Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Cdno2vyC43FzH24ojsp3ms3i75U.roa
File: Cdno2vyC43FzH24ojsp3ms3i75U.roa (raw, json)
Hash identifier: 85JCh1MDfijCTRAURa3n2hvujhbi5KUURV0KBgUqfog=
Subject key identifier: 09:D9:E8:DA:FC:82:E3:71:73:1F:6E:28:8E:CA:77:9A:CD:E2:EF:95
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018CC8DF76DBAB631474E8B5769540346A91
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Cdno2vyC43FzH24ojsp3ms3i75U.roa
Signing time: Tue 02 Jan 2024 06:32:17 +0000
ROA not before: Tue 02 Jan 2024 06:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206003
IP address blocks: 178.236.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 08:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:76:db:ab:63:14:74:e8:b5:76:95:40:34:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09d9e8dafc82e371731f6e288eca779acde2ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:54:25:3b:a5:f2:48:df:7b:88:18:7e:9d:
ed:53:d1:b9:e1:22:4f:1e:4c:94:26:31:44:d4:2e:
4f:16:b6:15:7b:9e:7b:c8:ec:e5:f9:f0:d9:56:ff:
17:c1:0e:a4:db:5d:37:9e:77:01:bb:9d:bd:82:ae:
a6:88:e1:90:31:3c:50:53:a8:0e:84:95:ec:db:f8:
d2:76:cd:3e:23:e2:57:6c:5e:a9:d4:0c:94:dd:19:
a2:b1:15:72:04:c0:77:43:ff:c0:5d:c3:b1:85:11:
a6:73:0b:55:0d:13:af:4a:ee:4d:16:51:cb:a5:ba:
51:aa:99:64:2a:d1:11:58:f0:c0:c9:c8:bc:b2:a3:
ad:34:83:35:84:9b:fd:e9:0a:e6:cd:06:4f:1a:85:
e1:21:84:b6:47:ac:b1:b4:db:9a:f9:78:2e:68:08:
50:04:14:cd:8f:95:3b:c9:a4:f4:3f:09:89:36:a1:
39:b8:56:79:8b:e3:3a:01:de:a5:46:eb:f0:68:34:
f4:68:cb:1a:a7:18:f6:20:d7:ae:c6:56:52:4c:a7:
95:7d:c5:04:4e:52:f7:46:3a:db:20:2d:80:95:0a:
40:86:3d:88:3d:e3:81:e6:80:4b:b3:e0:76:de:9c:
3e:f0:8a:1a:5a:da:29:cb:eb:44:b4:6f:ae:e9:35:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:E8:DA:FC:82:E3:71:73:1F:6E:28:8E:CA:77:9A:CD:E2:EF:95
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Cdno2vyC43FzH24ojsp3ms3i75U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ed:33:98:45:ea:fb:3b:37:88:e9:49:33:13:1d:8d:f2:b1:
1b:17:16:44:e1:f0:ca:08:b7:f7:bb:fe:23:9f:f4:a7:e2:11:
fe:40:81:03:0b:df:eb:e5:2f:d7:b4:7c:5b:d9:bc:d9:ec:18:
71:3e:7e:f9:11:ad:9c:06:30:81:40:57:e8:c6:2d:c7:d4:30:
4c:e2:b6:dc:94:19:7b:36:49:60:ff:d7:12:61:7a:72:7a:b2:
91:ea:e6:8f:fb:07:6f:de:ee:d5:15:21:d1:72:3f:84:36:56:
e7:4d:40:3d:08:69:33:35:26:bf:06:98:90:15:32:1d:d4:94:
e4:9b:e7:af:f7:7d:2f:30:7f:33:a7:eb:67:03:69:14:42:bc:
8f:38:9b:95:66:5f:20:e5:83:9c:c6:9e:0e:9c:0e:ed:a0:05:
9d:5c:94:c6:33:41:c0:86:21:c9:61:93:41:92:a1:2a:c2:2e:
2e:63:64:63:7a:1c:6f:6f:45:f0:45:58:79:d8:d7:82:3a:8c:
86:39:49:f3:e2:f1:98:c7:32:57:4b:2a:1c:56:d9:28:de:d4:
71:44:27:bf:53:37:a9:16:fa:f4:c7:5b:ff:01:f9:ba:7c:94:
7a:af:28:a0:23:19:d8:74:97:ed:49:cb:99:61:0b:da:17:06:
02:14:88:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI33bbq2MUdOi1dpVANGqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjQwMTAyMDYzMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWQ5ZThkYWZjODJlMzcxNzMxZjZlMjg4ZWNhNzc5YWNkZTJlZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFtUJTul8kjfe4gYfp3tU9G54SJP
HkyUJjFE1C5PFrYVe557yOzl+fDZVv8XwQ6k2103nncBu529gq6miOGQMTxQU6gO
hJXs2/jSds0+I+JXbF6p1AyU3RmisRVyBMB3Q//AXcOxhRGmcwtVDROvSu5NFlHL
pbpRqplkKtERWPDAyci8sqOtNIM1hJv96QrmzQZPGoXhIYS2R6yxtNua+XguaAhQ
BBTNj5U7yaT0PwmJNqE5uFZ5i+M6Ad6lRuvwaDT0aMsapxj2INeuxlZSTKeVfcUE
TlL3RjrbIC2AlQpAhj2IPeOB5oBLs+B23pw+8IoaWtopy+tEtG+u6TVQbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnZ6Nr8guNxcx9uKI7Kd5rN4u+VMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvQ2RubzJ2eUM0M0Z6SDI0b2pzcDNtczNpNzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzjMA0G
CSqGSIb3DQEBCwUAA4IBAQBP7TOYRer7OzeI6UkzEx2N8rEbFxZE4fDKCLf3u/4j
n/Sn4hH+QIEDC9/r5S/XtHxb2bzZ7BhxPn75Ea2cBjCBQFfoxi3H1DBM4rbclBl7
Nklg/9cSYXpyerKR6uaP+wdv3u7VFSHRcj+ENlbnTUA9CGkzNSa/BpiQFTId1JTk
m+ev930vMH8zp+tnA2kUQryPOJuVZl8g5YOcxp4OnA7toAWdXJTGM0HAhiHJYZNB
kqEqwi4uY2Rjehxvb0XwRVh52NeCOoyGOUnz4vGYxzJXSyocVtko3tRxRCe/Uzep
Fvr0x1v/Afm6fJR6ryigIxnYdJftScuZYQvaFwYCFIiI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org