Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/elPiuWHQAeeytFlVZpIvJMmmYNM.roa
File: elPiuWHQAeeytFlVZpIvJMmmYNM.roa (raw, json)
Hash identifier: tng1QRTKt6K23V2YnLztkiOE9TrO87rEV8CZWtxxrnU=
Subject key identifier: 7A:53:E2:B9:61:D0:01:E7:B2:B4:59:55:66:92:2F:24:C9:A6:60:D3
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018571556BBA37C8DB1E533BF044651CD267
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/elPiuWHQAeeytFlVZpIvJMmmYNM.roa
Signing time: Mon 02 Jan 2023 07:15:01 +0000
ROA not before: Mon 02 Jan 2023 07:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 178.171.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Jan 2023 01:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:6b:ba:37:c8:db:1e:53:3b:f0:44:65:1c:d2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 07:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a53e2b961d001e7b2b4595566922f24c9a660d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:2f:b3:60:02:11:9e:24:48:15:08:91:cb:
91:bd:02:1f:b3:e3:5b:42:bc:cb:5c:58:03:8a:05:
42:9e:a5:ac:94:8c:71:77:4b:1a:16:9b:b7:fb:d0:
8d:4f:ce:64:24:a1:01:23:43:46:bc:2e:93:42:2d:
a4:ff:38:4a:2d:f2:56:be:e9:69:48:18:49:80:17:
0b:1f:ea:85:a2:2d:c2:24:6d:70:37:5c:77:99:db:
f8:b3:e6:d0:52:d4:01:26:90:66:f8:42:6c:52:ff:
cb:dc:c2:d5:15:3e:01:97:04:62:72:a0:41:be:19:
65:1c:88:34:31:3e:07:09:2f:65:ff:1a:3a:a9:8d:
a3:d9:75:a8:c0:a3:6b:b1:cd:30:b8:7a:11:1d:ee:
dd:d7:ba:98:87:8b:6a:d4:d4:e8:46:d9:89:6d:36:
13:52:9c:53:a5:66:33:ac:57:54:ca:ba:13:d3:13:
a8:9a:42:cf:9b:cc:0b:b0:10:c7:f6:0a:d0:55:28:
2d:31:d6:4b:ae:75:5b:0b:70:61:1f:37:ee:74:29:
2a:94:78:6c:18:f6:04:42:2f:b1:dd:33:2e:e7:61:
0e:6f:4b:f0:aa:6c:e2:40:59:74:78:22:fe:46:06:
f4:3e:f9:9c:ab:fd:08:5a:d1:7d:c5:76:7b:a3:7f:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:53:E2:B9:61:D0:01:E7:B2:B4:59:55:66:92:2F:24:C9:A6:60:D3
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/elPiuWHQAeeytFlVZpIvJMmmYNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c8:28:30:5b:8e:fb:a9:bd:85:7d:85:e0:a1:4e:69:96:41:
71:e8:d2:92:87:06:03:71:38:b9:1c:ce:64:db:29:9b:5b:58:
02:95:13:c5:72:55:02:92:35:3a:4a:92:19:7c:21:4c:58:49:
c5:7d:1f:c5:a1:9a:17:76:4f:8a:60:51:6c:a9:33:be:3e:f5:
39:97:dd:d9:7f:9d:26:18:a6:a0:c4:27:57:a6:27:4b:b4:c4:
31:83:d2:4e:b1:a3:11:db:59:64:44:92:ec:5c:0a:8c:8d:f2:
cb:c6:8f:e2:a0:43:87:0f:cb:52:43:f4:11:63:68:92:b6:d7:
e5:43:f6:a6:0b:08:4e:8c:a2:43:ca:af:e1:aa:7c:38:a1:19:
4c:dd:c3:c9:2b:6e:68:68:b2:3e:92:eb:50:9b:cd:5d:be:aa:
b1:c8:48:7b:de:bd:f8:bd:62:12:46:af:6c:eb:7a:aa:b3:b5:
6b:01:f4:30:2c:4e:71:dc:8b:4c:51:b4:72:6e:33:10:b2:93:
94:fe:1a:4e:4e:c8:97:d7:b3:e6:f4:d3:c4:b7:f9:50:08:c8:
b3:95:4c:31:68:7b:ae:57:c3:04:48:6a:d6:83:dd:94:ef:57:
49:fc:eb:fc:f4:37:96:d9:f2:01:1f:5d:2b:02:11:9b:24:98:
71:aa:7d:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxVWu6N8jbHlM78ERlHNJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjMwMTAyMDcxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTUzZTJiOTYxZDAwMWU3YjJiNDU5NTU2NjkyMmYyNGM5YTY2MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiIvs2ACEZ4kSBUIkcuRvQIfs+Nb
QrzLXFgDigVCnqWslIxxd0saFpu3+9CNT85kJKEBI0NGvC6TQi2k/zhKLfJWvulp
SBhJgBcLH+qFoi3CJG1wN1x3mdv4s+bQUtQBJpBm+EJsUv/L3MLVFT4BlwRicqBB
vhllHIg0MT4HCS9l/xo6qY2j2XWowKNrsc0wuHoRHe7d17qYh4tq1NToRtmJbTYT
UpxTpWYzrFdUyroT0xOomkLPm8wLsBDH9grQVSgtMdZLrnVbC3BhHzfudCkqlHhs
GPYEQi+x3TMu52EOb0vwqmziQFl0eCL+Rgb0Pvmcq/0IWtF9xXZ7o38XbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpT4rlh0AHnsrRZVWaSLyTJpmDTMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvZWxQaXVXSFFBZWV5dEZsVlpwSXZKTW1tWU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsqtUMA0G
CSqGSIb3DQEBCwUAA4IBAQBtyCgwW477qb2FfYXgoU5plkFx6NKShwYDcTi5HM5k
2ymbW1gClRPFclUCkjU6SpIZfCFMWEnFfR/FoZoXdk+KYFFsqTO+PvU5l93Zf50m
GKagxCdXpidLtMQxg9JOsaMR21lkRJLsXAqMjfLLxo/ioEOHD8tSQ/QRY2iSttfl
Q/amCwhOjKJDyq/hqnw4oRlM3cPJK25oaLI+kutQm81dvqqxyEh73r34vWISRq9s
63qqs7VrAfQwLE5x3ItMUbRybjMQspOU/hpOTsiX17Pm9NPEt/lQCMizlUwxaHuu
V8MESGrWg92U71dJ/Ov89DeW2fIBH10rAhGbJJhxqn0e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org