Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/k-4iLIIuq8_GbVvddZiXFx3zzsk.roa
File: k-4iLIIuq8_GbVvddZiXFx3zzsk.roa (raw, json)
Hash identifier: J6DlNcI69LGDtGiH8M0lmatzDpQEY/GACZ3wCaDiqz4=
Subject key identifier: 93:EE:22:2C:82:2E:AB:CF:C6:6D:5B:DD:75:98:97:17:1D:F3:CE:C9
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 018572CC8FD79501934C3CC5F0EB0A91755E
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/k-4iLIIuq8_GbVvddZiXFx3zzsk.roa
Signing time: Mon 02 Jan 2023 14:04:46 +0000
ROA not before: Mon 02 Jan 2023 14:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30766
IP address blocks: 178.132.68.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:8f:d7:95:01:93:4c:3c:c5:f0:eb:0a:91:75:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 2 14:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93ee222c822eabcfc66d5bdd759897171df3cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:ab:fc:84:8b:26:7e:41:c4:75:b9:1e:25:
9e:85:8a:3d:96:aa:ff:8b:83:41:29:82:e4:15:e7:
ba:d6:c2:98:0c:29:37:85:c0:51:80:60:3e:49:dd:
c8:cf:39:7d:d9:e3:56:46:c4:b2:67:ca:b2:0b:2e:
54:09:d7:ed:db:8b:48:c5:33:6b:48:8e:b5:18:be:
67:dc:3f:1f:f7:38:d9:2f:09:2c:fd:a3:d4:cb:f0:
e0:62:19:78:44:a9:6f:3b:0e:c4:29:6b:67:47:e2:
de:65:3c:4b:96:db:cf:35:24:c8:d3:a3:93:eb:e1:
b0:29:80:90:a0:65:ee:7b:d4:de:ef:04:85:4c:9f:
dd:ea:31:bf:55:de:f8:8e:14:53:ef:16:41:c1:59:
fe:28:eb:35:6c:fe:37:62:90:69:48:c3:5e:fb:77:
f2:d5:5f:e5:45:13:72:52:72:60:6e:36:b9:ba:58:
a1:88:53:48:01:3e:38:0e:10:3a:48:f9:e2:93:61:
35:d8:50:35:4b:64:be:6e:68:72:f5:bd:da:31:93:
33:0e:70:da:3d:9e:5e:09:02:f1:ef:88:6a:b1:4a:
00:67:ec:df:76:5e:9f:0f:27:4e:b5:0b:19:32:e1:
5c:a1:d3:ed:f6:80:0c:ab:82:16:4d:8d:e8:94:8c:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:22:2C:82:2E:AB:CF:C6:6D:5B:DD:75:98:97:17:1D:F3:CE:C9
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/k-4iLIIuq8_GbVvddZiXFx3zzsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.68.0/23
Signature Algorithm: sha256WithRSAEncryption
46:16:66:90:3c:cb:a6:67:79:d2:40:e9:5b:05:3e:e3:28:44:
b8:32:ca:13:26:23:37:b2:e4:14:ed:e9:3c:ea:1c:c3:14:56:
da:65:34:24:1d:64:33:b8:0a:ee:cb:99:17:61:c8:c4:9b:6b:
49:43:59:ca:db:08:21:1c:54:15:c0:ad:a1:5c:a1:17:a5:90:
b7:85:70:c6:61:bd:1b:0c:81:62:89:9a:bb:a6:cd:c5:65:c6:
ae:9b:9f:91:cd:a7:5a:c0:2b:23:c6:c2:88:39:64:66:7f:05:
e0:9e:b1:87:f7:7b:70:92:5d:8c:de:56:df:1d:94:6a:ba:13:
c6:cc:6d:43:1b:c0:64:dc:e1:ef:ae:ab:2b:35:77:c1:92:b7:
41:04:22:78:ca:7a:c8:18:8d:56:f4:8d:48:9c:62:d7:26:78:
dc:d6:8d:3b:30:fb:01:96:d3:91:95:46:7a:8f:d1:af:c7:46:
8d:53:be:54:4c:92:7f:ee:ca:eb:22:cb:f0:7a:f8:a8:93:ce:
1b:fe:d4:c3:dd:90:c1:03:8c:77:ee:b5:53:29:44:d9:9c:f4:
43:85:1e:1b:59:b4:07:a2:99:56:68:76:14:c3:5a:ef:78:3d:
30:9e:14:66:38:73:e7:7d:64:e6:c8:92:eb:4a:7a:18:f6:80:
e2:5e:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:02 2024 by rpki-client on console-ams.rpki-client.org