Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/S2H3h4ecAeA87RX67k868FJUM0g.roa
File: S2H3h4ecAeA87RX67k868FJUM0g.roa (raw, json)
Hash identifier: L1pefjcEAzjAL58mwl90s80sMdywqMenjBFXRYDqfoA=
Subject key identifier: 4B:61:F7:87:87:9C:01:E0:3C:ED:15:FA:EE:4F:3A:F0:52:54:33:48
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018B8B22809FA0EB1311702AA0987053BFB6
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/S2H3h4ecAeA87RX67k868FJUM0g.roa
Signing time: Wed 01 Nov 2023 13:46:16 +0000
ROA not before: Wed 01 Nov 2023 13:46:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 178.212.230.0/24 maxlen: 24
194.26.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:22:80:9f:a0:eb:13:11:70:2a:a0:98:70:53:bf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Nov 1 13:46:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b61f787879c01e03ced15faee4f3af052543348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:1b:0b:df:82:8b:e0:5f:f7:51:3f:93:44:
48:ca:ce:68:b5:4f:d2:1f:f7:af:18:bb:74:4f:15:
6c:46:1e:37:aa:dc:c5:58:0d:17:25:f2:30:16:33:
75:c9:a0:2b:4c:52:de:e9:2d:06:34:b0:cd:d4:a2:
9d:03:3b:4b:cf:11:81:ff:c1:04:8e:f3:dc:c0:5f:
6b:f8:81:66:87:5c:a0:06:e7:1f:49:e7:3c:36:7e:
6a:96:e8:2a:dd:f3:e2:d7:90:6e:62:1e:a4:4c:f0:
ca:c7:60:e9:59:6a:90:1a:e5:90:8c:4f:06:2b:f0:
55:3f:7b:bf:06:d9:27:8b:bd:c7:65:50:50:08:c3:
a1:aa:6a:40:40:fb:72:36:f0:cd:42:2c:0a:41:9e:
da:b3:1e:1c:fc:7d:42:9f:50:dc:8c:2a:55:9a:e6:
99:3c:d3:ff:f6:fe:91:e8:dd:50:1a:75:ea:de:95:
b3:ea:4a:a5:05:fa:df:d8:11:47:14:a2:37:c2:82:
c7:16:c4:ec:03:1d:f9:65:6e:0f:b2:e4:82:5f:0e:
68:6a:30:95:bd:ee:90:1b:1d:43:84:ca:c0:5f:7a:
bd:85:96:c8:2a:68:8d:0e:e3:a3:7b:89:17:56:1d:
e5:59:7d:dc:fe:2c:5e:7c:33:31:9d:41:7d:1b:02:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:F7:87:87:9C:01:E0:3C:ED:15:FA:EE:4F:3A:F0:52:54:33:48
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/S2H3h4ecAeA87RX67k868FJUM0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.230.0/24
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a1:57:31:80:85:c4:f0:63:26:a6:73:c0:c4:1c:25:f5:17:
81:56:2d:a7:ac:39:9c:65:90:1a:04:2d:86:68:b9:18:dc:eb:
01:7c:77:8d:2d:b9:5f:a2:86:c3:47:f5:48:da:e0:41:ea:b1:
a3:78:68:63:8c:25:62:5b:51:d1:76:42:a7:13:17:8a:ea:3f:
ea:54:12:09:8a:39:e2:55:f3:c0:49:c8:80:9a:36:bb:7b:26:
02:b2:7d:61:52:cf:34:f8:03:68:26:50:5d:29:9a:0b:97:5f:
4f:d9:fe:59:69:df:66:75:af:60:fe:43:52:0c:79:70:d7:10:
00:b4:a6:6a:79:ca:a3:32:7a:4f:62:bb:95:d5:99:72:8f:0f:
9b:a0:d0:56:0f:05:7b:37:3d:5b:85:83:eb:0c:fd:ac:83:ed:
02:d9:67:f4:aa:24:2b:cd:da:ad:2c:c5:92:5c:8f:e1:30:7d:
5a:80:06:b3:d5:2c:db:ef:9d:11:fc:5b:48:2e:06:30:73:83:
5b:af:be:9f:0d:c8:90:dd:3c:7c:9d:a4:48:82:0e:b1:1a:74:
1f:28:dd:4a:6c:b2:58:e6:17:fd:0b:86:c3:e6:53:c1:2d:3b:
a3:d2:b1:65:e0:00:f9:be:40:c7:cf:37:b5:02:d0:6b:95:2b:
7b:82:83:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuLIoCfoOsTEXAqoJhwU7+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjMxMTAxMTM0NjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjYxZjc4Nzg3OWMwMWUwM2NlZDE1ZmFlZTRmM2FmMDUyNTQzMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNIbC9+Ci+Bf91E/k0RIys5otU/S
H/evGLt0TxVsRh43qtzFWA0XJfIwFjN1yaArTFLe6S0GNLDN1KKdAztLzxGB/8EE
jvPcwF9r+IFmh1ygBucfSec8Nn5qlugq3fPi15BuYh6kTPDKx2DpWWqQGuWQjE8G
K/BVP3u/Btkni73HZVBQCMOhqmpAQPtyNvDNQiwKQZ7asx4c/H1Cn1DcjCpVmuaZ
PNP/9v6R6N1QGnXq3pWz6kqlBfrf2BFHFKI3woLHFsTsAx35ZW4PsuSCXw5oajCV
ve6QGx1DhMrAX3q9hZbIKmiNDuOje4kXVh3lWX3c/ixefDMxnUF9GwIzRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEth94eHnAHgPO0V+u5POvBSVDNIMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvUzJIM2g0ZWNBZUE4N1JYNjdrODY4RkpVTTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstTmAwQA
whrqMA0GCSqGSIb3DQEBCwUAA4IBAQA7oVcxgIXE8GMmpnPAxBwl9ReBVi2nrDmc
ZZAaBC2GaLkY3OsBfHeNLblfoobDR/VI2uBB6rGjeGhjjCViW1HRdkKnExeK6j/q
VBIJijniVfPASciAmja7eyYCsn1hUs80+ANoJlBdKZoLl19P2f5Zad9mda9g/kNS
DHlw1xAAtKZqecqjMnpPYruV1Zlyjw+boNBWDwV7Nz1bhYPrDP2sg+0C2Wf0qiQr
zdqtLMWSXI/hMH1agAaz1Szb750R/FtILgYwc4Nbr76fDciQ3Tx8naRIgg6xGnQf
KN1KbLJY5hf9C4bD5lPBLTuj0rFl4AD5vkDHzze1AtBrlSt7goM0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:07 2024 by rpki-client on console-ams.rpki-client.org