Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/EKsis9-sK_r-DGr3FasMJhflWmI.roa
File: EKsis9-sK_r-DGr3FasMJhflWmI.roa (raw, json)
Hash identifier: YdjKD72Uo4xE/OpflB8JwicMBKOXwy2pxU0ED/Ooyms=
Subject key identifier: 10:AB:22:B3:DF:AC:2B:FA:FE:0C:6A:F7:15:AB:0C:26:17:E5:5A:62
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 0185AFE43AB6CFEDDFA98EBF272464E143A2
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/EKsis9-sK_r-DGr3FasMJhflWmI.roa
Signing time: Sat 14 Jan 2023 10:47:28 +0000
ROA not before: Sat 14 Jan 2023 10:47:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56504
IP address blocks: 178.237.58.0/24 maxlen: 24
178.237.57.0/24 maxlen: 24
2a0d:5540:1::/48 maxlen: 48
2a0d:5540:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:af:e4:3a:b6:cf:ed:df:a9:8e:bf:27:24:64:e1:43:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jan 14 10:47:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ab22b3dfac2bfafe0c6af715ab0c2617e55a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:6d:ab:d0:b8:a6:7f:18:49:eb:e2:f2:70:
3d:88:42:9e:4f:92:3c:7d:5c:12:1c:3e:6f:7b:fc:
da:7c:e0:52:1d:52:11:97:55:4c:9b:bb:e8:aa:45:
f8:fd:11:cd:72:37:ae:b7:55:19:67:5c:54:da:62:
fc:37:a9:81:89:f3:90:15:92:30:fc:6d:29:74:d5:
97:bf:4d:60:60:07:a5:00:fb:77:75:ad:cf:80:13:
f5:e9:9a:dc:b8:d6:f6:01:b3:fe:93:df:71:28:fc:
84:94:dd:6f:a4:39:05:0c:be:5e:b5:0a:f3:2b:11:
0f:96:49:46:77:d7:40:ae:00:35:08:1c:0c:d0:fa:
0e:c1:26:8d:6d:67:33:32:14:a6:6b:07:82:7f:f6:
cd:37:72:29:9e:fd:82:8b:33:54:ca:a0:52:17:14:
b6:25:59:7d:16:43:e7:fe:a6:73:1d:43:14:8e:ed:
b4:14:37:47:09:3a:94:4f:47:a0:dd:fd:47:a2:4e:
04:93:ff:73:a7:b2:86:6b:34:f5:06:c3:92:8d:37:
b2:bf:1e:b0:aa:e0:64:4f:00:f7:6e:8e:fa:41:67:
99:72:67:69:b5:dd:1c:2b:ce:b3:9d:9e:0f:e5:23:
db:f8:b1:32:c3:a4:b9:73:af:ce:f9:aa:5b:3a:93:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:22:B3:DF:AC:2B:FA:FE:0C:6A:F7:15:AB:0C:26:17:E5:5A:62
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/EKsis9-sK_r-DGr3FasMJhflWmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.57.0-178.237.58.255
IPv6:
2a0d:5540:1::-2a0d:5540:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
28:82:6d:13:98:c3:cb:0f:c1:9e:51:59:98:2d:aa:12:a7:51:
b0:45:f9:08:59:3f:61:ff:49:79:e2:8c:fb:5f:3e:89:70:3b:
3a:db:c5:96:4c:fc:47:9d:eb:6a:1e:41:c6:f1:c9:32:57:52:
91:84:8b:a4:9d:ef:c9:84:76:a3:c4:a8:22:60:f2:d0:f6:62:
7d:64:84:38:c8:8a:02:40:17:6d:b4:e4:db:58:62:b9:f5:e9:
8b:ae:26:cb:bd:2c:72:a1:59:0a:e6:fe:17:dd:33:61:4d:8f:
e0:99:3d:81:db:4a:3f:94:ce:d8:98:c6:45:fe:de:9a:14:d1:
12:76:e1:33:4e:10:bc:16:76:55:b9:31:f9:27:29:6c:a1:06:
c9:c5:19:79:76:f2:ae:8f:66:13:a6:b9:84:71:97:fc:f0:06:
e2:b4:47:ed:08:c5:aa:72:e2:c3:8a:23:8b:91:7b:15:e3:a8:
d2:7f:97:0c:79:22:73:d8:65:fa:6d:97:9e:f0:5b:b8:a7:6e:
f9:89:d1:55:3e:8f:38:24:07:7c:30:71:27:f3:32:7a:54:08:
64:75:ba:e2:75:13:36:c6:70:9a:4a:82:1a:ab:4e:de:bf:92:
ba:a9:ad:c5:4d:2a:2f:51:70:23:fb:a8:a5:f8:67:8c:b0:7c:
d0:ce:1f:4d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYWv5Dq2z+3fqY6/JyRk4UOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjMwMTE0MTA0NzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFiMjJiM2RmYWMyYmZhZmUwYzZhZjcxNWFiMGMyNjE3ZTU1YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuNtq9C4pn8YSevi8nA9iEKeT5I8
fVwSHD5ve/zafOBSHVIRl1VMm7voqkX4/RHNcjeut1UZZ1xU2mL8N6mBifOQFZIw
/G0pdNWXv01gYAelAPt3da3PgBP16ZrcuNb2AbP+k99xKPyElN1vpDkFDL5etQrz
KxEPlklGd9dArgA1CBwM0PoOwSaNbWczMhSmaweCf/bNN3Ipnv2CizNUyqBSFxS2
JVl9FkPn/qZzHUMUju20FDdHCTqUT0eg3f1Hok4Ek/9zp7KGazT1BsOSjTeyvx6w
quBkTwD3bo76QWeZcmdptd0cK86znZ4P5SPb+LEyw6S5c6/O+apbOpPN1wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBCrIrPfrCv6/gxq9xWrDCYX5VpiMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvRUtzaXM5LXNLX3ItREdyM0Zhc01KaGZsV21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBACy7TkD
BACy7TowGgQCAAIwFDASAwcAKg1VQAABAwcAKg1VQAACMA0GCSqGSIb3DQEBCwUA
A4IBAQAogm0TmMPLD8GeUVmYLaoSp1GwRfkIWT9h/0l54oz7Xz6JcDs628WWTPxH
netqHkHG8ckyV1KRhIukne/JhHajxKgiYPLQ9mJ9ZIQ4yIoCQBdttOTbWGK59emL
ribLvSxyoVkK5v4X3TNhTY/gmT2B20o/lM7YmMZF/t6aFNESduEzThC8FnZVuTH5
JylsoQbJxRl5dvKuj2YTprmEcZf88AbitEftCMWqcuLDiiOLkXsV46jSf5cMeSJz
2GX6bZee8Fu4p275idFVPo84JAd8MHEn8zJ6VAhkdbridRM2xnCaSoIaq07ev5K6
qa3FTSovUXAj+6il+GeMsHzQzh9N
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:00 2024 by rpki-client on console-ams.rpki-client.org