Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AWjfk32UU0JFnY41zqNMsEUiflQ.roa
File: AWjfk32UU0JFnY41zqNMsEUiflQ.roa (raw, json)
Hash identifier: AjsgH7sI8iuU3siTlyF3U/hpAozHUzRnwBeFIQzAJKE=
Subject key identifier: 01:68:DF:93:7D:94:53:42:45:9D:8E:35:CE:A3:4C:B0:45:22:7E:54
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0189301468F803E077960608ADEE0BED08DB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AWjfk32UU0JFnY41zqNMsEUiflQ.roa
Signing time: Fri 07 Jul 2023 11:19:51 +0000
ROA not before: Fri 07 Jul 2023 11:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207898
IP address blocks: 178.253.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 15:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:14:68:f8:03:e0:77:96:06:08:ad:ee:0b:ed:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 7 11:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0168df937d945342459d8e35cea34cb045227e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:c6:a3:17:bf:87:91:54:57:98:8e:55:bd:
d4:19:f9:c6:c0:b1:cd:bc:d3:6b:72:61:fe:bf:19:
23:f7:c9:d5:7b:fc:2e:55:89:22:a6:9e:0f:6e:2d:
8f:1a:ca:bf:53:77:83:32:a0:9e:88:cf:29:c1:04:
82:ee:a0:2e:44:26:e8:b7:76:c0:89:f8:37:cb:ad:
78:8a:dd:44:32:b9:a4:95:27:b8:a2:84:ad:e9:26:
16:e0:96:59:dd:86:29:18:d6:fe:cc:39:7b:91:92:
32:57:76:84:8d:b8:3f:cc:25:aa:f8:97:50:00:c7:
61:f8:15:6f:3f:3a:b9:5e:5f:97:c9:7d:c4:83:02:
e8:46:0d:dc:28:3e:fc:6e:2b:fb:71:14:20:ac:92:
a6:c4:b2:61:7b:d6:c5:51:fa:ed:b2:6f:92:08:64:
32:aa:d9:24:9a:e0:1a:0e:71:0e:fd:81:5c:31:42:
3b:e7:87:54:9f:46:ff:42:ab:3c:d5:f9:23:bb:b6:
ac:37:78:67:5e:47:7b:e2:61:19:40:7f:2c:dc:29:
f4:a5:3c:29:84:f4:e0:c1:68:51:03:8c:47:f2:12:
8b:3f:21:10:46:cd:7f:6c:e0:d5:51:a9:67:48:5c:
f7:4b:c5:3a:96:8c:c7:fb:b3:6b:4c:53:d1:3b:4b:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:68:DF:93:7D:94:53:42:45:9D:8E:35:CE:A3:4C:B0:45:22:7E:54
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AWjfk32UU0JFnY41zqNMsEUiflQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:91:ed:58:1c:a3:d8:75:8e:25:8f:75:02:ed:30:c2:38:17:
41:ea:80:56:54:a5:14:5e:8b:f0:4c:77:a6:9d:14:fc:c9:48:
d5:58:0e:b4:25:8b:26:b7:0f:86:c2:8a:ff:a3:92:c3:d4:2d:
6a:f4:38:50:38:bb:36:24:96:f6:85:dc:05:1a:d5:f8:92:51:
39:7e:f1:55:19:d3:49:0e:14:36:2e:d2:4b:87:6d:5f:4a:a8:
90:9e:ee:01:60:dd:95:46:05:1c:91:87:55:e9:18:5c:06:f0:
64:38:6d:3f:54:a9:d1:9d:16:3f:30:58:1a:9c:18:a8:13:3d:
1c:f9:58:45:51:ed:07:a8:52:75:46:5d:ae:81:30:d3:00:26:
55:87:86:c7:f1:0c:06:59:49:a7:a8:f2:6c:a4:64:83:f8:03:
8f:66:59:79:c1:8a:21:2e:04:f9:3d:46:f2:6a:d1:49:29:77:
9e:86:1e:a8:de:af:f6:b5:ec:dc:02:97:22:71:8e:a8:72:8b:
21:92:55:e5:d4:a3:51:e1:bc:6b:ba:42:5e:9f:54:12:95:58:
04:fd:61:f9:1d:2d:57:55:dd:31:80:bf:3f:4d:eb:59:9b:cf:
57:06:cb:26:cc:e2:27:07:fd:a7:2e:39:a5:84:b1:5a:7c:87:
5c:70:f8:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkwFGj4A+B3lgYIre4L7QjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNzA3MTExOTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTY4ZGY5MzdkOTQ1MzQyNDU5ZDhlMzVjZWEzNGNiMDQ1MjI3ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmznGoxe/h5FUV5iOVb3UGfnGwLHN
vNNrcmH+vxkj98nVe/wuVYkipp4Pbi2PGsq/U3eDMqCeiM8pwQSC7qAuRCbot3bA
ifg3y614it1EMrmklSe4ooSt6SYW4JZZ3YYpGNb+zDl7kZIyV3aEjbg/zCWq+JdQ
AMdh+BVvPzq5Xl+XyX3EgwLoRg3cKD78biv7cRQgrJKmxLJhe9bFUfrtsm+SCGQy
qtkkmuAaDnEO/YFcMUI754dUn0b/Qqs81fkju7asN3hnXkd74mEZQH8s3Cn0pTwp
hPTgwWhRA4xH8hKLPyEQRs1/bODVUalnSFz3S8U6lozH+7NrTFPRO0tbYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFo35N9lFNCRZ2ONc6jTLBFIn5UMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvQVdqZmszMlVVMEpGblk0MXpxTk1zRVVpZmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv0gMA0G
CSqGSIb3DQEBCwUAA4IBAQBuke1YHKPYdY4lj3UC7TDCOBdB6oBWVKUUXovwTHem
nRT8yUjVWA60JYsmtw+Gwor/o5LD1C1q9DhQOLs2JJb2hdwFGtX4klE5fvFVGdNJ
DhQ2LtJLh21fSqiQnu4BYN2VRgUckYdV6RhcBvBkOG0/VKnRnRY/MFganBioEz0c
+VhFUe0HqFJ1Rl2ugTDTACZVh4bH8QwGWUmnqPJspGSD+AOPZll5wYohLgT5PUby
atFJKXeehh6o3q/2tezcApcicY6ocoshklXl1KNR4bxrukJen1QSlVgE/WH5HS1X
Vd0xgL8/TetZm89XBssmzOInB/2nLjmlhLFafIdccPiu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org