Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/FB1Z30yFtFEqNI_Ey1SX0UjL1vM.roa
File: FB1Z30yFtFEqNI_Ey1SX0UjL1vM.roa (raw, json)
Hash identifier: 9G9G2zwgPL27cdPymYPJZ9Bp8cX1J4VyYw56tXSmIME=
Subject key identifier: 14:1D:59:DF:4C:85:B4:51:2A:34:8F:C4:CB:54:97:D1:48:CB:D6:F3
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0185EDA1F9AD2D9CFEFADE50946363F168F9
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/FB1Z30yFtFEqNI_Ey1SX0UjL1vM.roa
Signing time: Thu 26 Jan 2023 10:31:33 +0000
ROA not before: Thu 26 Jan 2023 10:31:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203560
IP address blocks: 178.21.145.0/24 maxlen: 24
178.21.144.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
2a02:2c0:1::/48 maxlen: 48
2a02:2c0:2::/48 maxlen: 48
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:a1:f9:ad:2d:9c:fe:fa:de:50:94:63:63:f1:68:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jan 26 10:31:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=141d59df4c85b4512a348fc4cb5497d148cbd6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:b2:79:5d:8c:d0:53:d0:54:39:20:64:cf:
4a:d5:2e:06:d9:70:c9:ad:aa:23:0d:0f:26:d9:0c:
a7:ab:04:57:f3:27:19:16:bc:1c:71:05:dd:bc:84:
af:66:e7:d4:98:0c:76:4f:f6:7a:ae:3f:4b:cf:41:
80:a2:1d:f9:20:ed:5b:1a:4a:66:77:ef:c6:ce:21:
dd:e1:54:fa:44:3a:a3:8e:a7:f9:44:1f:dc:34:54:
6e:e4:83:fd:5b:84:4a:c4:0b:9d:1f:03:c3:65:a3:
8f:5a:64:8d:d8:96:13:43:00:05:f6:7c:ef:26:8d:
2e:7e:87:cc:4c:5d:6e:82:07:18:02:a4:33:df:9b:
44:b2:e0:83:cc:a2:89:af:60:ca:ab:b5:1d:73:76:
de:9d:aa:a0:ef:f0:f2:46:10:3f:f5:3b:2e:7f:f9:
bf:a1:4f:c9:ef:9f:5c:a6:da:b0:b9:6a:68:0b:b3:
b9:dc:09:09:f1:5a:c4:5a:57:c4:01:6b:8b:b1:94:
9b:3b:59:b8:10:59:d8:2c:c9:d9:ea:af:f7:84:43:
03:09:cf:42:eb:33:f3:a0:f0:4b:90:34:16:c1:da:
a9:ae:c7:36:5a:a4:4b:a9:50:58:d6:97:0c:49:bb:
77:5b:a3:9d:d5:bf:f3:e7:c1:ae:94:a9:23:97:6d:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:59:DF:4C:85:B4:51:2A:34:8F:C4:CB:54:97:D1:48:CB:D6:F3
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/FB1Z30yFtFEqNI_Ey1SX0UjL1vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0-178.21.146.255
IPv6:
2a02:2c0::-2a02:2c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:7e:ca:d4:0a:05:07:df:e9:3d:cb:33:8d:c3:4e:94:bb:af:
64:a7:26:ac:01:97:e4:e8:80:94:a0:98:80:d9:05:a5:7c:c3:
87:b9:fc:81:cd:d9:4e:48:64:d2:78:cb:b6:e9:30:83:8d:fa:
4d:bd:c3:f6:61:b3:23:e8:e9:53:a8:4c:17:77:d5:e6:1d:b6:
2e:38:8f:e8:09:60:38:d9:10:6d:77:4d:f5:aa:85:9e:6a:d3:
0e:ee:93:bf:18:b9:2a:bc:4b:04:40:d2:93:2b:00:a4:a0:bf:
7b:75:5a:f6:ee:29:b1:3c:7d:68:20:60:7f:82:8c:c9:3a:a1:
10:9c:bd:06:ab:26:43:9f:ff:b3:e2:d5:42:5a:0d:56:6e:93:
ba:e3:c8:a2:9b:b6:e8:f7:c1:20:58:5c:3b:84:94:89:73:51:
ae:f9:a1:fa:55:07:ff:d3:38:c0:25:6a:16:2b:d9:1f:63:b3:
36:42:e2:83:78:61:c6:03:ff:28:fa:0f:eb:5f:36:2a:ad:59:
e2:d2:c8:dd:ca:d1:c5:f9:a7:87:37:f9:69:6b:fb:e2:8b:47:
d3:7a:1b:3a:4d:20:2d:c6:15:4d:0f:dd:bf:5b:24:24:88:f8:
0a:aa:12:c7:ea:40:0d:f0:82:5d:1c:20:ac:af:0f:79:a3:3a:
18:11:0a:63
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYXtofmtLZz++t5QlGNj8Wj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjMwMTI2MTAzMTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDFkNTlkZjRjODViNDUxMmEzNDhmYzRjYjU0OTdkMTQ4Y2JkNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwGyeV2M0FPQVDkgZM9K1S4G2XDJ
raojDQ8m2QynqwRX8ycZFrwccQXdvISvZufUmAx2T/Z6rj9Lz0GAoh35IO1bGkpm
d+/GziHd4VT6RDqjjqf5RB/cNFRu5IP9W4RKxAudHwPDZaOPWmSN2JYTQwAF9nzv
Jo0ufofMTF1uggcYAqQz35tEsuCDzKKJr2DKq7Udc3benaqg7/DyRhA/9Tsuf/m/
oU/J759cptqwuWpoC7O53AkJ8VrEWlfEAWuLsZSbO1m4EFnYLMnZ6q/3hEMDCc9C
6zPzoPBLkDQWwdqprsc2WqRLqVBY1pcMSbt3W6Od1b/z58GulKkjl206pQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFBQdWd9MhbRRKjSPxMtUl9FIy9bzMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvRkIxWjMweUZ0RkVxTklfRXkxU1gwVWpMMXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBASyFZAD
BACyFZIwGAQCAAIwEjAQAwUGKgICwAMHACoCAsAAAjANBgkqhkiG9w0BAQsFAAOC
AQEAd37K1AoFB9/pPcszjcNOlLuvZKcmrAGX5OiAlKCYgNkFpXzDh7n8gc3ZTkhk
0njLtukwg436Tb3D9mGzI+jpU6hMF3fV5h22LjiP6AlgONkQbXdN9aqFnmrTDu6T
vxi5KrxLBEDSkysApKC/e3Va9u4psTx9aCBgf4KMyTqhEJy9BqsmQ5//s+LVQloN
Vm6TuuPIopu26PfBIFhcO4SUiXNRrvmh+lUH/9M4wCVqFivZH2OzNkLig3hhxgP/
KPoP6182Kq1Z4tLI3crRxfmnhzf5aWv74otH03obOk0gLcYVTQ/dv1skJIj4CqoS
x+pADfCCXRwgrK8PeaM6GBEKYw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org