Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ur8c49L_YAiJ5o0OBwGFc3Gpd0E.roa
File: Ur8c49L_YAiJ5o0OBwGFc3Gpd0E.roa (raw, json)
Hash identifier: Ch/4VwFvCahhEb3JV2vbeoFNrn9chBvupfsNiOOxGB8=
Subject key identifier: 52:BF:1C:E3:D2:FF:60:08:89:E6:8D:0E:07:01:85:73:71:A9:77:41
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC69EA7D7C85B04DA12FFB380C770
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ur8c49L_YAiJ5o0OBwGFc3Gpd0E.roa
Signing time: Sun 01 Jan 2023 06:04:48 +0000
ROA not before: Sun 01 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199371
IP address blocks: 178.16.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c6:9e:a7:d7:c8:5b:04:da:12:ff:b3:80:c7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52bf1ce3d2ff600889e68d0e0701857371a97741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:e4:52:75:0f:c4:d8:28:5f:89:c3:05:65:
61:0d:8c:9b:77:60:60:a1:a1:92:da:0e:ba:50:aa:
d7:ff:0a:f6:58:1b:00:5b:a6:3a:b7:7a:8a:c2:a5:
f6:d6:bf:8f:d3:e8:a2:92:77:86:bf:d9:41:11:18:
47:59:c0:2b:4c:b8:ed:b8:6e:09:00:f5:61:fc:53:
d3:b2:9c:56:7f:68:bd:64:54:cd:4f:e4:26:02:8d:
48:89:6e:9c:cb:95:38:e3:7d:f7:61:68:85:ab:b3:
ae:27:7b:3d:f9:b9:86:e5:cd:6a:a2:09:c2:cb:a5:
b8:4d:69:9e:a2:dd:51:f0:77:55:5a:98:ed:97:ce:
26:71:4f:ec:0d:19:1d:88:e2:cf:c4:54:f9:be:11:
10:8d:f3:3e:b2:3a:99:fb:1e:d6:f1:d2:81:1e:6a:
c7:ca:f7:45:6a:c0:32:4e:7b:3e:5a:5a:54:5d:5e:
10:8d:b4:ff:c7:b9:db:57:aa:f1:f7:77:71:ab:fe:
e4:27:22:bc:43:27:2c:01:7e:e4:f5:2a:82:32:f3:
f6:69:79:f3:b2:69:84:ac:60:2c:b5:d6:8f:76:0b:
0d:89:85:8d:96:65:76:48:8d:ab:84:13:6f:94:b1:
73:fc:f8:c4:55:2f:3d:84:7c:02:d5:58:7b:4a:92:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:1C:E3:D2:FF:60:08:89:E6:8D:0E:07:01:85:73:71:A9:77:41
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ur8c49L_YAiJ5o0OBwGFc3Gpd0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.122.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c9:75:3d:58:ce:b0:38:f0:7e:57:0c:37:68:5d:c7:82:3e:
3e:c8:5c:80:e9:13:a9:0e:7d:2d:c7:f8:26:82:f3:d0:77:ec:
94:68:1a:6e:30:b8:02:25:c6:3d:75:9e:14:9a:48:55:93:31:
cb:2e:ab:01:86:ae:50:56:98:b9:f9:f9:41:aa:ae:36:f5:42:
99:e1:81:db:cc:91:60:b0:6d:60:25:97:1c:67:36:01:27:60:
c1:9c:17:5d:45:47:12:7c:81:e5:cb:cd:68:5a:8d:54:ab:85:
0d:c2:65:4d:2b:e1:44:8d:2e:30:74:db:ba:56:a5:ff:d1:e7:
56:df:89:3c:e6:5c:61:68:c2:52:1a:74:65:8c:27:c4:b9:3c:
46:9e:cf:e8:1a:71:c4:ea:51:7c:7c:70:c4:a3:b0:de:f1:d9:
2e:30:e7:91:65:24:85:bb:21:0d:49:16:44:ed:35:44:51:b6:
11:ab:4c:01:96:6d:81:36:b5:b1:8f:98:26:12:67:e9:d7:d4:
8a:ee:63:52:93:6e:9f:a1:b3:be:4e:08:bc:cb:d7:f7:c5:8d:
06:c8:20:bc:36:48:24:15:11:fd:84:69:f1:fb:7e:4c:6e:90:
f0:01:d6:67:1c:98:0e:ef:5b:72:3b:9a:98:35:26:2b:e2:c0:
3c:2a:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org