0PsD/OEaOucTBNJHuVMRmID6LkBKnbr2Yi4VVeU=
Subject key identifier: 6F:C5:39:B1:27:00:D6:32:5D:56:DC:44:82:E3:76:98:26:95:AD:36
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01856F8B8E2F7CD3662AE59C23E5F3EECE4E
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/b8U5sScA1jJdVtxEguN2mCaVrTY.roa
Signing time: Sun 01 Jan 2023 22:54:54 +0000
ROA not before: Sun 01 Jan 2023 22:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212093
IP address blocks: 178.237.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8e:2f:7c:d3:66:2a:e5:9c:23:e5:f3:ee:ce:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 22:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fc539b12700d6325d56dc4482e376982695ad36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:44:ab:bf:1d:5e:3f:eb:5b:e4:52:7f:7e:
d8:59:4d:4c:30:6a:82:67:3d:32:0d:95:69:65:da:
77:f4:b7:d0:3d:1f:5d:6f:81:e9:54:31:da:69:49:
e4:fb:d5:d2:b9:97:0c:ed:8f:71:c3:e8:21:25:cf:
b4:02:41:81:68:ca:67:6c:04:32:ab:90:aa:d4:9d:
9e:d3:f5:4d:18:95:74:af:2b:19:d9:96:b8:0f:77:
55:05:af:b8:bb:cb:af:21:07:00:ad:6a:8b:24:fc:
96:b1:6c:76:68:e2:9c:d7:60:ca:fa:38:0b:bb:08:
65:45:8c:e6:cd:72:5a:83:72:27:6b:1b:ce:43:45:
70:89:38:ce:cd:14:e8:2b:0d:e5:0e:46:d9:b8:1c:
18:de:c0:00:ea:a3:d8:35:86:ae:e4:e9:34:fe:a9:
e8:3a:72:95:6a:27:31:11:6f:5f:f0:44:97:8b:b2:
ce:c0:32:d2:1b:99:e1:f1:b2:20:db:a1:bc:dd:63:
43:d2:c1:5d:39:09:5d:7c:65:83:08:08:7f:79:6c:
f1:61:46:db:1e:2a:74:65:6a:b0:d3:15:95:b4:dd:
93:ba:fe:23:46:8a:4d:f9:67:dd:2f:07:f2:8f:05:
0b:ba:b4:50:26:2f:58:a1:16:a2:68:d4:1d:6c:3f:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:39:B1:27:00:D6:32:5D:56:DC:44:82:E3:76:98:26:95:AD:36
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/b8U5sScA1jJdVtxEguN2mCaVrTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.205.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e0:e5:36:e8:ba:f5:70:aa:16:02:15:2c:04:d1:08:6b:31:
21:07:20:ad:00:5a:c1:6e:a1:4d:7a:0e:dc:21:31:25:96:64:
46:03:89:5b:0c:67:64:86:ce:c1:4c:e3:a1:a6:f0:03:91:cd:
b3:7e:db:a9:6a:0c:53:41:2e:7b:77:ee:8a:9a:a9:b3:39:5a:
5b:46:a5:96:26:42:19:c6:ce:8a:7b:c9:3d:cb:a1:2c:82:61:
4b:be:ef:34:c2:fe:18:df:fc:6b:12:43:04:1f:13:b6:ee:18:
08:35:7a:29:97:45:f5:08:47:56:c0:48:53:c3:fd:19:d9:3b:
6b:8e:dd:d8:38:5e:92:a2:9d:25:3b:3d:41:bf:ba:48:26:42:
c4:cf:c3:c5:98:f4:4f:c9:de:0a:42:b8:5e:41:a4:ea:02:ee:
74:0f:24:ce:13:02:99:bb:c6:aa:42:3d:aa:56:6e:80:63:2d:
5e:04:bd:c6:fa:b8:de:55:ef:31:50:1b:4a:de:f7:e7:40:8e:
f2:09:e3:d2:34:50:d9:bd:84:71:91:79:66:6a:09:8c:71:f9:
e9:08:63:e3:5d:85:93:b1:e4:94:5b:a4:26:68:dc:39:49:7e:
43:32:9b:39:72:35:45:d0:87:9d:2a:41:84:2c:6f:40:bb:49:
96:d0:2f:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvi44vfNNmKuWcI+Xz7s5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OTkyMmNhOGQxMzlhNGQwM2Q2ZDU3Y2JjODE3N2RjMDVm
ZWI5ZWMwHhcNMjMwMTAxMjI1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmM1MzliMTI3MDBkNjMyNWQ1NmRjNDQ4MmUzNzY5ODI2OTVhZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlJEq78dXj/rW+RSf37YWU1MMGqC
Zz0yDZVpZdp39LfQPR9db4HpVDHaaUnk+9XSuZcM7Y9xw+ghJc+0AkGBaMpnbAQy
q5Cq1J2e0/VNGJV0rysZ2Za4D3dVBa+4u8uvIQcArWqLJPyWsWx2aOKc12DK+jgL
uwhlRYzmzXJag3InaxvOQ0VwiTjOzRToKw3lDkbZuBwY3sAA6qPYNYau5Ok0/qno
OnKVaicxEW9f8ESXi7LOwDLSG5nh8bIg26G83WND0sFdOQldfGWDCAh/eWzxYUbb
Hip0ZWqw0xWVtN2Tuv4jRopN+WfdLwfyjwULurRQJi9YoRaiaNQdbD8qhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/FObEnANYyXVbcRILjdpgmla02MB8GA1UdIwQY
MBaAFNSZIsqNE5pNA9bVfLyBd9wF/rnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUt
ZThiNjBhMmRkNmI0LzEvYjhVNXNTY0ExakpkVnR4RWd1TjJtQ2FWclRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUtZThiNjBhMmRkNmI0
LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu3NMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ4OU26Lr1cKoWAhUsBNEIazEhByCtAFrBbqFNeg7c
ITEllmRGA4lbDGdkhs7BTOOhpvADkc2zftupagxTQS57d+6KmqmzOVpbRqWWJkIZ
xs6Ke8k9y6EsgmFLvu80wv4Y3/xrEkMEHxO27hgINXopl0X1CEdWwEhTw/0Z2Ttr
jt3YOF6Sop0lOz1Bv7pIJkLEz8PFmPRPyd4KQrheQaTqAu50DyTOEwKZu8aqQj2q
Vm6AYy1eBL3G+rjeVe8xUBtK3vfnQI7yCePSNFDZvYRxkXlmagmMcfnpCGPjXYWT
seSUW6QmaNw5SX5DMps5cjVF0IedKkGELG9Au0mW0C+0
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org