Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/NdODHasltZwv3wZCBamGVK3VqcI.roa
File: NdODHasltZwv3wZCBamGVK3VqcI.roa (raw, json)
Hash identifier: LNZqtkc4mVZPTUdAfu4r835EW/0NMt9vjMbjPb0Z/oM=
Subject key identifier: 35:D3:83:1D:AB:25:B5:9C:2F:DF:06:42:05:A9:86:54:AD:D5:A9:C2
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01856E01F8AF597E79FEF66C1C34C3CEC50A
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/NdODHasltZwv3wZCBamGVK3VqcI.roa
Signing time: Sun 01 Jan 2023 15:45:00 +0000
ROA not before: Sun 01 Jan 2023 15:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 178.236.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 08:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f8:af:59:7e:79:fe:f6:6c:1c:34:c3:ce:c5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 15:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d3831dab25b59c2fdf064205a98654add5a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:03:bf:50:1f:bb:48:7c:7b:8a:ee:cf:ca:
5b:90:a4:24:d1:c0:c1:c2:74:84:e9:b7:ab:8b:ca:
cf:2b:2c:57:e7:c6:5e:7e:00:c9:bd:91:8d:86:8d:
74:e2:bd:6c:d8:25:5e:24:dd:cc:ca:13:63:84:f1:
c3:97:dc:8d:7f:f4:b0:5b:b1:1e:29:36:06:7b:52:
18:3a:17:b8:1a:e5:06:49:8c:1b:a4:e8:2b:c2:e6:
97:ef:e7:cd:58:cf:53:bf:50:57:e1:b7:41:7a:54:
df:75:5a:b2:5a:66:65:6e:0b:5c:d9:fc:94:0b:41:
3b:d0:d2:cc:05:35:d3:61:4c:21:9d:d4:15:7a:38:
e0:b9:6b:77:3c:3e:6c:8e:14:f3:ea:40:62:3e:58:
6b:5e:e5:2b:76:d0:f8:f2:66:c2:59:64:35:00:e4:
40:f5:42:3c:9e:60:33:ea:cc:22:a4:05:07:a6:03:
4f:dd:4c:fc:5c:79:ed:8a:94:83:b4:b7:4e:bd:88:
1b:79:cd:b5:c1:53:46:9c:02:99:11:a4:f0:6b:a5:
2e:17:3c:76:65:67:52:49:2c:a2:b0:20:74:45:09:
76:3d:90:9f:47:1d:b4:06:56:7a:7b:e0:1f:80:67:
b7:e0:a5:7b:14:89:b9:36:df:fc:ef:a1:96:90:a1:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:83:1D:AB:25:B5:9C:2F:DF:06:42:05:A9:86:54:AD:D5:A9:C2
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/NdODHasltZwv3wZCBamGVK3VqcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.227.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a2:f3:05:9f:86:a4:b1:4c:a2:02:bd:85:6c:ce:76:9e:ee:
0a:f8:08:62:fe:d0:01:00:03:a7:d7:a9:99:0b:34:22:c4:74:
bd:bf:42:4d:9f:02:4e:b8:b3:75:b4:2b:f9:c6:ac:bf:a7:fa:
b0:d7:36:1e:1a:88:aa:6a:64:a4:44:30:fb:03:9c:48:0a:1b:
c6:2f:00:f6:5a:d1:2f:e7:30:96:39:ed:84:97:4f:ed:39:1c:
8b:8f:36:45:4e:95:07:ff:fe:9e:c5:a5:3f:c1:01:36:59:5a:
d8:95:3c:b8:b8:bd:12:59:3a:91:5a:87:c6:ab:16:67:d5:17:
58:5a:87:59:c3:09:96:bf:61:f0:db:bf:83:22:d9:b2:39:98:
c4:59:65:d3:32:ea:c7:98:88:45:b0:15:df:55:0e:12:ec:ef:
24:96:58:e8:c4:03:87:95:57:88:41:1b:8d:4c:75:21:2e:8f:
8c:aa:65:f1:fa:6e:c6:2d:9c:aa:ee:8a:e2:2c:b8:b0:fd:46:
1c:70:15:1d:e7:53:80:f0:e1:15:de:b8:93:3a:c4:d8:aa:a6:
2b:ab:57:8e:34:02:55:f9:44:1d:84:66:c3:7b:f1:a1:16:c6:
5c:f7:d1:fa:c9:44:54:b9:8a:6c:90:ed:14:59:9d:79:fa:a9:
60:b5:4b:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAfivWX55/vZsHDTDzsUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjMwMTAxMTU0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWQzODMxZGFiMjViNTljMmZkZjA2NDIwNWE5ODY1NGFkZDVhOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUADv1Afu0h8e4ruz8pbkKQk0cDB
wnSE6beri8rPKyxX58ZefgDJvZGNho104r1s2CVeJN3MyhNjhPHDl9yNf/SwW7Ee
KTYGe1IYOhe4GuUGSYwbpOgrwuaX7+fNWM9Tv1BX4bdBelTfdVqyWmZlbgtc2fyU
C0E70NLMBTXTYUwhndQVejjguWt3PD5sjhTz6kBiPlhrXuUrdtD48mbCWWQ1AORA
9UI8nmAz6swipAUHpgNP3Uz8XHntipSDtLdOvYgbec21wVNGnAKZEaTwa6UuFzx2
ZWdSSSyisCB0RQl2PZCfRx20BlZ6e+AfgGe34KV7FIm5Nt/876GWkKHOowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXTgx2rJbWcL98GQgWphlSt1anCMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvTmRPREhhc2x0Wnd2M3daQ0JhbUdWSzNWcWNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzjMA0G
CSqGSIb3DQEBCwUAA4IBAQBwovMFn4aksUyiAr2FbM52nu4K+Ahi/tABAAOn16mZ
CzQixHS9v0JNnwJOuLN1tCv5xqy/p/qw1zYeGoiqamSkRDD7A5xIChvGLwD2WtEv
5zCWOe2El0/tORyLjzZFTpUH//6exaU/wQE2WVrYlTy4uL0SWTqRWofGqxZn1RdY
WodZwwmWv2Hw27+DItmyOZjEWWXTMurHmIhFsBXfVQ4S7O8klljoxAOHlVeIQRuN
THUhLo+MqmXx+m7GLZyq7oriLLiw/UYccBUd51OA8OEV3riTOsTYqqYrq1eONAJV
+UQdhGbDe/GhFsZc99H6yURUuYpskO0UWZ15+qlgtUu7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org