Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6hEh3m9nU9LCO8EMRI_kXgQShd0.roa
File: 6hEh3m9nU9LCO8EMRI_kXgQShd0.roa (raw, json)
Hash identifier: OS+xAc1yD/OP5N0hH3kOJgM7KCBwAOSzZInErTkbVDI=
Subject key identifier: EA:11:21:DE:6F:67:53:D2:C2:3B:C1:0C:44:8F:E4:5E:04:12:85:DD
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0188B404099B1A71C9125BDBAE76431A974E
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6hEh3m9nU9LCO8EMRI_kXgQShd0.roa
Signing time: Tue 13 Jun 2023 09:09:03 +0000
ROA not before: Tue 13 Jun 2023 09:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43343
IP address blocks: 78.158.169.0/24 maxlen: 24
78.158.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 09:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:04:09:9b:1a:71:c9:12:5b:db:ae:76:43:1a:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jun 13 09:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea1121de6f6753d2c23bc10c448fe45e041285dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:39:97:7b:9e:60:5d:e2:d5:7f:33:3a:41:
56:48:b1:d1:bc:52:b7:cb:a8:02:5d:07:ad:60:a9:
eb:7b:54:52:c3:7a:16:76:ee:c8:08:42:9e:35:4c:
0c:dc:7d:a0:0b:ed:d7:c3:ac:1d:7c:69:54:1b:80:
ae:e3:79:50:1e:31:fc:76:02:8a:a1:2e:a6:0c:e8:
8a:e5:db:e8:66:3a:4b:4a:72:0a:ed:0e:a1:ac:41:
2c:c0:e8:ce:c1:1a:cf:30:c7:f8:e1:ea:04:88:88:
9e:15:6a:16:ba:f4:3a:51:6a:61:10:b2:47:dd:d3:
da:8c:dd:40:1c:cc:55:22:a4:02:57:60:ca:42:14:
72:75:1d:4a:fa:f4:fd:2b:6d:e3:26:f6:71:4b:93:
aa:b9:36:52:f9:fc:b9:99:63:e1:5d:05:84:e4:0d:
85:c9:cc:d0:8c:5e:b4:3a:9b:e8:2a:58:5c:cb:18:
f6:1b:8d:17:1e:00:d6:0a:ac:05:6a:f4:58:5a:02:
35:64:a2:53:76:9b:88:cb:b3:a4:6e:07:ff:76:36:
b0:fa:d4:a5:b6:c5:8f:20:70:e1:92:17:a7:ee:43:
1d:33:84:f4:17:7f:e0:9f:64:8b:be:ac:04:6b:84:
d4:ae:d0:00:65:a5:01:6d:e1:33:d4:cf:b8:67:d1:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:21:DE:6F:67:53:D2:C2:3B:C1:0C:44:8F:E4:5E:04:12:85:DD
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6hEh3m9nU9LCO8EMRI_kXgQShd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.169.0/24
78.158.179.0/24
Signature Algorithm: sha256WithRSAEncryption
66:07:3b:dc:05:c4:58:69:fe:e1:98:5c:e0:ae:a7:eb:33:55:
01:f5:b5:55:be:11:31:e2:9b:2b:a1:60:0c:dd:b2:9f:14:eb:
25:20:5d:c0:f9:98:ad:47:eb:7e:43:9d:9f:e9:46:4e:47:4d:
ce:57:76:65:e5:e1:be:32:70:ba:2b:97:8b:3e:ad:de:4d:58:
39:85:95:08:f0:cf:fe:30:b6:43:81:1d:8c:f3:86:7b:57:75:
81:59:4b:05:3c:00:57:14:0d:9d:97:c0:50:4d:ef:dc:ad:0c:
02:be:c5:2e:6e:80:dd:1a:90:73:a3:19:8d:e9:8d:60:76:97:
21:95:17:f4:26:c9:20:ea:8f:97:5b:15:46:59:ec:ba:dc:5f:
29:b5:0b:10:9f:9f:3b:91:15:35:1a:99:7b:28:fc:6a:e3:c0:
b7:56:e9:f2:99:a3:08:e2:8d:bc:cc:b5:cf:ec:3c:8f:0b:46:
36:9b:82:01:e0:0e:7d:bc:bd:45:c6:ec:d8:e8:85:90:1e:db:
bb:4b:10:64:3f:a0:aa:c1:57:99:f4:15:dd:95:74:94:67:7f:
51:a7:e4:3d:5f:06:ff:16:83:95:2e:b9:23:5c:ec:ed:db:54:
05:14:60:74:46:08:c6:b1:e2:db:24:00:e2:97:65:46:91:57:
d2:29:cf:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYi0BAmbGnHJElvbrnZDGpdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjMwNjEzMDkwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTExMjFkZTZmNjc1M2QyYzIzYmMxMGM0NDhmZTQ1ZTA0MTI4NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyw5l3ueYF3i1X8zOkFWSLHRvFK3
y6gCXQetYKnre1RSw3oWdu7ICEKeNUwM3H2gC+3Xw6wdfGlUG4Cu43lQHjH8dgKK
oS6mDOiK5dvoZjpLSnIK7Q6hrEEswOjOwRrPMMf44eoEiIieFWoWuvQ6UWphELJH
3dPajN1AHMxVIqQCV2DKQhRydR1K+vT9K23jJvZxS5OquTZS+fy5mWPhXQWE5A2F
yczQjF60OpvoKlhcyxj2G40XHgDWCqwFavRYWgI1ZKJTdpuIy7Okbgf/djaw+tSl
tsWPIHDhkhen7kMdM4T0F3/gn2SLvqwEa4TUrtAAZaUBbeEz1M+4Z9ENWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOoRId5vZ1PSwjvBDESP5F4EEoXdMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvNmhFaDNtOW5VOUxDTzhFTVJJX2tYZ1FTaGQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATp6pAwQA
Tp6zMA0GCSqGSIb3DQEBCwUAA4IBAQBmBzvcBcRYaf7hmFzgrqfrM1UB9bVVvhEx
4psroWAM3bKfFOslIF3A+ZitR+t+Q52f6UZOR03OV3Zl5eG+MnC6K5eLPq3eTVg5
hZUI8M/+MLZDgR2M84Z7V3WBWUsFPABXFA2dl8BQTe/crQwCvsUuboDdGpBzoxmN
6Y1gdpchlRf0Jskg6o+XWxVGWey63F8ptQsQn587kRU1Gpl7KPxq48C3VunymaMI
4o28zLXP7DyPC0Y2m4IB4A59vL1FxuzY6IWQHtu7SxBkP6CqwVeZ9BXdlXSUZ39R
p+Q9Xwb/FoOVLrkjXOzt21QFFGB0RgjGseLbJADil2VGkVfSKc+Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org