Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/zMma_sNKRyXaelO8fmQdNRAF_wc.roa
File: zMma_sNKRyXaelO8fmQdNRAF_wc.roa (raw, json)
Hash identifier: 4YcuC9boukW37sTqLrCMXuIP68pQ4D/u8vbwNdP+m1A=
Subject key identifier: CC:C9:9A:FE:C3:4A:47:25:DA:7A:53:BC:7E:64:1D:35:10:05:FF:07
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 01856E38DA4ADC9045C04126753EB3DF3302
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/zMma_sNKRyXaelO8fmQdNRAF_wc.roa
Signing time: Sun 01 Jan 2023 16:44:57 +0000
ROA not before: Sun 01 Jan 2023 16:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 178.250.16.0/24 maxlen: 24
178.250.18.0/24 maxlen: 24
185.24.240.0/24 maxlen: 24
2a00:fc80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:da:4a:dc:90:45:c0:41:26:75:3e:b3:df:33:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Jan 1 16:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccc99afec34a4725da7a53bc7e641d351005ff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:78:71:17:68:17:25:19:47:ee:91:d5:54:
3e:af:1b:b8:29:6f:6e:56:89:f5:af:ed:be:fc:e4:
dd:34:6a:4d:69:44:ae:53:f2:01:77:aa:a4:10:0f:
e0:86:35:c4:34:5d:2d:56:b9:27:50:73:f3:43:dd:
31:6b:91:78:3f:13:84:19:7b:33:6b:b7:a8:6d:45:
3b:75:0f:e4:2c:43:ad:c6:3e:a9:84:d4:bd:13:21:
e8:02:4e:b8:25:35:58:67:03:d0:d3:da:96:f9:3c:
58:ef:1c:ef:74:a5:61:75:88:6f:01:49:be:a9:52:
c2:b5:67:05:cd:63:39:cb:a0:96:92:44:26:3d:e1:
12:eb:08:12:69:d8:fa:49:36:7c:b9:11:77:e2:ba:
c5:71:f8:3d:82:ba:c7:19:77:13:6b:7b:83:75:3a:
0f:d5:24:f1:a2:ea:34:f9:87:2d:8f:51:44:c5:1e:
c7:df:dc:e6:19:2d:91:5c:e4:99:30:54:0b:f1:54:
66:42:7c:38:b1:39:59:f5:cd:1d:c8:83:cc:80:73:
f1:c0:c2:74:34:ce:9b:dd:70:b6:db:bd:31:ab:53:
41:9b:06:86:8d:cf:a7:94:b5:69:d3:2f:41:cc:66:
3a:27:12:17:0c:c5:08:2b:b5:03:6c:92:22:74:79:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:9A:FE:C3:4A:47:25:DA:7A:53:BC:7E:64:1D:35:10:05:FF:07
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/zMma_sNKRyXaelO8fmQdNRAF_wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.16.0/24
178.250.18.0/24
185.24.240.0/24
IPv6:
2a00:fc80::/48
Signature Algorithm: sha256WithRSAEncryption
31:8c:f2:00:52:9e:03:9f:cf:70:53:fc:73:04:1b:ee:bb:a8:
5a:ec:f4:f0:4e:18:6b:d7:0c:92:a1:16:4c:35:ab:d8:72:49:
13:48:93:66:6d:eb:9f:68:19:3f:44:15:c2:df:d6:5f:c4:7d:
de:81:00:3a:60:74:0b:00:37:dc:62:84:fb:f8:73:d4:10:d9:
e0:18:25:62:c4:d0:47:2a:1d:95:24:86:0e:1e:2a:5d:4a:85:
df:2e:5d:c5:a7:df:6b:d8:fb:98:a3:cc:e3:71:75:c6:97:49:
80:7c:8f:84:d3:bb:89:47:98:3b:18:a5:70:22:90:e4:83:14:
be:ca:dc:b1:fc:93:45:3a:d3:93:11:1e:3c:74:89:1e:be:7b:
bc:ef:ef:05:94:4b:85:06:c9:7c:c0:e5:1e:56:e4:29:13:80:
5b:82:3b:cc:1e:38:1f:f4:b7:78:08:a2:18:d6:56:e1:9f:c8:
7f:a8:40:f8:2b:e6:ed:33:d4:82:b9:4b:5c:af:17:cf:5f:57:
8d:c9:2c:2c:ce:7a:f7:62:b3:c7:87:5b:7a:47:fd:29:db:a9:
4f:63:9c:0a:c7:34:12:4a:b5:74:eb:6e:2e:ff:08:1d:57:18:
b1:a9:75:dd:36:4a:54:e1:4a:84:e5:93:bf:67:15:72:ec:b6:
63:c2:77:a1
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVuONpK3JBFwEEmdT6z3zMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2M1ODliOTliYTQ5NDJjYWRlZGMxNzg5Mzg5NjQyOTYz
YzQ4YWUwHhcNMjMwMTAxMTY0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2M5OWFmZWMzNGE0NzI1ZGE3YTUzYmM3ZTY0MWQzNTEwMDVmZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0d4cRdoFyUZR+6R1VQ+rxu4KW9u
Von1r+2+/OTdNGpNaUSuU/IBd6qkEA/ghjXENF0tVrknUHPzQ90xa5F4PxOEGXsz
a7eobUU7dQ/kLEOtxj6phNS9EyHoAk64JTVYZwPQ09qW+TxY7xzvdKVhdYhvAUm+
qVLCtWcFzWM5y6CWkkQmPeES6wgSadj6STZ8uRF34rrFcfg9grrHGXcTa3uDdToP
1STxouo0+Yctj1FExR7H39zmGS2RXOSZMFQL8VRmQnw4sTlZ9c0dyIPMgHPxwMJ0
NM6b3XC2270xq1NBmwaGjc+nlLVp0y9BzGY6JxIXDMUIK7UDbJIidHk4RwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFMzJmv7DSkcl2npTvH5kHTUQBf8HMB8GA1UdIwQY
MBaAFOPMWJuZuklCyt7cF4k4lkKWPEiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzIt
MWMyMjY3ZWJmNWQ1LzEvek1tYV9zTktSeVhhZWxPOGZtUWROUkFGX3djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzItMWMyMjY3ZWJmNWQ1
LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAsvoQAwQA
svoSAwQAuRjwMA8EAgACMAkDBwAqAPyAAAAwDQYJKoZIhvcNAQELBQADggEBADGM
8gBSngOfz3BT/HMEG+67qFrs9PBOGGvXDJKhFkw1q9hySRNIk2Zt659oGT9EFcLf
1l/Efd6BADpgdAsAN9xihPv4c9QQ2eAYJWLE0EcqHZUkhg4eKl1Khd8uXcWn32vY
+5ijzONxdcaXSYB8j4TTu4lHmDsYpXAikOSDFL7K3LH8k0U605MRHjx0iR6+e7zv
7wWUS4UGyXzA5R5W5CkTgFuCO8weOB/0t3gIohjWVuGfyH+oQPgr5u0z1IK5S1yv
F89fV43JLCzOevdis8eHW3pH/SnbqU9jnArHNBJKtXTrbi7/CB1XGLGpdd02SlTh
SoTlk79nFXLstmPCd6E=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:31 2024 by rpki-client on console-ams.rpki-client.org