Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/85ak6fwVB11yRb9y77LfVe-QMSA.roa
File: 85ak6fwVB11yRb9y77LfVe-QMSA.roa (raw, json)
Hash identifier: 1exVg6CiKQrOdO2J4S4FvyjDySIkDJvWOUIC3out7k0=
Subject key identifier: F3:96:A4:E9:FC:15:07:5D:72:45:BF:72:EF:B2:DF:55:EF:90:31:20
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: 018572E82C89CB82B23840393304DADA7AE1
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/85ak6fwVB11yRb9y77LfVe-QMSA.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41171
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2c:89:cb:82:b2:38:40:39:33:04:da:da:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f396a4e9fc15075d7245bf72efb2df55ef903120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:94:94:b2:e1:ae:96:d9:ce:b5:46:d6:16:
de:ed:c3:61:17:44:af:c7:c4:ce:47:c4:03:e1:0a:
89:33:b6:9f:90:fc:0a:9f:74:5c:b1:f2:bd:69:b7:
9b:92:4a:1b:ce:60:81:89:e6:af:c9:5f:f7:a7:fb:
d5:e5:db:7a:fc:14:68:c8:74:8b:c6:08:d8:b4:e5:
76:9c:96:08:8c:86:a0:9b:7d:25:bc:2c:d1:81:f9:
ce:fb:30:11:d9:7a:8f:47:fb:56:82:80:7c:36:1c:
24:33:4a:2a:bd:19:84:af:dc:17:2a:4f:ff:8f:74:
08:21:89:e9:dd:ce:b8:0a:20:3d:ba:35:1e:9b:a9:
88:95:04:47:55:57:fc:8c:f7:d9:d6:92:9e:f7:dc:
e3:c5:43:7d:ee:8e:75:9a:1f:6c:d6:48:e9:6c:d9:
61:0d:e4:be:3f:97:51:2c:68:aa:c3:cf:6b:4b:aa:
9f:c4:50:b1:0c:64:0a:47:45:aa:7b:eb:58:a6:43:
0e:4f:90:4e:c5:f3:ba:5f:b7:ca:29:ce:9d:e5:ea:
a7:da:bc:5e:a1:06:4a:f6:19:9b:aa:de:d8:94:fa:
ba:d0:6c:43:2d:c5:c9:c5:79:4a:fa:a2:5c:c0:42:
3a:fe:f4:0b:f1:61:6c:f3:c4:19:3c:21:df:ad:43:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:A4:E9:FC:15:07:5D:72:45:BF:72:EF:B2:DF:55:EF:90:31:20
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/85ak6fwVB11yRb9y77LfVe-QMSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f2:cf:96:ca:20:87:9e:f8:83:42:1a:ac:73:ad:bf:de:7c:
a8:32:1b:16:e1:fa:aa:7a:82:1c:48:c0:0c:60:a2:ae:53:76:
2f:53:5f:71:a3:09:97:e3:67:fc:10:4d:51:93:1e:d9:70:3e:
88:f1:97:c4:6f:66:61:4b:8e:f2:48:78:bd:1b:53:04:f9:d4:
2e:74:36:60:3e:d1:21:95:b7:51:a5:04:5a:a0:02:d5:66:73:
24:f3:a2:15:06:cf:54:36:df:19:bc:f9:7d:df:ce:bd:db:3f:
1e:eb:b6:d3:b5:e2:b7:26:95:c4:33:7c:9a:90:bd:d1:61:0c:
7a:e6:d5:bf:3d:72:2f:80:1a:fd:e2:4f:99:33:8f:ae:a6:88:
f5:9c:fa:06:93:aa:8c:7b:92:06:1f:04:cc:1b:1c:40:e7:a3:
25:be:ca:6a:a5:d2:8b:5b:3e:85:6e:8f:62:5b:79:b4:f4:ca:
72:fc:a8:60:50:d8:cd:77:99:08:d3:ca:2d:ba:17:97:30:0f:
25:f1:25:58:83:5e:a3:c2:ea:7d:a1:0d:5d:f0:7d:79:1c:1f:
73:9e:fb:3a:bb:f2:06:e6:57:28:c7:90:f6:91:1c:d5:b9:6e:
4b:d8:60:fc:b7:33:ae:b9:08:7e:d0:82:20:e8:76:01:ea:0f:
0c:da:31:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6CyJy4KyOEA5MwTa2nrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWVmNjRhMmU2ZTExYzRkZDZhZDA1Yjk2ZWZmNjQ0ZGRi
NDU3YWYwHhcNMjMwMTAyMTQzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzk2YTRlOWZjMTUwNzVkNzI0NWJmNzJlZmIyZGY1NWVmOTAzMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLeUlLLhrpbZzrVG1hbe7cNhF0Sv
x8TOR8QD4QqJM7afkPwKn3RcsfK9abebkkobzmCBieavyV/3p/vV5dt6/BRoyHSL
xgjYtOV2nJYIjIagm30lvCzRgfnO+zAR2XqPR/tWgoB8NhwkM0oqvRmEr9wXKk//
j3QIIYnp3c64CiA9ujUem6mIlQRHVVf8jPfZ1pKe99zjxUN97o51mh9s1kjpbNlh
DeS+P5dRLGiqw89rS6qfxFCxDGQKR0Wqe+tYpkMOT5BOxfO6X7fKKc6d5eqn2rxe
oQZK9hmbqt7YlPq60GxDLcXJxXlK+qJcwEI6/vQL8WFs88QZPCHfrUNo3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOWpOn8FQddckW/cu+y31XvkDEgMB8GA1UdIwQY
MBaAFLzu9koubhHE3WrQW5bv9kTdtFevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mNWM0YmQtMjdiYi00OTlhLThhMDkt
MDAyZDg5Y2QxZjVhLzEvODVhazZmd1ZCMTF5UmI5eTc3TGZWZS1RTVNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mNWM0YmQtMjdiYi00OTlhLThhMDktMDAyZDg5Y2QxZjVh
LzEvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstRNMA0G
CSqGSIb3DQEBCwUAA4IBAQA18s+WyiCHnviDQhqsc62/3nyoMhsW4fqqeoIcSMAM
YKKuU3YvU19xowmX42f8EE1Rkx7ZcD6I8ZfEb2ZhS47ySHi9G1ME+dQudDZgPtEh
lbdRpQRaoALVZnMk86IVBs9UNt8ZvPl938692z8e67bTteK3JpXEM3yakL3RYQx6
5tW/PXIvgBr94k+ZM4+upoj1nPoGk6qMe5IGHwTMGxxA56MlvspqpdKLWz6Fbo9i
W3m09Mpy/KhgUNjNd5kI08otuheXMA8l8SVYg16jwup9oQ1d8H15HB9znvs6u/IG
5lcox5D2kRzVuW5L2GD8tzOuuQh+0IIg6HYB6g8M2jG4
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:42 2024 by rpki-client on console-fra.rpki-client.org