Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_ZY_BUl-ObVCMA4MrYNbnqh7m2Y.roa
File: _ZY_BUl-ObVCMA4MrYNbnqh7m2Y.roa (raw, json)
Hash identifier: v5lfq3dg3GybMNQ92tzUcresl8tVrrRwHCxJmguwjOE=
Subject key identifier: FD:96:3F:05:49:7E:39:B5:42:30:0E:0C:AD:83:5B:9E:A8:7B:9B:66
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC4847D5405E6F188266A8C4A8530
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_ZY_BUl-ObVCMA4MrYNbnqh7m2Y.roa
Signing time: Sun 01 Jan 2023 06:04:48 +0000
ROA not before: Sun 01 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198489
IP address blocks: 178.16.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c4:84:7d:54:05:e6:f1:88:26:6a:8c:4a:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd963f05497e39b542300e0cad835b9ea87b9b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:0b:ab:03:c1:fa:77:3e:eb:41:3a:dd:4c:
4a:1e:58:8c:cd:96:67:02:5a:b9:7f:37:2d:5b:a5:
27:8b:3d:39:89:a9:3e:e7:46:df:b4:80:2d:52:60:
c9:d8:e1:fa:47:bd:0d:87:5c:9c:aa:c4:76:c6:2e:
9d:44:89:b4:a7:98:85:f1:75:41:36:08:c4:7e:a2:
cb:4c:7f:62:b2:fa:68:60:f5:92:84:99:27:89:b0:
eb:d5:96:32:0e:1f:26:9c:bc:b0:36:ba:9d:02:40:
f1:41:15:41:24:ce:ee:6a:ba:20:b4:72:52:38:ca:
82:7d:b3:55:e8:52:a3:5b:f0:01:49:be:5d:d8:10:
7b:27:9d:54:ca:b9:0f:3a:13:b0:f3:fa:c5:ea:ee:
44:56:b3:1b:90:0e:71:3e:0a:09:80:c4:d1:84:22:
5c:63:f1:5c:66:84:69:50:4f:c1:c4:da:39:bd:ab:
01:e8:b6:3c:91:98:ce:c7:3a:35:42:f8:4a:c6:ab:
0f:62:eb:c9:3d:29:66:96:80:64:ab:87:96:50:87:
61:29:f2:35:e3:59:53:10:46:d0:7f:4e:d4:84:01:
3a:55:05:23:ec:47:f2:8a:2f:b9:1b:35:ac:f2:06:
01:31:52:cc:26:f8:6c:91:56:da:a3:ae:07:61:27:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:3F:05:49:7E:39:B5:42:30:0E:0C:AD:83:5B:9E:A8:7B:9B:66
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_ZY_BUl-ObVCMA4MrYNbnqh7m2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
79:13:87:5a:0b:33:fd:ae:57:5b:89:8f:34:2e:34:d0:c5:d8:
d3:ed:67:60:1b:f0:36:93:df:86:72:9e:35:47:9e:21:7e:21:
57:e7:38:35:a9:82:9d:42:60:5b:f6:5d:17:6b:cf:1f:70:82:
21:5c:4a:74:da:4d:e4:48:4a:03:f8:f1:b5:c3:4c:7c:55:f7:
77:a6:d5:c5:fa:91:4a:da:43:dd:fa:84:89:99:e4:b6:90:25:
3b:1d:4e:3f:32:30:dd:22:3e:60:18:36:89:f9:98:50:b1:3c:
b9:04:04:b5:0c:d1:5d:54:df:57:e0:38:70:01:c7:2b:e7:71:
51:37:bb:9d:8e:84:5c:4b:80:8b:2b:0d:6f:95:96:08:8b:f8:
63:a7:98:4b:fb:43:f2:cb:ab:ac:03:e7:b3:04:6e:6f:50:43:
ca:fa:ba:5a:14:03:eb:fd:8e:8c:da:06:1f:fc:75:c0:29:be:
06:08:c8:fb:9a:57:90:cd:4f:80:de:78:f6:73:38:4c:38:62:
b7:3f:db:a7:98:f1:32:a3:2a:94:62:2e:76:59:2b:a7:ee:17:
2a:2c:4b:1f:c9:8f:0a:99:59:8c:b1:05:a4:3f:3a:15:c1:c7:
09:d1:73:a9:fa:7a:42:90:0d:f5:9c:fd:64:15:6a:0c:b3:9c:
22:d8:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org