Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zDAyWa2o99cejnlrBTcf5oHqV64.roa
File: zDAyWa2o99cejnlrBTcf5oHqV64.roa (raw, json)
Hash identifier: dew25nVhgGE0hr6IbDWGVdfyovKB+E4noozeNtDrD70=
Subject key identifier: CC:30:32:59:AD:A8:F7:D7:1E:8E:79:6B:05:37:1F:E6:81:EA:57:AE
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE945953029CBBF4620F10986885E76F8
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zDAyWa2o99cejnlrBTcf5oHqV64.roa
Signing time: Mon 08 Jan 2024 13:31:40 +0000
ROA not before: Mon 08 Jan 2024 13:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43359
IP address blocks: 178.238.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 15:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:45:95:30:29:cb:bf:46:20:f1:09:86:88:5e:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 13:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc303259ada8f7d71e8e796b05371fe681ea57ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:f8:c4:9c:93:02:ed:ec:d5:3b:19:57:68:
78:21:8e:dd:08:30:38:43:b6:0d:78:08:94:ba:f2:
e0:fe:e5:6a:5f:b2:7c:00:79:e3:66:53:62:ad:97:
0e:d3:52:e8:ba:83:95:da:06:81:2e:d2:a3:8f:1c:
8d:ba:ba:e6:80:11:57:99:47:ef:5d:aa:bd:ba:aa:
b5:e4:72:b6:7a:21:76:05:fb:3b:5a:0d:be:50:30:
b4:58:eb:0f:1c:98:be:2d:f2:c7:3d:db:01:81:6e:
b7:49:ae:06:db:66:9f:10:c5:62:10:8b:10:ba:64:
76:8f:4b:74:61:08:42:00:c7:c2:38:21:25:b7:c8:
e0:9e:96:56:71:b2:0f:8d:89:5d:a9:5d:4f:af:83:
a6:af:9c:1e:4e:e6:eb:1b:6f:ed:05:86:b4:58:11:
d8:9c:d5:dd:77:35:2c:e9:0c:6d:b8:53:13:55:51:
4b:78:23:5c:67:ae:3b:d2:f2:27:2e:cb:5c:48:93:
99:a3:86:81:95:e0:d1:35:be:8c:72:66:ef:61:57:
ef:85:59:91:20:d5:7e:78:98:52:8a:72:34:a4:76:
24:89:9a:8a:8f:73:f6:23:0a:46:32:af:c0:21:3a:
3f:c2:6b:4e:c1:83:4c:40:11:97:b6:40:b5:f2:28:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:32:59:AD:A8:F7:D7:1E:8E:79:6B:05:37:1F:E6:81:EA:57:AE
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zDAyWa2o99cejnlrBTcf5oHqV64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:96:49:39:a4:a8:4e:89:82:af:fb:02:e1:19:4e:ef:b9:8b:
53:32:f5:d7:99:98:84:a1:f4:85:09:2f:1a:5d:cd:d6:91:e0:
73:a8:5c:ce:63:7c:c2:7b:3a:76:53:15:3d:57:c8:83:b8:fe:
4a:f7:eb:57:ac:f6:55:39:a2:a6:67:ac:89:7f:21:ce:67:9f:
2d:91:c5:b1:ad:29:6b:7d:07:5a:5b:38:90:78:04:66:46:01:
df:04:2c:03:3e:67:bb:2d:93:42:2e:a1:27:72:08:f2:01:34:
b2:c4:12:65:85:78:0c:91:e1:72:a8:0e:f6:69:10:99:17:3b:
b0:09:60:f3:01:48:49:8b:1f:2f:43:29:bd:0c:10:ef:cb:89:
ad:cf:b3:94:86:24:39:1d:81:83:ac:fa:d5:8a:c9:1e:a2:d0:
1c:bf:7d:1e:09:9c:e4:c1:f3:24:bb:53:39:8c:63:36:b2:ce:
59:73:cd:dd:11:0e:85:96:53:78:19:bc:9a:12:5f:4f:60:46:
48:45:b2:cb:3a:d1:5a:72:a4:76:da:54:17:79:10:8b:9b:78:
bf:8d:28:3c:4c:e4:8d:bd:f2:bb:43:91:cd:4b:9c:87:71:c8:
23:09:24:3e:59:a4:2f:b0:b8:a4:d0:f8:95:a0:db:9f:1c:41:
30:ed:a5:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzpRZUwKcu/RiDxCYaIXnb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMTA4MTMzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzMwMzI1OWFkYThmN2Q3MWU4ZTc5NmIwNTM3MWZlNjgxZWE1N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9j4xJyTAu3s1TsZV2h4IY7dCDA4
Q7YNeAiUuvLg/uVqX7J8AHnjZlNirZcO01LouoOV2gaBLtKjjxyNurrmgBFXmUfv
Xaq9uqq15HK2eiF2Bfs7Wg2+UDC0WOsPHJi+LfLHPdsBgW63Sa4G22afEMViEIsQ
umR2j0t0YQhCAMfCOCElt8jgnpZWcbIPjYldqV1Pr4Omr5weTubrG2/tBYa0WBHY
nNXddzUs6QxtuFMTVVFLeCNcZ6470vInLstcSJOZo4aBleDRNb6McmbvYVfvhVmR
INV+eJhSinI0pHYkiZqKj3P2IwpGMq/AITo/wmtOwYNMQBGXtkC18iizLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwwMlmtqPfXHo55awU3H+aB6leuMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvekRBeVdhMm85OWNlam5sckJUY2Y1b0hxVjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu7QMA0G
CSqGSIb3DQEBCwUAA4IBAQAPlkk5pKhOiYKv+wLhGU7vuYtTMvXXmZiEofSFCS8a
Xc3WkeBzqFzOY3zCezp2UxU9V8iDuP5K9+tXrPZVOaKmZ6yJfyHOZ58tkcWxrSlr
fQdaWziQeARmRgHfBCwDPme7LZNCLqEncgjyATSyxBJlhXgMkeFyqA72aRCZFzuw
CWDzAUhJix8vQym9DBDvy4mtz7OUhiQ5HYGDrPrViskeotAcv30eCZzkwfMku1M5
jGM2ss5Zc83dEQ6FllN4GbyaEl9PYEZIRbLLOtFacqR22lQXeRCLm3i/jSg8TOSN
vfK7Q5HNS5yHccgjCSQ+WaQvsLik0PiVoNufHEEw7aX9
-----END CERTIFICATE-----
Generated at Mon Jan 8 18:04:54 2024 by rpki-client on console.sobornost.net