Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/e3lfOXaybVNq_izIB-BRp0pCcFg.roa
File: e3lfOXaybVNq_izIB-BRp0pCcFg.roa (raw, json)
Hash identifier: kxiu1HwKtm6JdkbJp4R+KbU3dtrHz03YDsiaKi0BKIY=
Subject key identifier: 7B:79:5F:39:76:B2:6D:53:6A:FE:2C:C8:07:E0:51:A7:4A:42:70:58
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018D05F6DC517050611A242E076A29257497
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/e3lfOXaybVNq_izIB-BRp0pCcFg.roa
Signing time: Sun 14 Jan 2024 03:14:40 +0000
ROA not before: Sun 14 Jan 2024 03:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 178.239.155.0/24 maxlen: 24
178.239.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 06:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:05:f6:dc:51:70:50:61:1a:24:2e:07:6a:29:25:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 14 03:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b795f3976b26d536afe2cc807e051a74a427058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:c9:e0:fd:15:20:de:47:fc:27:ad:bd:2e:
f4:f0:fc:52:cf:09:ce:f3:c5:91:d2:8f:61:2f:ad:
75:d1:f3:4d:4b:07:ae:10:4b:6d:56:6b:0e:e8:de:
df:d3:21:4b:6f:5e:e5:fd:64:54:2b:12:2f:22:19:
e0:8e:5d:14:2c:95:17:aa:0a:0d:25:6e:55:aa:cf:
88:3e:97:06:ac:c8:fe:be:c6:96:0b:04:78:db:ef:
50:86:d5:a7:d3:0f:7f:e6:d7:d5:8d:64:d9:7e:11:
dc:1b:ec:01:d4:f6:c9:d5:72:5a:ad:a4:4e:ec:f7:
0f:e5:49:cc:8f:f4:b1:0a:8b:62:a6:0c:1a:de:6b:
c4:af:a9:30:c7:5f:bf:c9:f1:d9:30:e4:6e:a1:7f:
32:d3:21:77:79:5b:20:5f:25:d5:36:dc:34:bc:a1:
2d:d7:be:0c:e4:0b:69:d3:fa:8f:07:35:cd:53:0f:
87:cd:c6:ca:13:86:76:92:7e:6d:f6:bc:ac:01:61:
cb:fd:96:c1:d7:fe:61:fe:c5:02:90:51:74:db:a2:
74:3c:32:16:7f:db:2b:69:9a:a4:b2:47:cd:22:ef:
56:01:2a:18:56:c0:39:4d:c2:19:f7:54:2b:bb:43:
0c:e6:2e:57:36:f2:b2:22:96:e9:1f:a2:71:cf:49:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:79:5F:39:76:B2:6D:53:6A:FE:2C:C8:07:E0:51:A7:4A:42:70:58
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/e3lfOXaybVNq_izIB-BRp0pCcFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:83:d9:4c:52:22:41:38:a0:ee:c1:ce:e0:13:e9:82:55:22:
91:c6:9c:07:8c:65:eb:c6:06:1b:06:0c:9a:27:93:1c:2f:5c:
c8:1c:48:62:f5:72:31:ab:4f:2a:e0:28:6e:6d:39:da:f8:6a:
47:88:f7:f3:36:3e:13:56:d6:d6:58:61:6a:79:52:07:04:58:
ac:5d:be:20:22:e9:3d:61:70:b3:7f:73:df:56:7e:28:a0:f6:
e2:61:f4:e9:53:15:08:cf:a2:84:61:1f:53:93:06:40:ea:e3:
e2:eb:e9:ee:ea:42:20:74:a6:59:11:6a:31:49:7d:94:af:ba:
d4:7c:7c:d4:da:2f:8d:17:84:e0:1f:66:7b:20:5a:aa:c7:2c:
7f:c0:dd:2c:11:f4:00:be:2f:69:76:c1:9a:0a:48:b8:14:64:
07:b7:77:95:94:71:2f:15:24:39:af:06:39:d3:e0:ff:da:05:
a8:af:f2:f0:74:72:1f:73:f9:9e:61:76:31:b7:dd:28:03:fa:
54:07:35:c8:f3:0d:12:96:13:ed:53:71:5d:74:13:cf:1e:a6:
3b:a0:07:83:cc:53:25:96:2c:98:35:19:96:6f:cd:90:13:09:
96:6f:0d:f1:6b:2d:f5:5c:28:8a:96:0b:21:ca:20:76:f9:ac:
a0:3b:1f:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0F9txRcFBhGiQuB2opJXSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjQwMTE0MDMxNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjc5NWYzOTc2YjI2ZDUzNmFmZTJjYzgwN2UwNTFhNzRhNDI3MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7J4P0VIN5H/CetvS708PxSzwnO
88WR0o9hL6110fNNSweuEEttVmsO6N7f0yFLb17l/WRUKxIvIhngjl0ULJUXqgoN
JW5Vqs+IPpcGrMj+vsaWCwR42+9QhtWn0w9/5tfVjWTZfhHcG+wB1PbJ1XJaraRO
7PcP5UnMj/SxCotipgwa3mvEr6kwx1+/yfHZMORuoX8y0yF3eVsgXyXVNtw0vKEt
174M5Atp0/qPBzXNUw+HzcbKE4Z2kn5t9rysAWHL/ZbB1/5h/sUCkFF026J0PDIW
f9sraZqkskfNIu9WASoYVsA5TcIZ91Qru0MM5i5XNvKyIpbpH6Jxz0la6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHt5Xzl2sm1Tav4syAfgUadKQnBYMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvZTNsZk9YYXliVk5xX2l6SUItQlJwMHBDY0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsu+aMA0G
CSqGSIb3DQEBCwUAA4IBAQDTg9lMUiJBOKDuwc7gE+mCVSKRxpwHjGXrxgYbBgya
J5McL1zIHEhi9XIxq08q4ChubTna+GpHiPfzNj4TVtbWWGFqeVIHBFisXb4gIuk9
YXCzf3PfVn4ooPbiYfTpUxUIz6KEYR9TkwZA6uPi6+nu6kIgdKZZEWoxSX2Ur7rU
fHzU2i+NF4TgH2Z7IFqqxyx/wN0sEfQAvi9pdsGaCki4FGQHt3eVlHEvFSQ5rwY5
0+D/2gWor/LwdHIfc/meYXYxt90oA/pUBzXI8w0SlhPtU3FddBPPHqY7oAeDzFMl
liyYNRmWb82QEwmWbw3xay31XCiKlgshyiB2+aygOx9l
Generated at Sat Mar 16 07:44:10 2024 by rpki-client on console-fra.rpki-client.org