Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/M3dsKUiPA5QWgUh9Gq0jpM14CjY.roa
File: M3dsKUiPA5QWgUh9Gq0jpM14CjY.roa (raw, json)
Hash identifier: DYr89ffMD7e3O9vbRc18DDsbhSnqnrQ9IqghTbgcv90=
Subject key identifier: 33:77:6C:29:48:8F:03:94:16:81:48:7D:1A:AD:23:A4:CD:78:0A:36
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571154DEE4C5B6B84D2964AC9E96D5D4D
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/M3dsKUiPA5QWgUh9Gq0jpM14CjY.roa
Signing time: Mon 02 Jan 2023 06:04:59 +0000
ROA not before: Mon 02 Jan 2023 06:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41097
IP address blocks: 78.133.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4d:ee:4c:5b:6b:84:d2:96:4a:c9:e9:6d:5d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33776c29488f03941681487d1aad23a4cd780a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:cf:f8:a7:0f:f6:5f:19:bc:06:00:0e:a3:
dd:7b:fe:13:04:d9:5d:43:05:fd:e1:c1:f6:38:08:
d7:cb:46:cb:15:3e:29:56:e0:35:33:d6:39:40:be:
74:90:f4:ff:4d:5f:b5:04:b4:07:21:5f:6f:5b:2a:
67:c2:b2:3e:17:80:c6:96:7b:34:54:55:6c:04:e5:
36:7c:2e:94:5f:78:df:5c:f4:d9:c0:0c:c9:a1:0c:
ed:4e:9b:88:83:7a:ba:79:25:b9:32:96:c1:5d:78:
0c:9b:96:9a:14:cd:a1:e6:ca:2b:41:35:22:3b:ea:
70:7a:3b:25:7b:39:fc:a2:42:79:0b:d8:71:00:5b:
eb:a8:55:ea:53:af:de:74:2f:df:d5:d2:9e:72:7c:
df:6e:6c:77:07:5d:d8:ef:11:70:02:57:68:b4:25:
f8:07:47:ab:a2:76:63:e3:d1:ec:33:62:26:03:b8:
38:e1:f1:2f:db:85:a7:63:14:78:39:d0:78:60:e5:
db:58:6d:5e:5f:84:3d:7a:37:51:73:4b:26:93:23:
30:86:f8:3d:c7:ba:dd:5c:a0:2e:19:02:71:6c:7d:
23:f2:57:9f:67:e8:64:a5:10:36:67:81:95:e0:ec:
71:97:65:e0:63:1d:24:38:60:59:85:44:c1:61:a5:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:6C:29:48:8F:03:94:16:81:48:7D:1A:AD:23:A4:CD:78:0A:36
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/M3dsKUiPA5QWgUh9Gq0jpM14CjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.228.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4e:39:93:e8:1b:e0:e0:b7:a1:cd:36:db:30:d3:3a:2e:06:
56:c9:a1:68:31:e5:5c:a2:d8:b3:a2:5d:6e:8c:e9:cc:98:6f:
16:d2:42:8b:21:bb:4a:32:28:43:40:a2:13:05:a2:15:c1:2e:
fa:8a:ba:43:71:75:44:af:49:8c:9f:02:35:95:39:1e:a4:53:
72:bf:0d:c6:8f:b8:12:1e:76:b7:6d:4d:ff:41:57:bf:75:a7:
17:b1:3d:2b:a1:6c:cd:49:91:2d:15:06:db:99:e4:ae:07:6e:
e2:de:7f:f4:64:47:e8:9c:30:66:dd:73:e9:49:6b:15:9f:55:
32:fa:84:e8:e4:fe:94:e8:b0:32:1a:39:33:71:25:90:99:0c:
00:d4:93:46:bb:c4:4d:ad:8b:43:fd:5c:60:8e:b5:92:92:ce:
c8:09:39:e9:65:e6:cf:45:cc:4b:d2:56:f4:0e:85:65:00:d4:
fa:7e:5c:65:80:4f:f9:33:f3:0d:3b:c1:b4:5a:a3:c4:8c:c0:
73:36:1e:78:2c:b8:b9:a0:de:63:9b:90:7f:83:2b:7f:6a:c5:
28:c0:07:57:a2:04:2b:de:9b:5c:4f:ae:de:c7:51:26:5c:d9:
c8:75:25:21:44:72:75:58:d9:95:66:4b:8c:77:65:5f:1d:5a:
fc:22:24:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxFU3uTFtrhNKWSsnpbV1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjMwMTAyMDYwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzc3NmMyOTQ4OGYwMzk0MTY4MTQ4N2QxYWFkMjNhNGNkNzgwYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyfP+KcP9l8ZvAYADqPde/4TBNld
QwX94cH2OAjXy0bLFT4pVuA1M9Y5QL50kPT/TV+1BLQHIV9vWypnwrI+F4DGlns0
VFVsBOU2fC6UX3jfXPTZwAzJoQztTpuIg3q6eSW5MpbBXXgMm5aaFM2h5sorQTUi
O+pwejslezn8okJ5C9hxAFvrqFXqU6/edC/f1dKecnzfbmx3B13Y7xFwAldotCX4
B0eronZj49HsM2ImA7g44fEv24WnYxR4OdB4YOXbWG1eX4Q9ejdRc0smkyMwhvg9
x7rdXKAuGQJxbH0j8lefZ+hkpRA2Z4GV4Oxxl2XgYx0kOGBZhUTBYaWeMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDN3bClIjwOUFoFIfRqtI6TNeAo2MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvTTNkc0tVaVBBNVFXZ1VoOUdxMGpwTTE0Q2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToXkMA0G
CSqGSIb3DQEBCwUAA4IBAQBITjmT6Bvg4LehzTbbMNM6LgZWyaFoMeVcotizol1u
jOnMmG8W0kKLIbtKMihDQKITBaIVwS76irpDcXVEr0mMnwI1lTkepFNyvw3Gj7gS
Hna3bU3/QVe/dacXsT0roWzNSZEtFQbbmeSuB27i3n/0ZEfonDBm3XPpSWsVn1Uy
+oTo5P6U6LAyGjkzcSWQmQwA1JNGu8RNrYtD/VxgjrWSks7ICTnpZebPRcxL0lb0
DoVlANT6flxlgE/5M/MNO8G0WqPEjMBzNh54LLi5oN5jm5B/gyt/asUowAdXogQr
3ptcT67ex1EmXNnIdSUhRHJ1WNmVZkuMd2VfHVr8IiSc
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:29 2024 by rpki-client on console-fra.rpki-client.org