Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/95eU2ZiXkpyygXfMLwE7GeL9oD0.roa
File: 95eU2ZiXkpyygXfMLwE7GeL9oD0.roa (raw, json)
Hash identifier: 8px2INi5aGkvdN+Gj4awUcOvENggoGIyATxSzhkBIws=
Subject key identifier: F7:97:94:D9:98:97:92:9C:B2:81:77:CC:2F:01:3B:19:E2:FD:A0:3D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185956ACAF6D97FAD92166E49F7960A1C55
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/95eU2ZiXkpyygXfMLwE7GeL9oD0.roa
Signing time: Mon 09 Jan 2023 07:24:41 +0000
ROA not before: Mon 09 Jan 2023 07:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62853
IP address blocks: 178.253.26.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 21:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:6a:ca:f6:d9:7f:ad:92:16:6e:49:f7:96:0a:1c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 9 07:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f79794d99897929cb28177cc2f013b19e2fda03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:00:d0:7a:c6:14:52:23:e2:3a:b1:bb:c4:
aa:04:ad:28:b2:3d:33:55:18:7e:fc:d8:1c:96:89:
21:e2:22:24:79:a3:d8:c0:7c:8a:38:1c:27:43:f3:
6e:e8:bd:7a:c3:43:33:e6:f3:39:aa:45:17:d3:8b:
2a:93:da:17:59:92:a1:6c:ac:4a:49:07:1b:7f:59:
c1:50:2e:c8:64:e2:54:96:4d:f9:a2:c7:34:7f:fc:
3e:40:1c:9a:b4:aa:e9:b1:ef:8e:17:f7:53:e8:40:
ab:b7:44:d2:3e:d2:14:02:c4:43:37:c1:37:7d:6f:
68:40:dd:36:8e:ca:a7:b1:a7:82:ee:c3:49:01:88:
47:99:70:8d:bd:7d:70:6a:2c:51:d2:60:9b:58:6f:
59:e5:e9:30:ac:c0:cb:a9:d1:d4:dd:6b:89:51:45:
8c:db:39:ee:61:0a:98:86:df:5c:d9:0b:00:49:64:
b2:e1:3a:35:73:b5:ea:98:0e:a7:c7:7e:c7:1c:72:
f0:89:51:aa:5b:4d:09:2e:48:aa:fa:26:bb:ba:e4:
1c:5a:d9:27:ab:16:b6:59:25:db:3a:5f:57:2a:2a:
6e:0c:6b:71:7d:db:f3:bc:dd:6a:03:8d:f1:89:34:
88:e6:8a:c8:c3:3c:23:3e:2b:d0:30:db:ce:c3:30:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:94:D9:98:97:92:9C:B2:81:77:CC:2F:01:3B:19:E2:FD:A0:3D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/95eU2ZiXkpyygXfMLwE7GeL9oD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.26.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:50:f5:5e:21:0e:31:a8:61:4a:1d:07:e7:05:32:e9:28:ab:
6d:e0:81:52:32:5b:f3:01:db:27:9e:47:b3:33:a6:76:46:65:
61:93:15:10:6a:e1:24:1b:42:65:f6:83:f3:ea:b9:f5:77:54:
dc:41:79:0a:b8:b1:9c:09:71:e5:73:1a:54:a0:4f:9e:6d:88:
5d:f0:1d:e5:63:ad:67:f1:c9:9f:ed:7f:1b:03:c4:28:a8:a7:
29:0c:64:83:59:c9:5e:27:7b:6e:e7:e9:6d:73:93:0b:37:9d:
42:cf:82:5d:6d:77:0b:d7:ee:29:57:e3:d3:ae:00:c1:35:0d:
d3:89:9e:bf:42:93:d7:06:b1:ab:0e:89:f3:88:28:f3:3d:44:
3a:33:74:e7:b9:d2:40:cf:ba:fa:40:0a:e4:a4:21:4c:29:77:
67:e0:e7:ee:49:2d:3e:0e:fa:ba:00:9a:5b:de:f6:e0:1b:1f:
e4:d4:9a:ff:da:86:18:34:a8:72:0d:b4:5e:fe:57:37:f0:07:
22:49:63:99:b1:b8:36:8d:1a:21:5e:75:f6:98:c2:66:0d:9c:
96:a7:86:46:82:c6:59:63:df:89:12:31:6b:ad:76:86:76:a4:
92:fe:66:fd:23:b4:78:f6:d0:5c:c7:b0:35:89:a4:8d:e9:c7:
71:db:23:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWVasr22X+tkhZuSfeWChxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwMTA5MDcyNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzk3OTRkOTk4OTc5MjljYjI4MTc3Y2MyZjAxM2IxOWUyZmRhMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz8A0HrGFFIj4jqxu8SqBK0osj0z
VRh+/Ngclokh4iIkeaPYwHyKOBwnQ/Nu6L16w0Mz5vM5qkUX04sqk9oXWZKhbKxK
SQcbf1nBUC7IZOJUlk35osc0f/w+QByatKrpse+OF/dT6ECrt0TSPtIUAsRDN8E3
fW9oQN02jsqnsaeC7sNJAYhHmXCNvX1waixR0mCbWG9Z5ekwrMDLqdHU3WuJUUWM
2znuYQqYht9c2QsASWSy4To1c7XqmA6nx37HHHLwiVGqW00JLkiq+ia7uuQcWtkn
qxa2WSXbOl9XKipuDGtxfdvzvN1qA43xiTSI5orIwzwjPivQMNvOwzC/4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPeXlNmYl5KcsoF3zC8BOxni/aA9MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvOTVlVTJaaVhrcHl5Z1hmTUx3RTdHZUw5b0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsv0aAwQB
sv0sMA0GCSqGSIb3DQEBCwUAA4IBAQBuUPVeIQ4xqGFKHQfnBTLpKKtt4IFSMlvz
AdsnnkezM6Z2RmVhkxUQauEkG0Jl9oPz6rn1d1TcQXkKuLGcCXHlcxpUoE+ebYhd
8B3lY61n8cmf7X8bA8QoqKcpDGSDWcleJ3tu5+ltc5MLN51Cz4JdbXcL1+4pV+PT
rgDBNQ3TiZ6/QpPXBrGrDonziCjzPUQ6M3TnudJAz7r6QArkpCFMKXdn4OfuSS0+
Dvq6AJpb3vbgGx/k1Jr/2oYYNKhyDbRe/lc38AciSWOZsbg2jRohXnX2mMJmDZyW
p4ZGgsZZY9+JEjFrrXaGdqSS/mb9I7R49tBcx7A1iaSN6cdx2yOo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org