Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Ol80CSfr1S6jOogcy-JWoo2DUyc.roa
File: Ol80CSfr1S6jOogcy-JWoo2DUyc.roa (raw, json)
Hash identifier: e6lYuHpTvQROptCpHWzyxgposlNxE5fLauKu7d+vf4g=
Subject key identifier: 3A:5F:34:09:27:EB:D5:2E:A3:3A:88:1C:CB:E2:56:A2:8D:83:53:27
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0186F283C4706E392BA030095E774E10D3EE
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Ol80CSfr1S6jOogcy-JWoo2DUyc.roa
Signing time: Sat 18 Mar 2023 02:19:27 +0000
ROA not before: Sat 18 Mar 2023 02:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 178.236.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:83:c4:70:6e:39:2b:a0:30:09:5e:77:4e:10:d3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 18 02:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a5f340927ebd52ea33a881ccbe256a28d835327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:67:a1:d8:cf:00:04:35:0a:36:a8:d5:60:
ae:ff:ad:b7:4b:ad:9d:84:10:3d:14:f3:53:47:55:
01:24:85:cf:41:c7:8b:27:54:62:68:9e:fd:44:25:
73:80:3f:6f:4b:4d:90:5d:ee:61:28:81:2a:78:7a:
a4:ed:aa:1a:f7:7d:6d:6e:7b:03:cf:67:d4:26:48:
da:23:3c:5b:1b:93:6a:ec:07:5a:40:01:6d:d8:dc:
c7:4c:5e:f4:38:62:51:fb:4e:fc:a7:5e:94:96:d5:
03:ff:80:ff:12:c0:57:7c:ce:e9:25:9c:53:30:18:
e2:10:65:0a:df:03:0b:d4:b6:60:58:fa:fc:2b:2e:
db:a4:6a:f4:4b:e9:3b:3f:55:06:77:03:ed:d5:9b:
b7:09:ce:bb:96:55:a6:d9:96:b5:53:4b:24:4e:87:
77:74:c5:1b:dc:65:e5:b7:a7:f6:fc:a6:da:16:ff:
f3:3c:8e:7c:4a:f6:6d:13:ea:7e:b4:9e:b5:d3:29:
e5:60:a3:a3:c7:ab:95:b9:bb:be:da:b5:0a:a0:7e:
86:d0:24:33:40:e1:96:da:21:0d:76:32:02:7b:19:
18:8f:a8:d6:94:4e:22:d8:72:01:69:b6:01:ec:57:
62:db:11:f6:fc:9d:70:e9:e3:1e:b2:61:f7:d5:99:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:34:09:27:EB:D5:2E:A3:3A:88:1C:CB:E2:56:A2:8D:83:53:27
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Ol80CSfr1S6jOogcy-JWoo2DUyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d7:57:25:4a:8a:e5:0f:f2:d6:b3:1b:65:d5:f2:2e:bd:f3:
89:f7:95:90:36:0c:dd:a4:2b:21:3a:52:83:17:72:c4:26:ab:
5d:c0:43:20:e0:a0:cb:71:07:73:44:42:1c:9c:61:a0:83:ad:
58:d0:b1:b1:0e:fc:25:cc:e1:c4:6c:52:75:2d:7d:7c:21:fa:
07:21:51:f3:8f:08:81:e9:63:ef:41:e9:ee:7d:b5:c7:5b:7e:
8f:bb:11:9c:e5:11:b5:9b:27:5b:39:b6:2a:35:fd:26:83:43:
96:c6:d5:34:94:6f:fb:6a:28:30:04:d5:24:00:42:b9:99:bc:
49:89:8b:5d:db:80:cb:a3:60:e8:b4:15:58:6a:cf:11:11:7a:
f7:39:a3:23:42:cb:49:80:b8:bf:54:d3:84:a7:d7:b0:08:0e:
03:6f:09:99:e2:16:8e:12:e6:51:1c:a9:16:63:77:14:1e:d6:
01:fc:e3:49:95:0c:a3:e2:fd:d8:84:08:c8:96:03:65:16:5e:
bf:07:ca:25:2d:96:7b:47:8e:61:2d:d2:b3:61:8b:00:9e:16:
5b:1e:5e:4a:ee:ba:39:12:59:2c:82:b4:5c:6e:1a:01:69:1c:
3f:c9:98:c1:96:74:9c:e6:45:1a:0e:3d:2d:e5:92:78:ae:0f:
d5:06:4d:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbyg8RwbjkroDAJXndOENPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjMwMzE4MDIxOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTVmMzQwOTI3ZWJkNTJlYTMzYTg4MWNjYmUyNTZhMjhkODM1MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sxnodjPAAQ1Cjao1WCu/623S62d
hBA9FPNTR1UBJIXPQceLJ1RiaJ79RCVzgD9vS02QXe5hKIEqeHqk7aoa931tbnsD
z2fUJkjaIzxbG5Nq7AdaQAFt2NzHTF70OGJR+078p16UltUD/4D/EsBXfM7pJZxT
MBjiEGUK3wML1LZgWPr8Ky7bpGr0S+k7P1UGdwPt1Zu3Cc67llWm2Za1U0skTod3
dMUb3GXlt6f2/KbaFv/zPI58SvZtE+p+tJ610ynlYKOjx6uVubu+2rUKoH6G0CQz
QOGW2iENdjICexkYj6jWlE4i2HIBabYB7Fdi2xH2/J1w6eMesmH31ZkpBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpfNAkn69UuozqIHMviVqKNg1MnMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvT2w4MENTZnIxUzZqT29nY3ktSldvbzJEVXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuziMA0G
CSqGSIb3DQEBCwUAA4IBAQAa11clSorlD/LWsxtl1fIuvfOJ95WQNgzdpCshOlKD
F3LEJqtdwEMg4KDLcQdzREIcnGGgg61Y0LGxDvwlzOHEbFJ1LX18IfoHIVHzjwiB
6WPvQenufbXHW36PuxGc5RG1mydbObYqNf0mg0OWxtU0lG/7aigwBNUkAEK5mbxJ
iYtd24DLo2DotBVYas8REXr3OaMjQstJgLi/VNOEp9ewCA4DbwmZ4haOEuZRHKkW
Y3cUHtYB/ONJlQyj4v3YhAjIlgNlFl6/B8olLZZ7R45hLdKzYYsAnhZbHl5K7ro5
ElksgrRcbhoBaRw/yZjBlnSc5kUaDj0t5ZJ4rg/VBk03
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:02 2024 by rpki-client on console-ams.rpki-client.org