Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/whMTPB7_t2bxUPS7dPdSoI4Ro28.roa
File: whMTPB7_t2bxUPS7dPdSoI4Ro28.roa (raw, json)
Hash identifier: zCbhjtF/TV+QR9V/4M19XfHFyOkzyx1HwPrDZxXlYPg=
Subject key identifier: C2:13:13:3C:1E:FF:B7:66:F1:50:F4:BB:74:F7:52:A0:8E:11:A3:6F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7DAC717974DA13789B0FBA5DBBCF4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/whMTPB7_t2bxUPS7dPdSoI4Ro28.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 188.255.144.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 14:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:da:c7:17:97:4d:a1:37:89:b0:fb:a5:db:bc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c213133c1effb766f150f4bb74f752a08e11a36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:43:f9:6b:e4:9e:15:76:e3:cd:8f:41:2c:
2b:ad:f6:17:3b:a8:72:34:c5:3c:25:ef:79:be:80:
db:24:0b:75:de:6b:46:1f:c2:5c:ae:a1:00:00:e1:
57:60:6e:7e:98:7f:91:9d:9e:cf:b9:67:3b:29:36:
4d:5e:f3:14:1b:9f:77:cf:cd:25:04:5a:08:2d:f3:
11:0b:db:f0:9d:fc:5c:95:3b:43:26:2d:13:51:44:
72:95:8c:fc:5e:4b:90:91:47:7b:c1:b7:c3:7e:4b:
5c:1c:1a:f1:0e:64:9f:00:94:9a:40:d8:b9:bb:ed:
62:e2:60:b2:17:9b:6a:13:9f:a7:33:62:05:8c:98:
9a:c5:c1:dd:f6:6d:88:b1:7c:c4:4d:bd:6b:fa:fe:
f2:49:55:e2:41:a0:7f:1a:72:a9:19:28:15:3c:01:
5a:0a:79:32:e5:9f:06:90:e6:e1:f6:90:16:e9:be:
79:4e:6b:bc:6d:34:2a:b9:40:2d:59:6f:78:61:3f:
fb:29:76:13:57:f1:f5:da:be:b7:87:24:dc:64:74:
10:26:c3:53:c1:7e:e2:69:a6:f9:c8:a0:d5:fe:19:
8f:5f:1e:f1:93:8b:ab:4b:97:5d:3a:74:7e:a1:d5:
de:6b:8a:dc:12:f1:c5:02:01:72:da:52:a2:61:4f:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:13:3C:1E:FF:B7:66:F1:50:F4:BB:74:F7:52:A0:8E:11:A3:6F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/whMTPB7_t2bxUPS7dPdSoI4Ro28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.237.0/24
188.255.144.0/24
Signature Algorithm: sha256WithRSAEncryption
19:87:41:3f:ec:78:d2:56:4d:80:c1:f4:d4:ee:4e:84:53:d5:
e2:35:fe:b2:0f:59:ed:c4:5e:93:a0:d3:fe:d7:bf:a9:d5:48:
b2:4f:b1:39:86:7c:2c:0d:c6:eb:35:4d:83:cf:8e:a6:5d:7c:
32:e5:47:d9:a2:29:69:e1:09:36:9d:29:0c:69:9d:f0:67:6d:
13:ad:e9:b8:df:e7:12:54:b2:00:1e:9d:d9:cd:de:b6:86:18:
39:24:60:5c:71:02:8b:8b:0c:4c:36:dd:68:8f:dd:d3:88:5a:
75:82:24:73:40:f2:b6:05:24:3b:79:ac:d2:48:ff:80:fb:94:
9f:90:c9:8b:0e:44:af:bf:8e:44:10:52:6b:99:95:2a:98:35:
3e:04:40:b9:8c:1f:a3:06:1e:e6:c9:6e:fc:7f:43:fd:d8:f3:
db:4b:da:86:31:d2:72:41:55:aa:94:3b:bb:6b:b7:03:6e:f0:
7b:0f:c2:30:f5:fe:f8:cc:70:b2:b1:47:3d:fd:40:69:2c:6f:
4c:0c:14:bd:ab:8d:42:7f:37:21:cb:d2:15:df:1e:c4:1f:1c:
f2:4b:ee:2f:77:df:13:f3:e3:3c:93:76:8c:83:fe:96:8c:2a:
79:0e:ef:ae:e5:a3:c3:f0:95:b5:dd:10:2b:21:09:c4:5a:c9:
70:66:a4:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx19rHF5dNoTeJsPul27z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjEzMTMzYzFlZmZiNzY2ZjE1MGY0YmI3NGY3NTJhMDhlMTFhMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiFD+WvknhV2482PQSwrrfYXO6hy
NMU8Je95voDbJAt13mtGH8JcrqEAAOFXYG5+mH+RnZ7PuWc7KTZNXvMUG593z80l
BFoILfMRC9vwnfxclTtDJi0TUURylYz8XkuQkUd7wbfDfktcHBrxDmSfAJSaQNi5
u+1i4mCyF5tqE5+nM2IFjJiaxcHd9m2IsXzETb1r+v7ySVXiQaB/GnKpGSgVPAFa
Cnky5Z8GkObh9pAW6b55Tmu8bTQquUAtWW94YT/7KXYTV/H12r63hyTcZHQQJsNT
wX7iaab5yKDV/hmPXx7xk4urS5ddOnR+odXea4rcEvHFAgFy2lKiYU+xCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMITEzwe/7dm8VD0u3T3UqCOEaNvMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvd2hNVFBCN190MmJ4VVBTN2RQZFNvSTRSbzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsv3tAwQA
vP+QMA0GCSqGSIb3DQEBCwUAA4IBAQAZh0E/7HjSVk2AwfTU7k6EU9XiNf6yD1nt
xF6ToNP+17+p1UiyT7E5hnwsDcbrNU2Dz46mXXwy5UfZoilp4Qk2nSkMaZ3wZ20T
rem43+cSVLIAHp3Zzd62hhg5JGBccQKLiwxMNt1oj93TiFp1giRzQPK2BSQ7eazS
SP+A+5SfkMmLDkSvv45EEFJrmZUqmDU+BEC5jB+jBh7myW78f0P92PPbS9qGMdJy
QVWqlDu7a7cDbvB7D8Iw9f74zHCysUc9/UBpLG9MDBS9q41Cfzchy9IV3x7EHxzy
S+4vd98T8+M8k3aMg/6WjCp5Du+u5aPD8JW13RArIQnEWslwZqTe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org