Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nuXQXtZL39q82JuKh3u4Xxzh6BQ.roa
File: nuXQXtZL39q82JuKh3u4Xxzh6BQ.roa (raw, json)
Hash identifier: szOfz1v2Wtj9u3T07fs7Lrd5Nj32djDui0osH2swvQA=
Subject key identifier: 9E:E5:D0:5E:D6:4B:DF:DA:BC:D8:9B:8A:87:7B:B8:5F:1C:E1:E8:14
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A477C727118577093BB82BA322DDF
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nuXQXtZL39q82JuKh3u4Xxzh6BQ.roa
Signing time: Sun 01 Jan 2023 03:05:08 +0000
ROA not before: Sun 01 Jan 2023 03:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208503
IP address blocks: 178.170.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:47:7c:72:71:18:57:70:93:bb:82:ba:32:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ee5d05ed64bdfdabcd89b8a877bb85f1ce1e814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1a:31:1f:24:38:c9:f2:5e:da:9c:c0:15:80:
e2:e5:4f:32:bb:e6:75:73:83:13:45:1a:63:60:69:
f4:25:01:df:a9:be:d0:92:ea:4c:52:c4:e9:38:3c:
0b:cf:70:a8:ce:80:6e:1b:10:d1:c5:2b:ba:0f:51:
d6:3b:7e:65:fa:58:b0:2c:e2:56:3c:c1:51:1e:42:
40:07:a0:be:8e:31:98:e5:ea:3f:2b:98:11:25:33:
99:d8:0d:ae:2f:96:48:28:7d:55:b0:b3:b0:9e:00:
b7:19:1d:14:48:a1:f8:86:aa:87:61:56:c9:3b:9a:
3e:76:b1:82:0e:6f:03:c1:0f:7d:46:e9:8a:b3:27:
f9:b0:21:4e:80:22:25:26:d0:07:1d:41:fe:60:51:
cc:e1:c4:fe:aa:f9:cb:a7:2d:cc:da:60:8b:44:2d:
f9:b1:76:10:64:d0:2b:b1:c3:57:3e:12:a3:d8:9e:
05:66:fb:b1:2a:0b:12:d6:56:a2:67:45:75:be:99:
17:45:50:ce:8e:f0:f1:fa:69:da:b0:2f:5f:ef:43:
a7:0d:ac:56:3d:1b:1d:5f:c5:d3:6e:ff:d6:0b:9a:
2e:73:58:1c:f7:55:1c:31:8f:ea:f2:b5:f0:92:b7:
27:db:61:bd:01:fe:23:e9:a7:03:23:fe:2f:ce:69:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:D0:5E:D6:4B:DF:DA:BC:D8:9B:8A:87:7B:B8:5F:1C:E1:E8:14
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nuXQXtZL39q82JuKh3u4Xxzh6BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:88:6f:df:88:fe:cd:57:a9:75:e7:0a:35:17:c1:b1:2e:21:
fa:c9:19:a0:81:f7:d0:85:18:de:2d:ca:b0:a2:53:6e:91:a4:
6f:02:35:91:89:7c:16:1b:93:ad:e7:6c:b2:ef:c6:d8:9f:ba:
ae:39:f5:e9:a5:ce:a0:e3:59:e6:a7:ea:fa:af:8d:18:f4:3d:
17:63:e6:51:fd:19:37:71:5f:a7:65:3c:ad:ee:69:c5:61:a2:
a4:b7:86:d0:76:79:24:a0:f9:3b:ad:eb:98:d3:f2:d2:a5:24:
d6:f9:b2:9b:15:da:42:47:c4:ba:03:69:b4:7d:ef:00:1d:ad:
a3:04:0f:5e:e9:96:2d:a4:c3:fc:8d:28:36:53:5c:9f:93:54:
65:09:cb:47:da:c9:65:48:59:5a:a9:6e:c4:d7:65:ed:35:21:
24:55:a9:a1:55:4f:89:f4:55:e8:28:9a:5e:cf:6d:65:62:e9:
98:70:69:82:78:f1:2e:80:53:d4:4c:cf:01:7c:d7:d6:cd:6e:
08:6b:df:fc:44:a3:d2:7d:92:7f:cb:d6:dd:7e:f3:8d:a4:54:
10:da:af:4a:2e:fc:b6:14:6c:32:d7:9e:59:1e:4c:5a:47:85:
35:40:45:94:54:90:95:51:b9:45:c0:b9:b3:d7:13:ff:d5:28:
fb:c2:34:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSkd8cnEYV3CTu4K6Mi3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWU1ZDA1ZWQ2NGJkZmRhYmNkODliOGE4NzdiYjg1ZjFjZTFlODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBoxHyQ4yfJe2pzAFYDi5U8yu+Z1
c4MTRRpjYGn0JQHfqb7QkupMUsTpODwLz3CozoBuGxDRxSu6D1HWO35l+liwLOJW
PMFRHkJAB6C+jjGY5eo/K5gRJTOZ2A2uL5ZIKH1VsLOwngC3GR0USKH4hqqHYVbJ
O5o+drGCDm8DwQ99RumKsyf5sCFOgCIlJtAHHUH+YFHM4cT+qvnLpy3M2mCLRC35
sXYQZNArscNXPhKj2J4FZvuxKgsS1laiZ0V1vpkXRVDOjvDx+mnasC9f70OnDaxW
PRsdX8XTbv/WC5ouc1gc91UcMY/q8rXwkrcn22G9Af4j6acDI/4vzmnevQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ7l0F7WS9/avNibiod7uF8c4egUMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvbnVYUVh0WkwzOXE4Mkp1S2gzdTRYeHpoNkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqroMA0G
CSqGSIb3DQEBCwUAA4IBAQAuiG/fiP7NV6l15wo1F8GxLiH6yRmggffQhRjeLcqw
olNukaRvAjWRiXwWG5Ot52yy78bYn7quOfXppc6g41nmp+r6r40Y9D0XY+ZR/Rk3
cV+nZTyt7mnFYaKkt4bQdnkkoPk7reuY0/LSpSTW+bKbFdpCR8S6A2m0fe8AHa2j
BA9e6ZYtpMP8jSg2U1yfk1RlCctH2sllSFlaqW7E12XtNSEkVamhVU+J9FXoKJpe
z21lYumYcGmCePEugFPUTM8BfNfWzW4Ia9/8RKPSfZJ/y9bdfvONpFQQ2q9KLvy2
FGwy155ZHkxaR4U1QEWUVJCVUblFwLmz1xP/1Sj7wjQp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org