Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/7uWzrTfBKxu1zLV79imMgeo3UBE.roa
File: 7uWzrTfBKxu1zLV79imMgeo3UBE.roa (raw, json)
Hash identifier: 5VdZ6ZrelOTLzrq5Wsy1X5rJI0fbZavAxNPXeveR0Ow=
Subject key identifier: EE:E5:B3:AD:37:C1:2B:1B:B5:CC:B5:7B:F6:29:8C:81:EA:37:50:11
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0185EDC8A624A408070A6D01A65A32E36708
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/7uWzrTfBKxu1zLV79imMgeo3UBE.roa
Signing time: Thu 26 Jan 2023 11:13:48 +0000
ROA not before: Thu 26 Jan 2023 11:13:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 178.21.145.0/24 maxlen: 24
178.21.144.0/24 maxlen: 24
178.21.148.0/24 maxlen: 24
178.21.147.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
2a02:2c0:3::/48 maxlen: 48
2a02:2c0:1::/48 maxlen: 48
2a02:2c0:2::/48 maxlen: 48
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:c8:a6:24:a4:08:07:0a:6d:01:a6:5a:32:e3:67:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jan 26 11:13:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee5b3ad37c12b1bb5ccb57bf6298c81ea375011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:5f:07:fc:bd:8e:57:cc:31:f9:ee:e2:4f:
54:07:ab:ce:c7:02:e7:62:29:b8:30:19:da:2d:ed:
0f:26:fa:09:5a:5a:a2:cb:64:1e:0c:2d:4a:27:11:
89:9a:02:e9:06:15:7b:d8:b5:0e:94:56:b5:93:d5:
4a:3c:38:e5:4f:74:83:02:70:eb:1c:0f:2e:65:64:
a4:9c:54:42:44:e4:56:b6:e4:fc:e2:df:cf:a6:69:
f6:7f:ff:d5:ed:ac:83:9f:8e:c5:c2:14:d5:08:29:
46:bb:f1:e3:e5:de:9e:01:ae:90:10:bd:54:81:a5:
c1:a6:0e:4f:92:52:22:2d:5e:86:a6:0c:ec:63:ed:
33:5c:45:4b:29:6e:94:26:8f:b9:61:14:8c:4c:17:
86:19:e3:60:b0:1e:53:b6:a2:6c:a1:c4:46:3a:1a:
bf:fb:85:79:b3:3e:a0:a1:28:69:77:8c:8d:dc:a5:
19:0f:9a:f3:c3:87:67:76:39:bb:47:23:98:71:03:
fd:97:d1:68:0a:10:32:5a:01:8a:ee:ea:81:7b:e2:
82:0a:46:66:b4:c5:cd:df:c2:53:92:af:ff:da:0b:
75:8a:fb:12:00:9e:8e:17:1a:42:98:88:5d:f3:70:
23:f4:ab:f7:3e:1f:5a:9e:d6:ee:6e:9b:0c:95:eb:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:B3:AD:37:C1:2B:1B:B5:CC:B5:7B:F6:29:8C:81:EA:37:50:11
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/7uWzrTfBKxu1zLV79imMgeo3UBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0-178.21.148.255
IPv6:
2a02:2c0::/46
Signature Algorithm: sha256WithRSAEncryption
a0:c4:e0:15:11:f5:1a:3c:f6:30:a6:3c:20:7a:3e:29:29:bc:
b3:de:93:81:16:b0:c7:e0:02:c6:3c:2e:80:41:1f:11:be:08:
4d:83:84:4b:9c:9b:df:ec:87:3e:cc:0c:05:68:dd:18:00:e4:
0c:0e:47:6d:b7:f9:c6:9a:d9:4e:3a:d7:8c:b8:7e:b0:d7:19:
cd:ff:b3:a5:98:17:a4:aa:6e:66:c1:18:27:01:bc:49:f9:32:
f8:80:0f:41:4f:7d:50:da:e7:59:37:e2:09:e8:8e:7f:c8:86:
95:dc:1f:c4:4d:9f:8d:ae:8c:8b:5e:52:a7:ca:63:47:12:fd:
ba:71:82:ee:21:6d:9b:e2:23:de:f2:f4:fa:af:7b:2f:33:85:
05:58:b3:fb:21:8e:8c:f0:79:b4:df:6e:ad:fb:3d:7b:5c:4e:
57:99:8b:2b:c5:19:84:74:fa:0a:f4:37:4c:c2:78:b4:7d:06:
bb:d4:04:e8:ed:70:81:0e:33:f5:1e:4d:41:d0:e2:d6:c1:e3:
ce:86:db:cb:35:fc:b8:b3:d4:19:f8:21:4f:36:eb:2b:ac:3a:
1b:14:fd:27:08:8f:f4:b9:ec:5e:69:68:18:eb:76:b4:dd:e4:
a0:af:46:74:ef:4b:1f:aa:c7:f1:a1:36:54:b4:8b:f7:38:32:
af:d9:72:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYXtyKYkpAgHCm0Bploy42cIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjMwMTI2MTExMzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWU1YjNhZDM3YzEyYjFiYjVjY2I1N2JmNjI5OGM4MWVhMzc1MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UdfB/y9jlfMMfnu4k9UB6vOxwLn
Yim4MBnaLe0PJvoJWlqiy2QeDC1KJxGJmgLpBhV72LUOlFa1k9VKPDjlT3SDAnDr
HA8uZWSknFRCRORWtuT84t/Ppmn2f//V7ayDn47FwhTVCClGu/Hj5d6eAa6QEL1U
gaXBpg5PklIiLV6GpgzsY+0zXEVLKW6UJo+5YRSMTBeGGeNgsB5TtqJsocRGOhq/
+4V5sz6goShpd4yN3KUZD5rzw4dndjm7RyOYcQP9l9FoChAyWgGK7uqBe+KCCkZm
tMXN38JTkq//2gt1ivsSAJ6OFxpCmIhd83Aj9Kv3Ph9antbubpsMleuRIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7ls603wSsbtcy1e/YpjIHqN1ARMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvN3VXenJUZkJLeHUxekxWNzlpbU1nZW8zVUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBASyFZAD
BACyFZQwDwQCAAIwCQMHAioCAsAAADANBgkqhkiG9w0BAQsFAAOCAQEAoMTgFRH1
Gjz2MKY8IHo+KSm8s96TgRawx+ACxjwugEEfEb4ITYOES5yb3+yHPswMBWjdGADk
DA5Hbbf5xprZTjrXjLh+sNcZzf+zpZgXpKpuZsEYJwG8Sfky+IAPQU99UNrnWTfi
CeiOf8iGldwfxE2fja6Mi15Sp8pjRxL9unGC7iFtm+Ij3vL0+q97LzOFBViz+yGO
jPB5tN9urfs9e1xOV5mLK8UZhHT6CvQ3TMJ4tH0Gu9QE6O1wgQ4z9R5NQdDi1sHj
zobbyzX8uLPUGfghTzbrK6w6GxT9JwiP9LnsXmloGOt2tN3koK9GdO9LH6rH8aE2
VLSL9zgyr9lyTQ==
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:25 2024 by rpki-client on console-ams.rpki-client.org