Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/rjvaUliuT1d4RnCV8gueiVSAhBY.roa
File: rjvaUliuT1d4RnCV8gueiVSAhBY.roa (raw, json)
Hash identifier: llflijx+pBh8nEK4sHlZJ+BmPd4xJT+SUC7TiuKb7KA=
Subject key identifier: AE:3B:DA:52:58:AE:4F:57:78:46:70:95:F2:0B:9E:89:54:80:84:16
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018CE6A4CAD19C973EC30FA4643B2D506D17
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/rjvaUliuT1d4RnCV8gueiVSAhBY.roa
Signing time: Mon 08 Jan 2024 01:16:48 +0000
ROA not before: Mon 08 Jan 2024 01:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 178.236.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 06:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:a4:ca:d1:9c:97:3e:c3:0f:a4:64:3b:2d:50:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 8 01:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae3bda5258ae4f5778467095f20b9e8954808416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:92:10:4b:09:95:63:67:93:19:50:3d:f3:
fd:ae:5d:82:fe:00:53:c8:d8:38:4f:43:81:b8:7f:
d8:50:dd:34:63:32:06:25:97:bd:6f:0f:e4:a3:f6:
9b:32:24:65:ed:c5:60:30:c4:02:98:a2:b2:82:b9:
ae:2e:31:2f:4c:7f:0b:0b:a8:46:cc:e5:be:8b:b4:
88:3a:71:47:fa:29:15:3a:72:fa:74:05:1a:5f:55:
da:ae:4c:dc:67:60:a0:3c:3c:e2:ab:dc:94:ef:6a:
1a:5f:31:2d:49:ef:b2:c2:1c:67:53:f4:db:9a:e6:
0d:d0:18:05:9e:8b:5b:db:73:20:c2:31:a7:17:df:
f1:d1:bc:c2:24:b5:ca:74:33:91:29:0b:43:dc:b8:
55:c1:63:72:56:a9:86:2f:34:a5:6f:ce:e9:83:c0:
36:9d:1c:03:4e:8a:35:3d:1f:97:a4:1a:c9:3b:37:
08:e3:04:ce:c3:3d:1c:29:64:95:e4:42:5a:a9:1d:
51:18:1c:aa:07:b9:55:c0:05:f9:78:08:ce:30:51:
05:6a:b2:cb:37:e7:c9:be:c2:6b:5b:da:9b:74:fe:
e9:9b:47:91:eb:62:92:df:e2:44:21:7f:4d:08:f8:
37:0e:e4:a1:21:c5:9e:3d:1d:20:d8:8a:87:fc:60:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:DA:52:58:AE:4F:57:78:46:70:95:F2:0B:9E:89:54:80:84:16
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/rjvaUliuT1d4RnCV8gueiVSAhBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fe:0a:08:33:5c:e6:50:6b:2c:7b:b9:ce:d4:2f:e6:20:9f:
d5:ba:27:07:ba:5f:6d:e3:42:76:e2:ae:26:f6:7d:25:d2:47:
07:41:a0:e3:e1:a0:1e:ff:7d:b2:72:f1:7d:3f:a9:e4:99:f8:
c8:97:5f:f4:53:3d:1d:57:9b:c2:8f:7a:ea:4c:4d:13:2b:56:
fd:af:05:ba:de:fd:44:2c:8f:62:e3:e3:fb:af:ca:c1:83:bd:
9f:51:2f:d3:e9:82:55:ff:c9:fe:51:59:b7:17:0d:a1:09:52:
b7:28:da:2a:ae:0d:06:f5:3a:11:e1:b2:89:18:f1:86:e9:58:
cd:55:1f:7e:52:4e:aa:b8:6d:88:d8:52:a9:10:c5:7d:a0:f6:
1e:4d:2f:9f:dc:60:24:24:c4:cd:53:41:15:2d:af:95:a3:51:
fb:29:b4:f3:7d:a3:a0:08:1f:24:d6:41:e2:ec:2d:0f:09:7c:
30:99:d5:b9:f4:6b:60:56:10:b4:44:ab:d1:fd:c9:47:49:99:
73:65:15:99:de:9f:60:98:f7:f9:68:3b:a5:e9:dd:75:30:7c:
f7:bc:45:aa:e4:b0:4b:b4:53:fe:61:a3:4f:96:50:21:d3:53:
88:0b:5b:94:67:5e:8f:5f:93:58:dd:bf:0b:ef:88:e1:e8:b9:
c2:c3:f3:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzmpMrRnJc+ww+kZDstUG0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjQwMTA4MDExNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTNiZGE1MjU4YWU0ZjU3Nzg0NjcwOTVmMjBiOWU4OTU0ODA4NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHiSEEsJlWNnkxlQPfP9rl2C/gBT
yNg4T0OBuH/YUN00YzIGJZe9bw/ko/abMiRl7cVgMMQCmKKygrmuLjEvTH8LC6hG
zOW+i7SIOnFH+ikVOnL6dAUaX1XarkzcZ2CgPDziq9yU72oaXzEtSe+ywhxnU/Tb
muYN0BgFnotb23MgwjGnF9/x0bzCJLXKdDORKQtD3LhVwWNyVqmGLzSlb87pg8A2
nRwDToo1PR+XpBrJOzcI4wTOwz0cKWSV5EJaqR1RGByqB7lVwAX5eAjOMFEFarLL
N+fJvsJrW9qbdP7pm0eR62KS3+JEIX9NCPg3DuShIcWePR0g2IqH/GAomQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK472lJYrk9XeEZwlfILnolUgIQWMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvcmp2YVVsaXVUMWQ0Um5DVjhndWVpVlNBaEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuztMA0G
CSqGSIb3DQEBCwUAA4IBAQAe/goIM1zmUGsse7nO1C/mIJ/VuicHul9t40J24q4m
9n0l0kcHQaDj4aAe/32ycvF9P6nkmfjIl1/0Uz0dV5vCj3rqTE0TK1b9rwW63v1E
LI9i4+P7r8rBg72fUS/T6YJV/8n+UVm3Fw2hCVK3KNoqrg0G9ToR4bKJGPGG6VjN
VR9+Uk6quG2I2FKpEMV9oPYeTS+f3GAkJMTNU0EVLa+Vo1H7KbTzfaOgCB8k1kHi
7C0PCXwwmdW59GtgVhC0RKvR/clHSZlzZRWZ3p9gmPf5aDul6d11MHz3vEWq5LBL
tFP+YaNPllAh01OIC1uUZ16PX5NY3b8L74jh6LnCw/P5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org