Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/w4owEZPBhwH0rPHKwsxpnMxEzY4.roa
File: w4owEZPBhwH0rPHKwsxpnMxEzY4.roa (raw, json)
Hash identifier: YyAysqXt3p/ljGJUtKDhJAj56yPHCBrO/Zv63ZzcUCg=
Subject key identifier: C3:8A:30:11:93:C1:87:01:F4:AC:F1:CA:C2:CC:69:9C:CC:44:CD:8E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0188D84D3318F55580654C8DB818C15870D0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/w4owEZPBhwH0rPHKwsxpnMxEzY4.roa
Signing time: Tue 20 Jun 2023 10:15:17 +0000
ROA not before: Tue 20 Jun 2023 10:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46844
IP address blocks: 178.253.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:4d:33:18:f5:55:80:65:4c:8d:b8:18:c1:58:70:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 20 10:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c38a301193c18701f4acf1cac2cc699ccc44cd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:a4:c0:21:ee:7f:21:4e:7e:9d:93:3b:1c:
5a:68:50:c9:49:da:69:44:20:15:a5:73:bf:af:a8:
d8:75:65:79:25:b9:b7:80:75:a1:7e:a7:d9:7b:29:
1b:32:76:52:fd:61:d4:e8:c5:19:9f:63:d2:27:7b:
d1:59:02:e8:3b:d9:b5:d1:da:20:22:11:d9:52:d8:
a3:c7:17:c7:ed:06:61:63:92:8a:69:ba:b3:56:61:
8f:03:64:de:1e:6b:fc:b5:58:16:05:cc:d1:ca:23:
56:70:73:83:1c:db:39:9e:78:ad:01:c5:c3:2b:f1:
79:fd:ea:56:58:8c:1e:cd:0f:25:68:19:6e:32:1d:
af:29:2f:2e:6d:db:bd:8f:ec:4c:b5:ea:fd:b6:78:
b5:42:01:19:ee:9d:d1:7c:36:2b:4f:ee:ff:9a:02:
ec:ed:75:6a:4c:27:89:fe:92:c8:df:bf:ee:ea:d0:
a2:64:ca:3e:92:4b:db:48:f6:9d:a9:a3:27:ed:33:
c6:19:c9:b9:80:30:b6:41:12:dc:36:aa:33:14:fa:
7f:81:04:5f:a2:d6:98:ff:88:16:54:53:6a:95:ca:
c9:a4:68:4e:cc:75:c7:69:f8:5c:fb:52:01:f3:9c:
b6:05:13:d8:1a:c3:ea:85:cc:2e:f4:da:29:69:4e:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:30:11:93:C1:87:01:F4:AC:F1:CA:C2:CC:69:9C:CC:44:CD:8E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/w4owEZPBhwH0rPHKwsxpnMxEzY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
32:27:98:31:aa:bd:64:a1:4a:88:2a:6c:77:2c:c1:cb:36:29:
ad:9a:ab:18:6d:7d:44:43:a7:72:b3:29:82:dc:f2:24:9c:b2:
72:a1:41:59:95:a8:fe:1d:77:63:35:fa:63:8b:e6:59:a0:c1:
ee:88:d0:fc:1b:c4:23:9e:86:95:8c:4b:d9:28:44:52:2d:16:
b0:43:f7:5b:19:2e:f2:c8:8c:f4:10:2d:99:f4:fa:04:53:8e:
5c:cd:f2:78:d7:d9:35:05:48:16:f5:46:9f:7a:78:67:e8:f6:
bd:bd:7d:5c:81:8d:15:2a:e0:b4:b6:d2:e7:dd:0a:27:8f:2e:
80:cd:0d:19:57:a4:5e:d5:e1:dc:e9:dc:e4:49:fa:45:72:8c:
4e:fb:53:9d:59:3d:9f:1d:e9:bf:cc:33:9d:47:cd:4b:78:93:
e8:55:d9:71:26:04:b3:fd:b2:4b:54:93:db:b8:9a:49:e9:42:
d4:17:44:6d:e1:11:3f:2f:8a:2b:6b:3d:12:a3:9e:22:3c:f1:
84:f5:0d:e3:cb:09:66:e4:24:80:04:f7:bc:35:14:b6:9f:fa:
e0:cf:17:5e:1d:c3:a0:1a:9d:17:cd:fe:3d:f7:3a:04:3c:bc:
a5:ce:58:44:2a:47:3a:13:ea:59:5e:97:a0:a9:27:b7:9e:f2:
be:69:da:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjYTTMY9VWAZUyNuBjBWHDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNjIwMTAxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzhhMzAxMTkzYzE4NzAxZjRhY2YxY2FjMmNjNjk5Y2NjNDRjZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBykwCHufyFOfp2TOxxaaFDJSdpp
RCAVpXO/r6jYdWV5Jbm3gHWhfqfZeykbMnZS/WHU6MUZn2PSJ3vRWQLoO9m10dog
IhHZUtijxxfH7QZhY5KKabqzVmGPA2TeHmv8tVgWBczRyiNWcHODHNs5nnitAcXD
K/F5/epWWIwezQ8laBluMh2vKS8ubdu9j+xMter9tni1QgEZ7p3RfDYrT+7/mgLs
7XVqTCeJ/pLI37/u6tCiZMo+kkvbSPadqaMn7TPGGcm5gDC2QRLcNqozFPp/gQRf
otaY/4gWVFNqlcrJpGhOzHXHafhc+1IB85y2BRPYGsPqhcwu9NopaU4WwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOKMBGTwYcB9KzxysLMaZzMRM2OMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvdzRvd0VaUEJod0gwclBIS3dzeHBuTXhFelk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv0QMA0G
CSqGSIb3DQEBCwUAA4IBAQAyJ5gxqr1koUqIKmx3LMHLNimtmqsYbX1EQ6dysymC
3PIknLJyoUFZlaj+HXdjNfpji+ZZoMHuiND8G8QjnoaVjEvZKERSLRawQ/dbGS7y
yIz0EC2Z9PoEU45czfJ419k1BUgW9Uafenhn6Pa9vX1cgY0VKuC0ttLn3Qonjy6A
zQ0ZV6Re1eHc6dzkSfpFcoxO+1OdWT2fHem/zDOdR81LeJPoVdlxJgSz/bJLVJPb
uJpJ6ULUF0Rt4RE/L4oraz0So54iPPGE9Q3jywlm5CSABPe8NRS2n/rgzxdeHcOg
Gp0Xzf499zoEPLylzlhEKkc6E+pZXpegqSe3nvK+adpF
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:28 2024 by rpki-client on console-fra.rpki-client.org