Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/DbWQDxsdlJXrmD2CL-OXi0Lulq8.roa
File: DbWQDxsdlJXrmD2CL-OXi0Lulq8.roa (raw, json)
Hash identifier: a9TAjjKZnRXIsRmtKU8doUqQPAU+A/UzigEU+QT8QdA=
Subject key identifier: 0D:B5:90:0F:1B:1D:94:95:EB:98:3D:82:2F:E3:97:8B:42:EE:96:AF
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 01857170A8E3933290683FEA7CFFA4526192
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/DbWQDxsdlJXrmD2CL-OXi0Lulq8.roa
Signing time: Mon 02 Jan 2023 07:44:46 +0000
ROA not before: Mon 02 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35454
IP address blocks: 178.21.56.0/21 maxlen: 21
178.21.57.0/24 maxlen: 24
178.21.56.0/24 maxlen: 24
178.21.58.0/24 maxlen: 24
178.21.61.0/24 maxlen: 24
178.21.60.0/24 maxlen: 24
178.21.59.0/24 maxlen: 24
178.21.63.0/24 maxlen: 24
178.21.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a8:e3:93:32:90:68:3f:ea:7c:ff:a4:52:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Jan 2 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0db5900f1b1d9495eb983d822fe3978b42ee96af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:7a:51:02:a0:40:e5:64:66:f3:5e:8c:e9:
8a:86:66:a3:21:0f:0a:23:1c:8a:6b:d8:b8:79:72:
97:19:94:41:ef:87:75:8a:5e:f9:62:f4:bc:f7:3a:
c1:f0:4f:fb:74:24:05:bb:e8:2b:6f:16:a9:e8:7e:
3c:1a:3a:86:83:0b:2e:c7:ef:e3:04:bf:d2:c1:be:
8d:f2:fa:73:a3:d9:c6:5e:42:16:48:e9:2e:09:05:
e6:a1:6c:7a:de:93:ed:7c:f7:48:d6:5e:df:d1:59:
74:0c:1f:fa:e3:e1:5e:de:46:1c:42:84:3b:d6:42:
a2:45:78:11:1d:39:b3:b1:91:76:84:27:2d:10:87:
ed:87:0a:5e:94:4d:eb:13:67:0a:f9:2d:90:c0:6a:
18:3f:e2:83:0f:6b:a0:6e:16:5c:e2:91:4f:34:63:
6d:d3:2b:03:b3:be:d7:25:41:78:3e:e8:9f:a5:c3:
18:8a:e0:02:d6:dc:34:86:da:f6:bc:b5:80:44:6c:
11:99:45:d3:dd:c6:32:6e:32:f8:06:8c:15:20:23:
b7:db:8b:59:bb:16:8e:84:c7:48:34:31:dd:db:d1:
78:65:1e:eb:b4:ab:2d:d1:66:88:ea:06:48:8d:ad:
a0:84:df:66:29:c2:f0:54:5d:92:14:9a:bc:25:cb:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:90:0F:1B:1D:94:95:EB:98:3D:82:2F:E3:97:8B:42:EE:96:AF
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/DbWQDxsdlJXrmD2CL-OXi0Lulq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.56.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:09:32:52:40:a7:28:da:4d:ba:7e:cc:c6:41:f7:20:42:a2:
0d:ca:16:19:1a:68:18:4e:54:be:73:cc:a4:02:ba:fb:f8:3a:
c1:8c:da:9d:ae:c4:fb:60:8f:df:88:cd:f8:c0:6a:5c:d8:ba:
61:e9:ce:8b:a9:8e:7a:aa:2f:34:9e:cf:fc:d8:62:c6:e9:cd:
a6:17:7c:98:f9:08:35:49:53:eb:18:9b:10:a5:36:a7:fc:bb:
73:36:e7:a4:b1:36:86:a6:a8:e4:77:e5:56:05:e7:aa:e5:bd:
1c:ed:b3:ea:c0:19:0d:fa:08:40:e2:17:ab:cf:6f:0d:08:e1:
2b:82:c7:69:3b:8a:e9:01:0a:e7:0f:b3:43:3e:5b:98:55:f3:
57:4a:63:58:df:90:a0:ee:ea:6b:aa:9a:ff:ed:29:e4:ef:c0:
ef:f9:ec:e9:47:90:d7:d3:45:60:80:45:ae:34:59:5e:bc:10:
b7:29:ef:b0:12:95:86:84:29:23:63:ef:dc:e9:9e:50:1c:b6:
52:35:24:fb:b4:bc:36:1d:a2:3d:bf:05:d0:bb:02:64:7c:e1:
b8:ae:c1:28:77:24:9d:40:dd:a5:cf:cb:f1:ef:34:89:b9:81:
b1:bf:d3:f3:0d:6b:77:6e:0a:30:14:65:22:9a:84:5c:4f:2d:
cd:6d:5c:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxcKjjkzKQaD/qfP+kUmGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjMwMTAyMDc0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGI1OTAwZjFiMWQ5NDk1ZWI5ODNkODIyZmUzOTc4YjQyZWU5NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnN6UQKgQOVkZvNejOmKhmajIQ8K
IxyKa9i4eXKXGZRB74d1il75YvS89zrB8E/7dCQFu+grbxap6H48GjqGgwsux+/j
BL/Swb6N8vpzo9nGXkIWSOkuCQXmoWx63pPtfPdI1l7f0Vl0DB/64+Fe3kYcQoQ7
1kKiRXgRHTmzsZF2hCctEIfthwpelE3rE2cK+S2QwGoYP+KDD2ugbhZc4pFPNGNt
0ysDs77XJUF4PuifpcMYiuAC1tw0htr2vLWARGwRmUXT3cYybjL4BowVICO324tZ
uxaOhMdINDHd29F4ZR7rtKst0WaI6gZIja2ghN9mKcLwVF2SFJq8JctjqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA21kA8bHZSV65g9gi/jl4tC7pavMB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvRGJXUUR4c2RsSlhybUQyQ0wtT1hpMEx1bHE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDshU4MA0G
CSqGSIb3DQEBCwUAA4IBAQC4CTJSQKco2k26fszGQfcgQqINyhYZGmgYTlS+c8yk
Arr7+DrBjNqdrsT7YI/fiM34wGpc2Lph6c6LqY56qi80ns/82GLG6c2mF3yY+Qg1
SVPrGJsQpTan/LtzNueksTaGpqjkd+VWBeeq5b0c7bPqwBkN+ghA4herz28NCOEr
gsdpO4rpAQrnD7NDPluYVfNXSmNY35Cg7uprqpr/7Snk78Dv+ezpR5DX00VggEWu
NFlevBC3Ke+wEpWGhCkjY+/c6Z5QHLZSNST7tLw2HaI9vwXQuwJkfOG4rsEodySd
QN2lz8vx7zSJuYGxv9PzDWt3bgowFGUimoRcTy3NbVzI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:03 2024 by rpki-client on console-fra.rpki-client.org