Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/CNi3KFjXvN86EVjOU9Fpq2qwTn8.roa
File: CNi3KFjXvN86EVjOU9Fpq2qwTn8.roa (raw, json)
Hash identifier: eMLHNX0jbZbhjhcHcpbWWwg7q4nYo//ubFSkUM+mCAU=
Subject key identifier: 08:D8:B7:28:58:D7:BC:DF:3A:11:58:CE:53:D1:69:AB:6A:B0:4E:7F
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 018CC4938E7D6ADE8548A4588C6D9244B01C
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/CNi3KFjXvN86EVjOU9Fpq2qwTn8.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35454
IP address blocks: 178.21.56.0/21 maxlen: 21
178.21.57.0/24 maxlen: 24
178.21.56.0/24 maxlen: 24
178.21.58.0/24 maxlen: 24
178.21.61.0/24 maxlen: 24
178.21.60.0/24 maxlen: 24
178.21.59.0/24 maxlen: 24
178.21.63.0/24 maxlen: 24
178.21.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:7d:6a:de:85:48:a4:58:8c:6d:92:44:b0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d8b72858d7bcdf3a1158ce53d169ab6ab04e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:a3:14:b7:48:d7:ef:96:e6:04:1c:95:44:
40:af:42:cd:b3:13:19:60:8a:65:c3:30:13:66:88:
02:8c:ea:44:4b:e7:64:5d:2b:54:7a:e5:56:93:a5:
d4:e9:7e:96:60:f5:e0:a1:be:01:d0:1b:98:f8:26:
fb:da:d4:ac:da:e3:a9:fd:51:db:62:5a:9e:9c:67:
df:f8:26:87:44:6e:c9:82:64:62:3e:40:93:a8:99:
15:a6:4b:31:4a:a9:bc:37:6b:b2:13:55:cf:c8:5c:
9e:19:22:50:7b:86:fa:f7:fd:8c:b2:06:a4:61:43:
8a:74:8c:2f:21:dd:80:6e:ca:c2:fc:da:2f:00:74:
16:6d:15:85:97:da:02:3b:e9:a1:8d:93:f1:83:8c:
ee:5f:47:29:cd:a3:98:a9:f9:bf:39:19:aa:b6:74:
9b:66:7c:41:e4:0a:c2:d2:f2:7c:6b:db:03:17:85:
0b:6c:9e:f0:50:33:e7:94:36:0a:04:d5:1a:97:4d:
df:c4:78:a5:f2:74:a2:18:e4:c5:d0:01:91:af:cd:
5c:de:40:77:85:9b:c7:b4:68:3c:a2:9e:82:cd:bf:
0b:2e:17:cb:6c:a1:5e:94:3e:a2:ca:ae:e5:f4:13:
9d:0b:70:51:f8:4c:c5:b7:a1:17:04:a9:c6:83:ff:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D8:B7:28:58:D7:BC:DF:3A:11:58:CE:53:D1:69:AB:6A:B0:4E:7F
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/CNi3KFjXvN86EVjOU9Fpq2qwTn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.56.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:5f:d9:5e:93:73:b9:a6:0e:d0:52:a7:2d:4a:e1:e4:57:60:
0e:48:75:ab:cf:f5:dd:fc:29:ae:00:6c:37:c0:84:ef:98:39:
0e:78:51:f9:e0:9c:22:4f:42:b1:67:ab:4c:4d:f0:17:3b:8c:
38:7f:c2:79:65:a3:c7:61:27:b4:1c:ca:f0:98:e0:f1:89:7f:
62:a2:8d:01:3a:91:5a:18:46:c2:c6:bd:1c:a6:6f:60:cc:bc:
1d:ba:c8:c2:e4:15:57:70:b0:ef:06:9b:0f:9d:02:a6:1e:7e:
f9:bb:f5:48:0a:09:0a:f3:43:5c:3d:55:bf:f8:74:91:0c:3c:
9b:20:18:b0:64:5d:ce:ad:41:e4:4b:2e:e2:e9:66:0a:c0:c8:
2b:c4:c2:a4:83:70:96:02:89:76:9e:a3:93:a1:0f:56:8c:d4:
bc:95:af:c1:9c:ae:bc:4e:54:8e:1f:c4:9f:40:d9:cc:69:a6:
9c:14:c7:80:9f:b7:b2:ba:ed:19:25:7a:a1:4a:4d:01:50:d3:
a5:08:b1:87:e9:08:ae:65:a0:01:30:03:27:30:46:09:26:c1:
ce:bf:b1:8b:13:98:da:9e:54:f9:21:5b:80:9c:ad:4a:84:6b:
02:2f:e7:66:15:ab:3e:b9:ec:06:33:49:f8:10:08:fc:fa:15:
94:fd:31:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk459at6FSKRYjG2SRLAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjQwMTAxMTAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQ4YjcyODU4ZDdiY2RmM2ExMTU4Y2U1M2QxNjlhYjZhYjA0ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyqjFLdI1++W5gQclURAr0LNsxMZ
YIplwzATZogCjOpES+dkXStUeuVWk6XU6X6WYPXgob4B0BuY+Cb72tSs2uOp/VHb
YlqenGff+CaHRG7JgmRiPkCTqJkVpksxSqm8N2uyE1XPyFyeGSJQe4b69/2Msgak
YUOKdIwvId2AbsrC/NovAHQWbRWFl9oCO+mhjZPxg4zuX0cpzaOYqfm/ORmqtnSb
ZnxB5ArC0vJ8a9sDF4ULbJ7wUDPnlDYKBNUal03fxHil8nSiGOTF0AGRr81c3kB3
hZvHtGg8op6Czb8LLhfLbKFelD6iyq7l9BOdC3BR+EzFt6EXBKnGg//8/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAjYtyhY17zfOhFYzlPRaatqsE5/MB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvQ05pM0tGalh2Tjg2RVZqT1U5RnBxMnF3VG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDshU4MA0G
CSqGSIb3DQEBCwUAA4IBAQA7X9lek3O5pg7QUqctSuHkV2AOSHWrz/Xd/CmuAGw3
wITvmDkOeFH54JwiT0KxZ6tMTfAXO4w4f8J5ZaPHYSe0HMrwmODxiX9ioo0BOpFa
GEbCxr0cpm9gzLwdusjC5BVXcLDvBpsPnQKmHn75u/VICgkK80NcPVW/+HSRDDyb
IBiwZF3OrUHkSy7i6WYKwMgrxMKkg3CWAol2nqOToQ9WjNS8la/BnK68TlSOH8Sf
QNnMaaacFMeAn7eyuu0ZJXqhSk0BUNOlCLGH6QiuZaABMAMnMEYJJsHOv7GLE5ja
nlT5IVuAnK1KhGsCL+dmFas+uewGM0n4EAj8+hWU/TF9
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:45 2025 by rpki-client