Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H3H_aJ8bd6LmUiNHmUoJBvm5yWo.roa
File: H3H_aJ8bd6LmUiNHmUoJBvm5yWo.roa (raw, json)
Hash identifier: ynH7sDt48XWOzHQqI5SofdOXE3rXtTtKtVv7U1f2ozA=
Subject key identifier: 1F:71:FF:68:9F:1B:77:A2:E6:52:23:47:99:4A:09:06:F9:B9:C9:6A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D59279EC09FA969E66586CF7BFC3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H3H_aJ8bd6LmUiNHmUoJBvm5yWo.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205775
IP address blocks: 178.19.46.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d5:92:79:ec:09:fa:96:9e:66:58:6c:f7:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f71ff689f1b77a2e6522347994a0906f9b9c96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:d4:94:d9:b7:60:d7:0c:55:49:5b:e7:ad:
f6:01:9e:ef:fa:a8:d3:6c:84:00:62:0b:65:40:30:
c8:4d:55:2b:fd:b7:38:f3:70:19:8b:10:7a:6d:67:
6c:88:9e:57:4f:76:59:b9:ba:48:bd:bd:d0:84:93:
5c:ba:2b:71:3e:f5:98:c8:13:8f:59:65:89:34:2c:
61:5e:1d:20:f1:1f:34:77:3f:b9:20:f1:53:70:cc:
7a:13:3c:55:6b:39:e9:81:a5:b8:98:d6:88:4a:f4:
4c:32:8e:9d:c8:ae:b6:e1:8f:8a:3e:0d:79:d0:12:
fa:62:26:ec:14:9d:a4:1f:21:18:58:c3:30:d5:6c:
d1:98:9d:3f:e0:01:c6:25:3f:2b:0e:19:77:94:ec:
85:13:7d:56:a0:6e:97:f1:7a:6e:37:0e:f3:62:95:
42:58:c5:0c:72:44:5b:9a:f5:36:45:d5:3d:4d:fc:
49:0d:51:df:ed:24:c0:b4:58:32:78:29:19:8c:c4:
a7:fa:a7:d3:de:04:1b:52:bc:cc:7c:08:d5:35:4a:
af:bf:c5:37:fa:59:ac:14:77:52:b6:a6:16:19:20:
0a:77:08:0d:9d:36:1e:86:8f:a9:12:04:ae:3b:15:
b2:41:83:31:60:c9:ee:78:97:d3:c7:0f:a8:0b:9a:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:FF:68:9F:1B:77:A2:E6:52:23:47:99:4A:09:06:F9:B9:C9:6A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H3H_aJ8bd6LmUiNHmUoJBvm5yWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.34.0/23
178.19.45.0-178.19.46.255
Signature Algorithm: sha256WithRSAEncryption
57:fb:b9:80:a2:45:bb:b6:d4:96:6d:d7:d9:b0:cc:9d:01:24:
0b:72:93:b4:92:05:f1:ca:fd:37:e1:aa:d1:6b:e1:a7:26:a0:
e6:88:5f:03:75:4f:dc:15:2e:a0:61:3e:44:a9:aa:74:d9:0f:
db:43:ff:4e:80:4d:be:ce:e6:10:11:5b:2d:ed:7c:30:ee:50:
ca:19:6f:94:59:63:71:3b:73:6c:e3:5e:8d:5d:06:86:61:61:
45:0d:b1:8c:f1:e7:aa:88:cf:86:80:7a:71:9f:df:58:68:34:
5b:5a:5e:ca:89:68:14:8a:ca:75:36:77:86:60:21:67:ae:dc:
cd:83:63:5a:76:41:ff:17:e8:64:44:52:8a:26:d3:42:82:21:
15:84:07:91:bc:0e:7b:8c:7b:fa:b5:67:4d:2a:fe:01:bb:a5:
d2:5a:6f:8d:03:2a:c6:21:23:07:90:8d:20:7f:7b:d5:ad:47:
03:43:bc:28:1b:ea:80:d3:84:05:c1:df:f4:0c:32:e6:26:d0:
89:dc:11:58:42:b9:a9:46:d7:a5:62:60:24:5b:87:ab:0f:57:
bb:1f:18:e5:e8:ec:3e:37:e0:ba:14:58:4a:58:0c:53:08:e0:
73:c4:d4:61:e1:3c:e7:c8:1a:88:c1:af:4e:f2:fc:e1:29:ea:
d7:32:11:67
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVu1NWSeewJ+paeZlhs97/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTAxMTkzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjcxZmY2ODlmMWI3N2EyZTY1MjIzNDc5OTRhMDkwNmY5YjljOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow/UlNm3YNcMVUlb5632AZ7v+qjT
bIQAYgtlQDDITVUr/bc483AZixB6bWdsiJ5XT3ZZubpIvb3QhJNcuitxPvWYyBOP
WWWJNCxhXh0g8R80dz+5IPFTcMx6EzxVaznpgaW4mNaISvRMMo6dyK624Y+KPg15
0BL6YibsFJ2kHyEYWMMw1WzRmJ0/4AHGJT8rDhl3lOyFE31WoG6X8XpuNw7zYpVC
WMUMckRbmvU2RdU9TfxJDVHf7STAtFgyeCkZjMSn+qfT3gQbUrzMfAjVNUqvv8U3
+lmsFHdStqYWGSAKdwgNnTYeho+pEgSuOxWyQYMxYMnueJfTxw+oC5pqFQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFB9x/2ifG3ei5lIjR5lKCQb5uclqMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvSDNIX2FKOGJkNkxtVWlOSG1Vb0pCdm01eVdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBshMiMAwD
BACyEy0DBACyEy4wDQYJKoZIhvcNAQELBQADggEBAFf7uYCiRbu21JZt19mwzJ0B
JAtyk7SSBfHK/TfhqtFr4acmoOaIXwN1T9wVLqBhPkSpqnTZD9tD/06ATb7O5hAR
Wy3tfDDuUMoZb5RZY3E7c2zjXo1dBoZhYUUNsYzx56qIz4aAenGf31hoNFtaXsqJ
aBSKynU2d4ZgIWeu3M2DY1p2Qf8X6GREUoom00KCIRWEB5G8DnuMe/q1Z00q/gG7
pdJab40DKsYhIweQjSB/e9WtRwNDvCgb6oDThAXB3/QMMuYm0IncEVhCualG16Vi
YCRbh6sPV7sfGOXo7D434LoUWEpYDFMI4HPE1GHhPOfIGojBr07y/OEp6tcyEWc=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org