Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/5u0RubwsP2LpY4VDXzI4NMYzrlg.roa
File: 5u0RubwsP2LpY4VDXzI4NMYzrlg.roa (raw, json)
Hash identifier: kFH5/o2RmiNiqRNkOvseyHwBiPVgBcDuwDQcc/z/y88=
Subject key identifier: E6:ED:11:B9:BC:2C:3F:62:E9:63:85:43:5F:32:38:34:C6:33:AE:58
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 018CC727545F838714DCCFCC6EF12DE454FA
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/5u0RubwsP2LpY4VDXzI4NMYzrlg.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1756
IP address blocks: 178.173.178.0/24 maxlen: 24
178.173.179.0/24 maxlen: 24
178.173.176.0/24 maxlen: 24
178.173.177.0/24 maxlen: 24
178.173.173.0/24 maxlen: 24
178.173.186.0/24 maxlen: 24
178.173.192.0/24 maxlen: 24
178.173.199.0/24 maxlen: 24
178.173.197.0/24 maxlen: 24
178.173.198.0/24 maxlen: 24
178.173.193.0/24 maxlen: 24
178.173.195.0/24 maxlen: 24
178.173.196.0/24 maxlen: 24
178.173.194.0/24 maxlen: 24
178.173.206.0/24 maxlen: 24
178.173.204.0/24 maxlen: 24
178.173.205.0/24 maxlen: 24
178.173.200.0/24 maxlen: 24
178.173.202.0/24 maxlen: 24
178.173.203.0/24 maxlen: 24
178.173.201.0/24 maxlen: 24
178.173.207.0/24 maxlen: 24
178.173.209.0/24 maxlen: 24
178.173.210.0/24 maxlen: 24
178.173.208.0/24 maxlen: 24
178.173.213.0/24 maxlen: 24
178.173.211.0/24 maxlen: 24
178.173.212.0/24 maxlen: 24
178.173.218.0/24 maxlen: 24
178.173.219.0/24 maxlen: 24
178.173.216.0/24 maxlen: 24
178.173.217.0/24 maxlen: 24
178.173.214.0/24 maxlen: 24
178.173.215.0/24 maxlen: 24
178.173.220.0/24 maxlen: 24
178.173.223.0/24 maxlen: 24
178.173.221.0/24 maxlen: 24
178.173.222.0/24 maxlen: 24
178.173.129.0/24 maxlen: 24
178.173.130.0/24 maxlen: 24
178.173.128.0/24 maxlen: 24
178.173.131.0/24 maxlen: 24
178.173.132.0/24 maxlen: 24
178.173.135.0/24 maxlen: 24
178.173.133.0/24 maxlen: 24
178.173.134.0/24 maxlen: 24
178.173.143.0/24 maxlen: 24
178.173.144.0/24 maxlen: 24
178.173.141.0/24 maxlen: 24
178.173.142.0/24 maxlen: 24
178.173.145.0/24 maxlen: 24
178.173.150.0/24 maxlen: 24
178.173.151.0/24 maxlen: 24
178.173.148.0/24 maxlen: 24
178.173.149.0/24 maxlen: 24
178.173.152.0/24 maxlen: 24
178.173.147.0/24 maxlen: 24
178.173.146.0/24 maxlen: 24
178.173.154.0/24 maxlen: 24
178.173.153.0/24 maxlen: 24
178.173.157.0/24 maxlen: 24
178.173.158.0/24 maxlen: 24
178.173.155.0/24 maxlen: 24
178.173.156.0/24 maxlen: 24
178.173.159.0/24 maxlen: 24
178.173.164.0/24 maxlen: 24
178.173.165.0/24 maxlen: 24
178.173.162.0/24 maxlen: 24
178.173.163.0/24 maxlen: 24
178.173.166.0/24 maxlen: 24
178.173.161.0/24 maxlen: 24
178.173.160.0/24 maxlen: 24
178.173.171.0/24 maxlen: 24
178.173.172.0/24 maxlen: 24
178.173.170.0/24 maxlen: 24
178.173.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 16:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:54:5f:83:87:14:dc:cf:cc:6e:f1:2d:e4:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ed11b9bc2c3f62e96385435f323834c633ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:ba:1c:61:2a:5b:06:9b:6d:51:6e:75:e6:
f9:3e:e4:8d:75:a0:44:e5:3b:92:d6:d2:01:c2:63:
52:70:57:4c:d6:4e:80:66:f8:86:31:ee:80:85:8b:
b9:8f:14:c1:3b:8e:a7:57:97:ae:31:c7:7e:9a:50:
b4:51:ba:2b:fb:c7:37:dc:ee:6c:68:00:75:27:51:
42:b4:fc:5e:00:9c:f7:ab:69:83:6a:50:d6:da:b7:
89:00:f3:d7:1c:c9:d4:3f:ee:61:46:37:a0:d5:a9:
85:c6:5a:09:07:2b:46:9c:52:24:46:1e:05:83:bd:
01:19:36:f3:99:90:d2:2c:01:5b:71:d8:d5:81:cf:
5a:31:69:9d:6c:30:8a:d9:07:e6:c4:b7:b8:60:28:
28:2b:14:be:23:fa:ac:76:c5:3d:50:2d:a1:49:64:
6e:57:6e:e5:0f:2b:09:84:5c:f5:8d:b7:6d:b6:1c:
72:3e:55:90:2a:83:5f:b4:a2:c4:9e:4e:84:55:28:
61:a5:50:da:5b:f2:5e:59:77:5a:6e:17:0c:8a:db:
48:ad:64:8b:8b:04:af:d7:ba:99:9e:2f:b2:6b:b5:
bd:be:a4:8a:fc:de:91:17:f5:d7:ad:f9:2b:08:45:
a8:1d:55:b1:0c:bc:64:dc:52:0f:14:1d:89:82:ab:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:11:B9:BC:2C:3F:62:E9:63:85:43:5F:32:38:34:C6:33:AE:58
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/5u0RubwsP2LpY4VDXzI4NMYzrlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.128.0/21
178.173.141.0-178.173.167.255
178.173.170.0-178.173.173.255
178.173.176.0/22
178.173.186.0/24
178.173.192.0/19
Signature Algorithm: sha256WithRSAEncryption
04:66:78:c5:8e:0d:32:ba:a2:d8:b7:c6:bf:96:34:2c:02:77:
d4:7f:52:3e:57:2b:37:36:36:95:4b:c2:6f:cb:3a:51:fc:99:
55:13:66:f8:5b:b5:b2:99:c3:ec:67:5e:d5:57:43:f0:3b:ec:
07:4d:05:3a:d5:50:d3:e9:7c:fc:71:55:c8:dc:3e:0e:84:f0:
4e:27:52:a1:6d:7b:f0:4c:dd:ee:16:b9:28:5f:fd:00:72:0d:
e8:9b:e8:2c:65:37:1f:86:ec:9e:ad:b2:f7:4e:08:a6:93:23:
b3:56:15:a2:09:59:d0:67:d0:62:ba:aa:4f:d2:9e:a7:a8:5b:
b3:0b:b5:7b:3b:6f:a8:aa:e7:00:bd:38:a2:f8:39:ee:64:16:
5c:60:b7:bb:1b:06:04:e6:0a:c9:46:f4:03:76:35:b3:74:75:
c6:71:ec:a8:df:2d:51:38:bf:51:85:7c:dc:3a:ae:3a:88:7b:
b4:36:c3:d6:13:74:56:9c:d7:97:d6:ce:1a:aa:f4:0c:52:97:
ea:f3:ff:73:51:6a:71:12:93:fd:99:33:1c:09:49:c9:78:09:
d4:67:2c:ce:52:81:f2:51:00:d4:2c:f2:91:44:fc:3f:ab:51:
4c:59:bd:0c:7c:c3:0e:27:35:f5:aa:5c:6b:38:09:1c:67:82:
8e:b9:a0:c8
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYzHJ1Rfg4cU3M/MbvEt5FT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjQwMTAxMjIzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmVkMTFiOWJjMmMzZjYyZTk2Mzg1NDM1ZjMyMzgzNGM2MzNhZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1q6HGEqWwabbVFudeb5PuSNdaBE
5TuS1tIBwmNScFdM1k6AZviGMe6AhYu5jxTBO46nV5euMcd+mlC0Ubor+8c33O5s
aAB1J1FCtPxeAJz3q2mDalDW2reJAPPXHMnUP+5hRjeg1amFxloJBytGnFIkRh4F
g70BGTbzmZDSLAFbcdjVgc9aMWmdbDCK2QfmxLe4YCgoKxS+I/qsdsU9UC2hSWRu
V27lDysJhFz1jbdtthxyPlWQKoNftKLEnk6EVShhpVDaW/JeWXdabhcMittIrWSL
iwSv17qZni+ya7W9vqSK/N6RF/XXrfkrCEWoHVWxDLxk3FIPFB2JgqsoAQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFObtEbm8LD9i6WOFQ18yODTGM65YMB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvNXUwUnVid3NQMkxwWTRWRFh6STROTVl6cmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQDsq2AMAwD
BACyrY0DBAOyraAwDAMEAbKtqgMEAbKtrAMEArKtsAMEALKtugMEBbKtwDANBgkq
hkiG9w0BAQsFAAOCAQEABGZ4xY4NMrqi2LfGv5Y0LAJ31H9SPlcrNzY2lUvCb8s6
UfyZVRNm+Fu1spnD7Gde1VdD8DvsB00FOtVQ0+l8/HFVyNw+DoTwTidSoW178Ezd
7ha5KF/9AHIN6JvoLGU3H4bsnq2y904IppMjs1YVoglZ0GfQYrqqT9Kep6hbswu1
eztvqKrnAL04ovg57mQWXGC3uxsGBOYKyUb0A3Y1s3R1xnHsqN8tUTi/UYV83Dqu
Ooh7tDbD1hN0VpzXl9bOGqr0DFKX6vP/c1FqcRKT/ZkzHAlJyXgJ1GcszlKB8lEA
1CzykUT8P6tRTFm9DHzDDic19apcazgJHGeCjrmgyA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:15 2025 by rpki-client