Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jXyt2VelpUdOQpy-X4xjitm3OOE.roa
File: jXyt2VelpUdOQpy-X4xjitm3OOE.roa (raw, json)
Hash identifier: v8eyrNPPgvaeVxNH6C8mPT1A+x65TZOIeEK7P8OvpNg=
Subject key identifier: 8D:7C:AD:D9:57:A5:A5:47:4E:42:9C:BE:5F:8C:63:8A:D9:B7:38:E1
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018C49488DF12510F1C16C84CBA33F100C17
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jXyt2VelpUdOQpy-X4xjitm3OOE.roa
Signing time: Fri 08 Dec 2023 11:55:40 +0000
ROA not before: Fri 08 Dec 2023 11:55:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 164.215.98.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
46.23.109.0/24 maxlen: 24
5.178.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:48:8d:f1:25:10:f1:c1:6c:84:cb:a3:3f:10:0c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 8 11:55:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d7cadd957a5a5474e429cbe5f8c638ad9b738e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:90:22:e3:2d:b0:cd:60:f5:f3:92:a6:34:
cb:17:bb:4b:d8:70:ac:fd:06:37:2c:3a:86:a5:b0:
49:16:70:8e:69:84:a3:45:d2:eb:3b:82:47:15:53:
04:8c:a6:6a:bf:2d:5e:0a:b9:a2:b6:82:32:de:b8:
a8:6c:8e:8b:7a:31:cb:33:09:33:d7:62:55:2c:69:
ae:4b:db:a7:5d:d6:64:75:54:55:fd:45:cf:67:43:
a4:9f:25:99:c4:25:4c:0c:f9:c2:f4:a6:80:ea:32:
f5:b6:2e:8a:5d:ed:97:0f:c3:99:2b:7b:69:a2:e2:
60:24:1e:f2:9e:76:23:ef:99:ad:30:8b:1b:0e:c5:
c2:a5:a0:62:62:93:36:1b:fe:52:e3:ed:07:45:fe:
97:3c:64:69:7e:f6:41:87:9f:7a:ad:76:dc:50:66:
e3:e6:d9:9f:f1:6e:72:24:18:b2:4d:b8:3b:97:ca:
c2:ee:e0:dc:74:2a:62:3e:51:03:11:e2:88:14:82:
03:65:e4:f2:7c:cb:c3:05:50:d9:af:ce:a6:0c:1f:
1e:0f:6a:1b:54:e4:60:25:a2:49:12:ce:b2:9a:7d:
e0:06:d2:6d:26:85:f1:2d:b3:c3:44:97:b6:f4:d6:
af:7a:2a:3c:f7:b4:37:be:77:8f:d2:26:ff:40:47:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:AD:D9:57:A5:A5:47:4E:42:9C:BE:5F:8C:63:8A:D9:B7:38:E1
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/jXyt2VelpUdOQpy-X4xjitm3OOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/24
46.23.109.0/24
164.215.98.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dc:ee:f5:83:27:e0:31:6c:66:e7:50:77:5c:57:23:65:e8:
64:52:7a:87:03:24:cc:9a:71:1f:ec:97:a9:45:53:68:01:30:
04:84:3c:9f:07:a3:e8:a9:1c:c6:8d:ed:4a:80:4b:0c:b8:0d:
ec:04:7b:c8:d0:8e:08:23:28:32:30:7d:6a:a9:47:e6:58:7b:
d3:50:08:2d:a0:b3:68:52:30:06:a3:ce:c9:4d:a6:43:3e:03:
e7:d3:bd:14:38:9e:29:df:7c:45:45:0a:56:f2:31:0c:db:41:
3b:5d:4c:17:bc:6d:91:26:88:f2:36:80:b9:8d:cb:b0:66:2f:
6e:b3:99:d9:83:ff:17:ba:df:1f:43:98:83:c2:bf:23:35:1a:
ff:12:28:9b:4f:b4:2e:9c:69:85:11:14:e8:10:5a:2d:c8:3f:
7a:d1:f3:b1:8f:22:9c:02:b6:fe:87:98:a0:94:a1:4d:c6:28:
31:bc:4e:82:ef:d6:a5:ac:b1:67:77:a3:6a:50:68:d9:c2:4d:
a3:bd:2d:7b:8c:18:13:df:8e:57:a7:d7:9a:70:34:8b:9c:f5:
d1:56:30:53:01:ef:48:b5:6e:47:dd:68:57:dd:7d:21:f9:3e:
ba:6b:b5:28:fd:49:d4:35:36:b9:76:79:84:47:17:96:58:7b:
30:56:02:4a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxJSI3xJRDxwWyEy6M/EAwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMxMjA4MTE1NTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdjYWRkOTU3YTVhNTQ3NGU0MjljYmU1ZjhjNjM4YWQ5YjczOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS+QIuMtsM1g9fOSpjTLF7tL2HCs
/QY3LDqGpbBJFnCOaYSjRdLrO4JHFVMEjKZqvy1eCrmitoIy3riobI6LejHLMwkz
12JVLGmuS9unXdZkdVRV/UXPZ0OknyWZxCVMDPnC9KaA6jL1ti6KXe2XD8OZK3tp
ouJgJB7ynnYj75mtMIsbDsXCpaBiYpM2G/5S4+0HRf6XPGRpfvZBh596rXbcUGbj
5tmf8W5yJBiyTbg7l8rC7uDcdCpiPlEDEeKIFIIDZeTyfMvDBVDZr86mDB8eD2ob
VORgJaJJEs6ymn3gBtJtJoXxLbPDRJe29Naveio897Q3vneP0ib/QEd4ewIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI18rdlXpaVHTkKcvl+MY4rZtzjhMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvalh5dDJWZWxwVWRPUXB5LVg0eGppdG0zT09FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbIAAwQA
LhdtAwQApNdiAwQApNdnMA0GCSqGSIb3DQEBCwUAA4IBAQBG3O71gyfgMWxm51B3
XFcjZehkUnqHAyTMmnEf7JepRVNoATAEhDyfB6PoqRzGje1KgEsMuA3sBHvI0I4I
IygyMH1qqUfmWHvTUAgtoLNoUjAGo87JTaZDPgPn070UOJ4p33xFRQpW8jEM20E7
XUwXvG2RJojyNoC5jcuwZi9us5nZg/8Xut8fQ5iDwr8jNRr/EiibT7QunGmFERTo
EFotyD960fOxjyKcArb+h5iglKFNxigxvE6C79alrLFnd6NqUGjZwk2jvS17jBgT
345Xp9eacDSLnPXRVjBTAe9ItW5H3WhX3X0h+T66a7Uo/UnUNTa5dnmERxeWWHsw
VgJK
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:09 2024 by rpki-client on console-ams.rpki-client.org