Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MXzezwzQFfp0mIS2H9RDYJkCmLM.roa
File: MXzezwzQFfp0mIS2H9RDYJkCmLM.roa (raw, json)
Hash identifier: fiaWkg9/xjNOzE9oUemm42QGSgG62BGBxL6VSfnqaK4=
Subject key identifier: 31:7C:DE:CF:0C:D0:15:FA:74:98:84:B6:1F:D4:43:60:99:02:98:B3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01863A8DAC16D925B8788A07D1D9022E1B28
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MXzezwzQFfp0mIS2H9RDYJkCmLM.roa
Signing time: Fri 10 Feb 2023 09:00:08 +0000
ROA not before: Fri 10 Feb 2023 09:00:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 178.210.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:8d:ac:16:d9:25:b8:78:8a:07:d1:d9:02:2e:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 10 09:00:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=317cdecf0cd015fa749884b61fd44360990298b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:2a:91:ce:ce:70:b9:e2:b1:1d:f3:49:e4:
5f:b0:b5:95:cd:ad:14:bc:4e:07:dc:42:03:d0:d4:
2e:eb:9c:80:75:df:16:c5:6a:b6:f4:db:f2:ff:1a:
a6:e0:5b:0b:49:34:67:b3:0c:43:16:7c:6b:bd:07:
5a:c6:f9:06:4b:94:a0:67:52:a9:fb:80:bf:de:1f:
ab:0f:7c:7d:b7:66:6c:bd:ad:1d:77:70:5d:97:f3:
4f:3b:6b:52:ff:c3:ab:70:ad:c0:e6:69:d0:21:9b:
c8:eb:03:ff:cf:22:20:d4:7e:d9:fd:1e:70:52:a8:
d8:81:45:0d:29:21:57:d0:88:59:ff:ac:85:4b:ee:
54:ed:72:12:d0:56:0b:6e:74:c5:8f:9b:34:0a:51:
0d:95:68:98:89:8a:4a:9a:b1:ae:9b:07:4e:83:8e:
cc:ec:b6:f0:3e:7c:26:26:c9:c8:3b:6e:4d:31:26:
f5:0d:18:70:7b:af:98:d4:92:47:23:d2:8f:03:70:
fc:b6:90:c1:46:4c:39:be:0e:4d:d0:ff:52:6f:f7:
cd:6d:c6:8b:69:ba:b7:1f:e6:57:95:a7:03:df:c4:
d9:f5:7e:b3:c3:98:5c:28:91:fe:df:22:b5:fa:cc:
38:12:da:45:54:aa:96:d5:98:7c:1d:e6:44:c8:19:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:DE:CF:0C:D0:15:FA:74:98:84:B6:1F:D4:43:60:99:02:98:B3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MXzezwzQFfp0mIS2H9RDYJkCmLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:63:30:a8:36:ac:23:36:0a:ea:d4:17:a3:8a:a9:44:7e:92:
c9:3c:2d:e8:03:f8:d3:83:a1:e5:e9:54:2b:e4:aa:5c:93:f0:
f5:a9:d9:b1:a1:8b:5a:9e:a6:4b:fd:9c:14:d0:32:bc:1b:31:
77:a8:b2:b2:91:eb:cb:12:0f:bf:26:1f:cc:8c:54:c4:24:13:
b5:b0:5a:53:50:d9:af:87:aa:b7:34:47:b0:0f:22:df:42:53:
4e:cc:b5:fe:af:1b:79:6d:c2:f1:85:6a:d2:2f:f9:f4:9c:05:
94:50:98:be:c8:a5:08:a9:81:38:dc:53:ba:b3:01:bf:95:ed:
a1:ad:fc:8e:ad:b4:38:eb:40:dc:9a:21:53:29:0a:87:7a:a1:
35:fa:87:27:1c:91:c1:a4:a9:d3:70:54:a5:0d:f0:f0:63:64:
c7:86:a1:6a:34:fe:f6:12:de:81:3e:0f:c4:84:c3:58:44:3c:
c6:db:1b:ae:90:5b:dd:63:51:b5:91:83:70:39:06:a5:ff:06:
6b:23:ad:f3:88:d1:61:bf:0c:83:31:72:a4:af:0c:93:5d:c0:
3d:f9:78:e5:82:07:6d:33:98:6c:71:bb:07:35:cd:3c:4e:73:
12:52:20:de:5b:86:43:2c:e8:0c:00:b0:78:e2:14:5a:c0:da:
df:6c:3e:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY6jawW2SW4eIoH0dkCLhsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMjEwMDkwMDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTdjZGVjZjBjZDAxNWZhNzQ5ODg0YjYxZmQ0NDM2MDk5MDI5OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRYqkc7OcLnisR3zSeRfsLWVza0U
vE4H3EID0NQu65yAdd8WxWq29Nvy/xqm4FsLSTRnswxDFnxrvQdaxvkGS5SgZ1Kp
+4C/3h+rD3x9t2Zsva0dd3Bdl/NPO2tS/8OrcK3A5mnQIZvI6wP/zyIg1H7Z/R5w
UqjYgUUNKSFX0IhZ/6yFS+5U7XIS0FYLbnTFj5s0ClENlWiYiYpKmrGumwdOg47M
7LbwPnwmJsnIO25NMSb1DRhwe6+Y1JJHI9KPA3D8tpDBRkw5vg5N0P9Sb/fNbcaL
abq3H+ZXlacD38TZ9X6zw5hcKJH+3yK1+sw4EtpFVKqW1Zh8HeZEyBlBgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDF83s8M0BX6dJiEth/UQ2CZApizMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvTVh6ZXp3elFGZnAwbUlTMkg5UkRZSmtDbUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstLtMA0G
CSqGSIb3DQEBCwUAA4IBAQCfYzCoNqwjNgrq1BejiqlEfpLJPC3oA/jTg6Hl6VQr
5Kpck/D1qdmxoYtanqZL/ZwU0DK8GzF3qLKykevLEg+/Jh/MjFTEJBO1sFpTUNmv
h6q3NEewDyLfQlNOzLX+rxt5bcLxhWrSL/n0nAWUUJi+yKUIqYE43FO6swG/le2h
rfyOrbQ460DcmiFTKQqHeqE1+ocnHJHBpKnTcFSlDfDwY2THhqFqNP72Et6BPg/E
hMNYRDzG2xuukFvdY1G1kYNwOQal/wZrI63ziNFhvwyDMXKkrwyTXcA9+Xjlggdt
M5hscbsHNc08TnMSUiDeW4ZDLOgMALB44hRawNrfbD5b
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org