Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/ASWobkpU5dhERJZ9OlhKxgcKzhw.roa
File: ASWobkpU5dhERJZ9OlhKxgcKzhw.roa (raw, json)
Hash identifier: lNZQ/bxfayUMGzZkPjeEVRnt3VTSYR2ZygqRTshWSaE=
Subject key identifier: 01:25:A8:6E:4A:54:E5:D8:44:44:96:7D:3A:58:4A:C6:07:0A:CE:1C
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: 018572E82CD674ABB53962F0A7DB0E60BC41
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/ASWobkpU5dhERJZ9OlhKxgcKzhw.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202470
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2c:d6:74:ab:b5:39:62:f0:a7:db:0e:60:bc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0125a86e4a54e5d84444967d3a584ac6070ace1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:8c:57:e5:bb:06:85:34:3c:e7:b7:b0:18:
2e:e7:98:02:22:29:2c:59:79:ca:d1:e6:db:bd:9f:
40:e0:d1:08:63:1f:c9:51:55:14:2c:c2:8d:73:65:
c4:c1:f2:72:a9:f2:0c:00:68:0a:bd:8b:64:88:a3:
5f:bf:a7:b3:a2:92:14:7d:57:d9:59:a8:bb:dd:67:
d3:a5:84:c0:22:b0:db:d1:b9:0d:b2:9a:34:a8:69:
c7:9f:c0:4a:b6:25:3b:00:52:73:dc:4d:fc:43:1c:
a3:50:8b:4e:15:02:ee:64:54:58:e1:34:ee:05:b0:
73:38:71:25:5f:18:4e:4a:75:82:58:70:35:a4:bf:
1f:a2:e4:d0:29:aa:b7:af:4e:48:99:0d:8e:0b:c5:
c9:47:8f:ca:80:37:7b:c7:fe:25:42:c4:f3:4b:d3:
5f:26:e9:48:42:57:96:18:9f:cb:66:32:c9:7b:bf:
ff:b2:a0:16:30:55:81:3e:52:f1:bc:4e:68:bc:b3:
18:b7:97:c9:ab:fe:e6:5f:23:bc:dd:ed:f5:bf:8c:
de:bc:09:79:cd:c5:f0:35:82:7a:9e:06:65:8a:27:
4c:fd:32:b4:cb:12:8c:7a:77:01:dc:64:4a:4d:58:
60:7a:f3:fa:4f:2f:25:9f:10:a9:dd:91:0d:63:bf:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:A8:6E:4A:54:E5:D8:44:44:96:7D:3A:58:4A:C6:07:0A:CE:1C
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/ASWobkpU5dhERJZ9OlhKxgcKzhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
22:37:2b:40:b5:d9:d7:3b:f9:04:ee:02:6e:72:fd:12:b6:a0:
73:7e:c6:7f:8c:af:f6:89:c9:55:08:42:2a:72:e1:5c:80:05:
d0:1f:ed:75:2c:d5:0a:03:f8:e0:fe:cd:19:64:b5:17:4d:fa:
71:6f:84:75:5c:b6:e0:4d:86:c2:30:a3:6d:5a:2a:3e:4c:37:
b9:89:84:7d:0b:92:f0:af:ea:25:fa:71:a5:4d:3f:28:e1:1f:
42:e2:0a:14:4a:04:e0:9e:b2:3f:cf:5f:7a:4e:0f:d6:c1:ad:
3c:c0:10:d0:0f:3f:de:2e:6e:f2:24:6c:d0:4f:f2:fa:4f:ff:
49:5b:55:ff:95:a5:e9:22:a5:ad:59:e4:bf:e6:b5:79:12:78:
91:16:c0:f5:e0:c2:c3:42:7a:ec:46:a7:50:7b:db:5f:ba:22:
3e:a7:4a:80:c6:9b:69:89:e0:4c:f0:6a:a9:b3:f8:ab:97:b4:
78:f9:67:cb:e8:0d:1e:ea:7d:9a:50:7b:67:bb:fc:38:c9:b1:
05:1c:e9:9e:ad:cb:af:99:52:8d:2b:7d:2e:c4:ed:95:6e:4f:
52:55:d2:fd:6d:cd:1f:56:96:ee:e1:7f:9b:6a:8a:61:78:dc:
45:34:d5:51:f0:11:c8:36:65:5f:28:76:08:ae:17:d2:f7:e1:
0f:76:4d:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6CzWdKu1OWLwp9sOYLxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWVmNjRhMmU2ZTExYzRkZDZhZDA1Yjk2ZWZmNjQ0ZGRi
NDU3YWYwHhcNMjMwMTAyMTQzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI1YTg2ZTRhNTRlNWQ4NDQ0NDk2N2QzYTU4NGFjNjA3MGFjZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfqMV+W7BoU0POe3sBgu55gCIiks
WXnK0ebbvZ9A4NEIYx/JUVUULMKNc2XEwfJyqfIMAGgKvYtkiKNfv6ezopIUfVfZ
Wai73WfTpYTAIrDb0bkNspo0qGnHn8BKtiU7AFJz3E38QxyjUItOFQLuZFRY4TTu
BbBzOHElXxhOSnWCWHA1pL8fouTQKaq3r05ImQ2OC8XJR4/KgDd7x/4lQsTzS9Nf
JulIQleWGJ/LZjLJe7//sqAWMFWBPlLxvE5ovLMYt5fJq/7mXyO83e31v4zevAl5
zcXwNYJ6ngZliidM/TK0yxKMencB3GRKTVhgevP6Ty8lnxCp3ZENY78T9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAElqG5KVOXYRESWfTpYSsYHCs4cMB8GA1UdIwQY
MBaAFLzu9koubhHE3WrQW5bv9kTdtFevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mNWM0YmQtMjdiYi00OTlhLThhMDkt
MDAyZDg5Y2QxZjVhLzEvQVNXb2JrcFU1ZGhFUkpaOU9saEt4Z2NLemh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mNWM0YmQtMjdiYi00OTlhLThhMDktMDAyZDg5Y2QxZjVh
LzEvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstRNMA0G
CSqGSIb3DQEBCwUAA4IBAQAiNytAtdnXO/kE7gJucv0StqBzfsZ/jK/2iclVCEIq
cuFcgAXQH+11LNUKA/jg/s0ZZLUXTfpxb4R1XLbgTYbCMKNtWio+TDe5iYR9C5Lw
r+ol+nGlTT8o4R9C4goUSgTgnrI/z196Tg/Wwa08wBDQDz/eLm7yJGzQT/L6T/9J
W1X/laXpIqWtWeS/5rV5EniRFsD14MLDQnrsRqdQe9tfuiI+p0qAxptpieBM8Gqp
s/irl7R4+WfL6A0e6n2aUHtnu/w4ybEFHOmercuvmVKNK30uxO2Vbk9SVdL9bc0f
Vpbu4X+baopheNxFNNVR8BHINmVfKHYIrhfS9+EPdk0Y
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:54 2024 by rpki-client on console-ams.rpki-client.org