Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/niowzcxqH0rnKRNVt9Hr0xKu9J4.roa
File: niowzcxqH0rnKRNVt9Hr0xKu9J4.roa (raw, json)
Hash identifier: cYVNRGsBF2gWD3RlkABzV8fIFj06uNv3Wurfy6FkM1c=
Subject key identifier: 9E:2A:30:CD:CC:6A:1F:4A:E7:29:13:55:B7:D1:EB:D3:12:AE:F4:9E
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 018571276D1E84BC1C5E7E47990D2ED0835E
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/niowzcxqH0rnKRNVt9Hr0xKu9J4.roa
Signing time: Mon 02 Jan 2023 06:24:47 +0000
ROA not before: Mon 02 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.228.0/22 maxlen: 24
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 08 Jan 2023 22:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6d:1e:84:bc:1c:5e:7e:47:99:0d:2e:d0:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jan 2 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e2a30cdcc6a1f4ae7291355b7d1ebd312aef49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:66:f8:c9:48:a5:b7:f0:db:e3:fe:a2:8c:
e8:67:ac:ea:19:09:80:08:55:77:86:26:04:a7:1e:
e7:44:6d:43:62:4c:6c:57:8c:20:45:fb:55:ff:1e:
cf:8e:e4:b9:7a:f0:a0:57:41:87:ac:87:85:39:c9:
20:37:13:5b:b0:71:fa:c8:17:04:80:fb:fc:a4:2f:
e4:05:30:27:81:d9:18:bc:1e:aa:2e:f8:5b:64:87:
b9:b5:55:d8:30:f0:0c:f4:19:2a:ae:0c:ca:9a:8c:
d3:84:c6:3b:41:30:ef:25:12:40:db:bd:d0:ae:ab:
ac:48:d1:7c:81:0f:f6:85:a7:51:31:be:19:5b:98:
b0:32:6e:ec:a3:50:d3:16:28:05:f5:a5:31:3b:48:
e7:e6:5c:0b:16:2e:e9:91:43:13:29:02:26:02:26:
c4:87:a5:19:e6:d5:51:df:9e:9c:b2:53:ce:99:7c:
f0:59:b4:92:57:71:54:14:2f:a5:f4:4b:5c:0b:bf:
f3:de:e4:6d:9c:0b:8a:bb:37:b3:a1:8b:47:a5:8b:
5d:83:6a:f8:5a:68:a7:fa:8e:25:86:56:1e:9a:ed:
b6:f4:8b:c2:22:cc:c0:3a:2e:bc:cd:42:fe:06:e4:
70:af:ff:48:31:7c:a7:f4:59:0e:df:db:d9:1a:28:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2A:30:CD:CC:6A:1F:4A:E7:29:13:55:B7:D1:EB:D3:12:AE:F4:9E
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/niowzcxqH0rnKRNVt9Hr0xKu9J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
14:9b:10:60:d3:c3:8e:4e:82:e9:f4:b1:8b:89:d7:53:43:76:
89:d6:16:e3:77:76:c4:a7:db:b7:6b:76:af:e1:06:9b:a8:a3:
3f:7c:53:1d:10:7c:64:1a:20:06:72:d3:9a:15:91:69:55:84:
37:7c:6f:c8:2b:92:8d:c6:77:dd:1f:34:9d:79:36:d9:ce:7f:
06:68:fd:8d:ad:86:28:a4:96:36:a2:82:9b:58:e8:3f:e0:fe:
81:5e:c0:7b:76:3c:d5:51:0f:e5:eb:a2:f9:28:7a:82:c3:f0:
39:ae:c1:e5:1e:85:2c:7b:48:a2:f4:b6:b6:18:24:be:67:c0:
35:4f:fe:65:52:70:4a:fd:8a:4b:0e:bf:b9:c3:c9:97:70:81:
f1:7e:5f:bc:63:c7:04:a8:5d:6b:b3:2f:be:4e:2d:96:2e:1b:
a5:b1:72:d1:c3:a0:34:89:03:e1:f5:6d:61:e6:9d:e1:2e:aa:
5e:a3:47:7d:26:2e:99:13:a9:0a:5f:ce:9e:ea:65:11:7d:df:
95:a3:b5:8e:52:c6:55:7f:59:7f:0b:ab:41:29:0c:3b:a8:13:
70:7a:07:c9:e2:4c:44:eb:a2:f5:75:dc:1e:c5:4f:f3:56:36:
01:9e:4b:30:b1:f7:fc:98:6f:a2:36:e5:90:da:c6:86:72:ff:
ad:8d:1f:81
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxJ20ehLwcXn5HmQ0u0INeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2
NDlkMDMwHhcNMjMwMTAyMDYyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJhMzBjZGNjNmExZjRhZTcyOTEzNTViN2QxZWJkMzEyYWVmNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6tm+MlIpbfw2+P+oozoZ6zqGQmA
CFV3hiYEpx7nRG1DYkxsV4wgRftV/x7PjuS5evCgV0GHrIeFOckgNxNbsHH6yBcE
gPv8pC/kBTAngdkYvB6qLvhbZIe5tVXYMPAM9BkqrgzKmozThMY7QTDvJRJA273Q
rqusSNF8gQ/2hadRMb4ZW5iwMm7so1DTFigF9aUxO0jn5lwLFi7pkUMTKQImAibE
h6UZ5tVR356cslPOmXzwWbSSV3FUFC+l9EtcC7/z3uRtnAuKuzezoYtHpYtdg2r4
Wmin+o4lhlYemu229IvCIszAOi68zUL+BuRwr/9IMXyn9FkO39vZGihtxQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ4qMM3Mah9K5ykTVbfR69MSrvSeMB8GA1UdIwQY
MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt
YjMwNDA4OTQ4Y2NlLzEvbmlvd3pjeHFIMHJuS1JOVnQ5SHIweEt1OUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl
LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCstfkMA0E
AgACMAcDBQMqDVRAMA0GCSqGSIb3DQEBCwUAA4IBAQAUmxBg08OOToLp9LGLiddT
Q3aJ1hbjd3bEp9u3a3av4QabqKM/fFMdEHxkGiAGctOaFZFpVYQ3fG/IK5KNxnfd
HzSdeTbZzn8GaP2NrYYopJY2ooKbWOg/4P6BXsB7djzVUQ/l66L5KHqCw/A5rsHl
HoUse0ii9La2GCS+Z8A1T/5lUnBK/YpLDr+5w8mXcIHxfl+8Y8cEqF1rsy++Ti2W
LhulsXLRw6A0iQPh9W1h5p3hLqpeo0d9Ji6ZE6kKX86e6mURfd+Vo7WOUsZVf1l/
C6tBKQw7qBNwegfJ4kxE66L1ddwexU/zVjYBnkswsff8mG+iNuWQ2saGcv+tjR+B
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org