Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ovjxqjUjn_sKCpUjOQMpTde9XuA.roa
File: ovjxqjUjn_sKCpUjOQMpTde9XuA.roa (raw, json)
Hash identifier: 5NLrJbUL/tv7N+NxBs5aNXrlcAOZ8UQxtGSfhdLGzds=
Subject key identifier: A2:F8:F1:AA:35:23:9F:FB:0A:0A:95:23:39:03:29:4D:D7:BD:5E:E0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186B84343307F1D04A0F74FAD3089A9F7FD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ovjxqjUjn_sKCpUjOQMpTde9XuA.roa
Signing time: Mon 06 Mar 2023 18:51:01 +0000
ROA not before: Mon 06 Mar 2023 18:51:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 178.239.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:43:43:30:7f:1d:04:a0:f7:4f:ad:30:89:a9:f7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 6 18:51:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2f8f1aa35239ffb0a0a95233903294dd7bd5ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:e5:84:65:f0:1a:50:8f:7e:2d:f5:8f:68:
7f:2a:2d:51:d5:49:e0:f7:a3:25:a9:58:d8:ab:b0:
b9:8e:d9:96:53:0c:9e:a5:b7:74:e2:91:59:c6:f2:
40:d1:ed:1c:71:fc:2b:58:ae:8c:95:5b:d2:ba:58:
33:0c:6e:23:58:98:90:00:66:45:1a:e9:db:62:12:
bf:08:b9:8b:af:58:89:c6:fb:94:7b:d4:b5:22:a9:
e8:ea:9d:4c:d0:f6:a3:08:59:c0:5b:71:43:aa:f2:
b5:12:66:76:27:a8:94:f0:29:c8:52:a0:e6:90:c0:
64:a1:68:dc:e9:70:6d:de:1a:c5:9c:95:18:0d:3e:
ce:34:2e:72:cc:e4:d5:98:5e:0f:c7:ba:6f:cb:16:
62:a7:64:d6:ea:78:12:7a:63:f7:17:57:d1:c8:9e:
ad:0d:92:40:fa:93:32:7e:ee:47:58:b9:b4:bd:64:
99:15:0b:1d:21:66:5d:57:f3:80:64:34:86:2b:2b:
0f:8d:7f:3c:bd:cd:e4:c5:77:8f:09:3c:d4:1d:95:
0e:dd:72:5e:6f:cd:c9:a8:bc:76:26:a9:2b:a2:08:
45:46:01:c4:af:56:19:86:ec:76:c9:a8:a2:fb:80:
d6:00:ad:28:4f:f3:1d:89:8f:a4:2d:c8:98:6e:14:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:F1:AA:35:23:9F:FB:0A:0A:95:23:39:03:29:4D:D7:BD:5E:E0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ovjxqjUjn_sKCpUjOQMpTde9XuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bc:60:89:01:13:5e:73:a6:35:71:13:3f:1f:c7:74:89:00:
a7:cd:c4:fc:0c:3e:4e:60:33:82:61:b2:29:d1:7c:86:94:0c:
81:3f:26:e6:23:cc:52:d0:7a:16:42:db:87:67:fb:7a:c3:0f:
6d:44:36:f3:ce:c6:5f:9e:35:40:1e:f6:58:b9:5c:28:d9:ff:
16:60:72:36:50:fa:d3:81:5e:84:84:61:36:7f:99:37:ce:3f:
66:2a:c5:86:0f:1d:85:47:9c:5a:29:fa:6e:f8:4f:3c:51:ab:
73:bf:e8:d1:f1:cc:16:5a:84:a4:30:e3:dd:a0:f7:a9:9e:7d:
26:af:bf:af:8a:fe:2f:63:ad:c6:c6:b1:eb:e4:aa:88:e4:5c:
e5:6a:ed:54:c2:7c:33:4c:7d:e6:64:03:52:99:9a:1e:be:d2:
f8:31:ed:34:cd:56:2f:43:85:e7:4f:b6:08:8f:cc:37:5d:63:
d7:0f:50:5d:ec:80:f2:76:76:35:0b:e3:58:72:ca:07:2a:83:
20:dc:08:1b:55:86:95:38:26:6f:a4:4d:91:4a:84:3d:15:7c:
8e:e7:99:8b:fc:f8:23:8b:e0:03:0f:9c:0e:eb:c6:6f:78:45:
c5:ff:2e:5d:56:22:92:f6:b5:3a:c7:e6:94:e8:05:b7:79:e3:
68:db:79:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa4Q0Mwfx0EoPdPrTCJqff9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMzA2MTg1MTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmY4ZjFhYTM1MjM5ZmZiMGEwYTk1MjMzOTAzMjk0ZGQ3YmQ1ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3jlhGXwGlCPfi31j2h/Ki1R1Ung
96MlqVjYq7C5jtmWUwyepbd04pFZxvJA0e0ccfwrWK6MlVvSulgzDG4jWJiQAGZF
GunbYhK/CLmLr1iJxvuUe9S1Iqno6p1M0PajCFnAW3FDqvK1EmZ2J6iU8CnIUqDm
kMBkoWjc6XBt3hrFnJUYDT7ONC5yzOTVmF4Px7pvyxZip2TW6ngSemP3F1fRyJ6t
DZJA+pMyfu5HWLm0vWSZFQsdIWZdV/OAZDSGKysPjX88vc3kxXePCTzUHZUO3XJe
b83JqLx2JqkroghFRgHEr1YZhux2yaii+4DWAK0oT/MdiY+kLciYbhROkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKL48ao1I5/7CgqVIzkDKU3XvV7gMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvb3ZqeHFqVWpuX3NLQ3BVak9RTXBUZGU5WHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu/MMA0G
CSqGSIb3DQEBCwUAA4IBAQA8vGCJARNec6Y1cRM/H8d0iQCnzcT8DD5OYDOCYbIp
0XyGlAyBPybmI8xS0HoWQtuHZ/t6ww9tRDbzzsZfnjVAHvZYuVwo2f8WYHI2UPrT
gV6EhGE2f5k3zj9mKsWGDx2FR5xaKfpu+E88Uatzv+jR8cwWWoSkMOPdoPepnn0m
r7+viv4vY63GxrHr5KqI5Fzlau1UwnwzTH3mZANSmZoevtL4Me00zVYvQ4XnT7YI
j8w3XWPXD1Bd7IDydnY1C+NYcsoHKoMg3AgbVYaVOCZvpE2RSoQ9FXyO55mL/Pgj
i+ADD5wO68ZveEXF/y5dViKS9rU6x+aU6AW3eeNo23ns
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org