Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/Cgklrlc_o1PYSmJNdWx0UHmF_0I.roa
File: Cgklrlc_o1PYSmJNdWx0UHmF_0I.roa (raw, json)
Hash identifier: 1fj03rknPpuRK+DLOft9PkXXw03H9T3QOH+pzs3GMEE=
Subject key identifier: 0A:09:25:AE:57:3F:A3:53:D8:4A:62:4D:75:6C:74:50:79:85:FF:42
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01856E6FDFB071FF70674BA258F6751B6BDF
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/Cgklrlc_o1PYSmJNdWx0UHmF_0I.roa
Signing time: Sun 01 Jan 2023 17:45:03 +0000
ROA not before: Sun 01 Jan 2023 17:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56433
IP address blocks: 178.54.3.0/24 maxlen: 24
178.54.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:df:b0:71:ff:70:67:4b:a2:58:f6:75:1b:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jan 1 17:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a0925ae573fa353d84a624d756c74507985ff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:41:c5:72:8f:40:e3:9f:9b:e4:38:1b:a3:ab:
85:ac:a2:83:73:e0:52:a0:40:df:8f:b5:2f:79:1c:
ea:f7:f5:06:6b:7c:3d:d5:bf:9c:63:3e:17:8d:69:
3a:e0:35:6c:dc:95:81:f3:60:3d:47:21:df:04:6b:
a9:5f:d2:5a:24:f9:24:22:d5:89:a1:d8:de:3c:b9:
b4:69:e5:9b:5f:06:39:15:c5:50:55:e1:fe:c3:be:
b1:b6:16:9f:33:c3:d1:ae:c6:2b:21:46:5a:2e:8a:
2a:fb:18:9f:98:42:76:ed:d6:d0:86:32:a9:8f:c6:
cf:af:bf:f1:1c:7b:aa:19:4c:85:14:17:83:da:1e:
bd:c6:2f:26:cc:f9:f8:9f:5b:84:03:f5:28:c6:02:
9f:12:df:ba:39:20:95:a9:ca:71:23:7b:f4:fe:b3:
ba:4a:1f:6a:da:57:44:a5:e2:62:ce:d6:eb:37:29:
9e:f8:26:fb:e9:4c:30:12:77:f3:a0:73:17:ca:2b:
be:6d:35:8f:c0:9e:98:37:ba:c2:6e:ee:3d:ae:d2:
93:7c:08:31:f2:0a:6f:42:a3:e8:c2:60:be:b9:e6:
1e:91:8d:09:fd:84:0f:f3:f2:94:24:00:ef:c8:ce:
bc:d5:58:95:23:d6:1a:80:b8:f1:12:80:c1:35:3b:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:25:AE:57:3F:A3:53:D8:4A:62:4D:75:6C:74:50:79:85:FF:42
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/Cgklrlc_o1PYSmJNdWx0UHmF_0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.54.3.0/24
178.54.124.0/22
Signature Algorithm: sha256WithRSAEncryption
78:8f:39:c2:f3:d5:63:f4:3f:df:e1:3c:6d:20:03:56:2a:b9:
9f:0f:b7:c9:99:04:10:69:73:39:68:2e:d3:70:5c:61:9e:85:
65:9e:cc:e4:b8:ae:3e:ab:e8:b5:62:60:43:8b:f5:d0:69:71:
ea:71:84:b7:ba:74:5e:aa:e8:31:62:e9:d0:7c:92:0d:9b:ac:
64:9e:b5:04:e1:34:c8:bc:4b:22:60:b9:fc:fa:a9:4e:1b:84:
46:77:87:9d:f3:01:77:9d:80:a4:57:5b:77:91:53:72:74:39:
68:42:f8:9a:90:a6:62:20:c7:5b:83:64:d8:8f:13:b5:3d:92:
d7:ad:f0:50:96:3c:d9:a2:ec:84:02:f7:4d:ca:8e:c6:49:ca:
8d:16:4b:8e:ef:b9:19:1e:24:0a:1c:d3:fd:ca:18:8a:cd:7b:
14:e0:00:ef:f2:34:4f:6d:08:e5:3d:4f:ac:6e:66:4c:ed:62:
fc:97:03:bd:2f:c9:66:bd:c7:3a:9e:71:05:0d:ec:eb:7d:2f:
c0:d9:c1:cc:02:a4:ab:87:ea:e0:7e:1c:78:19:48:30:0d:08:
65:2f:75:44:92:89:18:bc:9c:6f:9e:ca:4a:31:ee:b5:d9:2a:
69:e3:21:a0:39:9f:a7:21:f8:cd:f8:3e:57:80:8f:62:a2:2b:
ef:58:97:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVub9+wcf9wZ0uiWPZ1G2vfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjMwMTAxMTc0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTA5MjVhZTU3M2ZhMzUzZDg0YTYyNGQ3NTZjNzQ1MDc5ODVmZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkHFco9A45+b5Dgbo6uFrKKDc+BS
oEDfj7UveRzq9/UGa3w91b+cYz4XjWk64DVs3JWB82A9RyHfBGupX9JaJPkkItWJ
odjePLm0aeWbXwY5FcVQVeH+w76xthafM8PRrsYrIUZaLooq+xifmEJ27dbQhjKp
j8bPr7/xHHuqGUyFFBeD2h69xi8mzPn4n1uEA/UoxgKfEt+6OSCVqcpxI3v0/rO6
Sh9q2ldEpeJiztbrNyme+Cb76UwwEnfzoHMXyiu+bTWPwJ6YN7rCbu49rtKTfAgx
8gpvQqPowmC+ueYekY0J/YQP8/KUJADvyM681ViVI9YagLjxEoDBNTtCBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAoJJa5XP6NT2EpiTXVsdFB5hf9CMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvQ2drbHJsY19vMVBZU21KTmRXeDBVSG1GXzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsjYDAwQC
sjZ8MA0GCSqGSIb3DQEBCwUAA4IBAQB4jznC89Vj9D/f4TxtIANWKrmfD7fJmQQQ
aXM5aC7TcFxhnoVlnszkuK4+q+i1YmBDi/XQaXHqcYS3unRequgxYunQfJINm6xk
nrUE4TTIvEsiYLn8+qlOG4RGd4ed8wF3nYCkV1t3kVNydDloQviakKZiIMdbg2TY
jxO1PZLXrfBQljzZouyEAvdNyo7GScqNFkuO77kZHiQKHNP9yhiKzXsU4ADv8jRP
bQjlPU+sbmZM7WL8lwO9L8lmvcc6nnEFDezrfS/A2cHMAqSrh+rgfhx4GUgwDQhl
L3VEkokYvJxvnspKMe612Spp4yGgOZ+nIfjN+D5XgI9ioivvWJdZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:19 2024 by rpki-client on console-fra.rpki-client.org