Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZYE0ASDEclT4Kh--x_UqvEWSMVc.roa
File: ZYE0ASDEclT4Kh--x_UqvEWSMVc.roa (raw, json)
Hash identifier: gHqmJoVCc6OYIVh0Jg5Kej7OaSkLlWcAWjJdamgMO6g=
Subject key identifier: 65:81:34:01:20:C4:72:54:F8:2A:1F:BE:C7:F5:2A:BC:45:92:31:57
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CE468D03302DC51DBB6673172F4E6
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZYE0ASDEclT4Kh--x_UqvEWSMVc.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 178.253.12.0/24 maxlen: 24
178.253.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e4:68:d0:33:02:dc:51:db:b6:67:31:72:f4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6581340120c47254f82a1fbec7f52abc45923157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:bf:80:a8:e2:e5:c3:85:e6:2d:16:95:75:
d8:35:4f:2b:98:e0:da:f3:ed:5b:5e:d7:ba:05:1e:
91:fb:9d:8d:f1:45:84:93:b3:5a:80:d4:5c:62:1b:
10:5e:a8:60:0e:fa:83:dd:88:fb:fe:0a:18:c1:f6:
d9:34:69:c4:80:34:60:fc:44:79:25:84:67:39:94:
f8:f2:ac:1c:68:43:28:1d:cd:e6:8a:98:48:63:ba:
38:ff:64:b3:91:aa:cb:2e:38:68:c6:a4:f4:b6:9c:
be:2d:b4:37:77:3d:80:01:ef:1c:b5:92:a9:38:7b:
3b:60:8e:66:26:c4:f1:de:09:6c:f1:fe:a4:02:17:
10:80:05:bb:ab:58:db:f1:6b:91:81:8f:b3:b6:8d:
d5:b2:e0:c8:d0:e9:a9:2a:5a:99:ed:fe:e8:66:53:
44:a9:98:1f:fa:58:21:1b:f5:75:eb:d0:8f:16:1f:
67:0d:ae:94:21:9e:59:06:f9:f4:a9:66:0c:61:83:
49:2c:a8:a3:d2:8d:d0:1c:0c:e4:63:b4:20:5f:08:
ab:52:c3:6e:19:96:2d:fb:fe:f9:96:95:b2:6e:09:
57:7b:90:1a:e6:d3:5f:57:55:d5:3d:52:e2:57:e9:
bf:44:c5:04:8b:76:13:3b:00:7e:bc:89:cd:58:dd:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:34:01:20:C4:72:54:F8:2A:1F:BE:C7:F5:2A:BC:45:92:31:57
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZYE0ASDEclT4Kh--x_UqvEWSMVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:98:12:53:55:e0:b3:14:c0:23:d3:fa:34:e1:32:07:07:1c:
a7:c1:c6:a1:ae:d2:17:b5:a7:f5:20:7c:2a:d3:0f:40:62:74:
35:c1:cd:03:11:d1:7b:2f:84:9b:62:73:0e:d4:8f:c5:91:66:
f0:30:49:2f:3d:d2:3a:63:b6:97:83:74:ce:73:81:98:72:24:
2f:dd:6d:37:9c:8f:75:40:ac:f5:00:7a:e9:24:81:8f:9e:bb:
5d:fb:9a:78:16:db:a2:ee:55:03:68:5f:b5:3f:bc:2e:84:d3:
36:14:12:d6:a4:38:81:89:a3:32:4f:89:d1:c1:7c:6b:02:11:
74:c1:f7:da:04:1b:9c:7f:1a:ad:47:59:8b:2a:34:af:21:69:
ea:50:4f:1b:25:ec:1a:e5:00:5b:68:21:b3:f3:b9:d2:8c:ab:
39:31:24:4a:3c:12:28:bd:d9:41:69:37:75:b8:af:60:44:46:
cf:5d:1f:df:36:d7:31:27:f1:96:1e:e0:25:a9:d7:f8:1f:12:
69:92:8c:b8:a9:e8:f6:2a:de:02:8e:f0:19:87:17:cd:e0:d6:
b8:57:b2:84:38:3c:d6:3f:8c:5b:c9:af:a0:e3:18:3c:a3:f7:
4a:da:9c:10:cc:fd:4f:4a:5c:63:d8:3d:d3:d5:b5:14:30:79:
9d:ab:e5:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjORo0DMC3FHbtmcxcvTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwMTAyMDMzNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTgxMzQwMTIwYzQ3MjU0ZjgyYTFmYmVjN2Y1MmFiYzQ1OTIzMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsq/gKji5cOF5i0WlXXYNU8rmODa
8+1bXte6BR6R+52N8UWEk7NagNRcYhsQXqhgDvqD3Yj7/goYwfbZNGnEgDRg/ER5
JYRnOZT48qwcaEMoHc3miphIY7o4/2SzkarLLjhoxqT0tpy+LbQ3dz2AAe8ctZKp
OHs7YI5mJsTx3gls8f6kAhcQgAW7q1jb8WuRgY+zto3VsuDI0OmpKlqZ7f7oZlNE
qZgf+lghG/V169CPFh9nDa6UIZ5ZBvn0qWYMYYNJLKij0o3QHAzkY7QgXwirUsNu
GZYt+/75lpWybglXe5Aa5tNfV1XVPVLiV+m/RMUEi3YTOwB+vInNWN11UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWBNAEgxHJU+Cofvsf1KrxFkjFXMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvWllFMEFTREVjbFQ0S2gtLXhfVXF2RVdTTVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsv0MMA0G
CSqGSIb3DQEBCwUAA4IBAQBrmBJTVeCzFMAj0/o04TIHBxynwcahrtIXtaf1IHwq
0w9AYnQ1wc0DEdF7L4SbYnMO1I/FkWbwMEkvPdI6Y7aXg3TOc4GYciQv3W03nI91
QKz1AHrpJIGPnrtd+5p4Ftui7lUDaF+1P7wuhNM2FBLWpDiBiaMyT4nRwXxrAhF0
wffaBBucfxqtR1mLKjSvIWnqUE8bJewa5QBbaCGz87nSjKs5MSRKPBIovdlBaTd1
uK9gREbPXR/fNtcxJ/GWHuAlqdf4HxJpkoy4qej2Kt4CjvAZhxfN4Na4V7KEODzW
P4xbya+g4xg8o/dK2pwQzP1PSlxj2D3T1bUUMHmdq+WD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org