Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/ooxX6rzM58Hho62SX5o3G3QX6SM.roa
File: ooxX6rzM58Hho62SX5o3G3QX6SM.roa (raw, json)
Hash identifier: DkwO1Nd4ajB67AJA2gUPi4pd7ulLJz9VReM4DYY7It0=
Subject key identifier: A2:8C:57:EA:BC:CC:E7:C1:E1:A3:AD:92:5F:9A:37:1B:74:17:E9:23
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 018571150F84DA859CA497920A97DCE72686
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/ooxX6rzM58Hho62SX5o3G3QX6SM.roa
Signing time: Mon 02 Jan 2023 06:04:43 +0000
ROA not before: Mon 02 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51002
IP address blocks: 178.217.12.0/24 maxlen: 24
178.217.13.0/24 maxlen: 24
178.217.14.0/24 maxlen: 24
178.217.15.0/24 maxlen: 24
178.217.8.0/21 maxlen: 21
178.217.9.0/24 maxlen: 24
178.217.10.0/24 maxlen: 24
178.217.11.0/24 maxlen: 24
178.217.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:0f:84:da:85:9c:a4:97:92:0a:97:dc:e7:26:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Jan 2 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a28c57eabccce7c1e1a3ad925f9a371b7417e923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:5a:54:65:e4:f6:e7:0b:a6:e0:14:b0:1f:
6f:8b:c8:90:8c:33:2c:59:b2:3c:f6:b7:84:eb:a2:
2e:2c:ce:5e:9f:a7:8f:d9:c8:73:c2:fd:c2:6b:cd:
53:ce:b1:0b:1a:a5:52:01:20:3a:83:34:79:86:7d:
09:ff:95:80:3b:c4:85:20:e4:9b:33:c2:a4:7b:db:
ad:e3:01:cc:fb:c1:29:1f:9d:4b:6b:ed:b7:60:92:
3d:35:72:eb:6e:bf:26:9e:76:20:3d:dc:92:31:89:
76:8f:c0:6f:2e:21:c6:7c:27:cd:84:ca:24:7c:13:
e1:ff:23:4e:d8:9e:9e:a0:93:11:65:24:a0:fa:b7:
6a:b5:cf:2d:de:d3:b0:7a:a1:f5:19:a0:d4:af:7f:
2f:9d:e3:fa:20:9f:80:0a:a8:1a:9f:03:4f:3f:be:
ab:c8:84:d7:35:12:ba:bc:96:d2:dd:4b:a8:26:bf:
4a:9d:20:a9:ea:f1:cc:ff:bb:1e:0a:19:53:72:e4:
17:9c:3c:9a:fa:64:68:86:a0:32:b0:27:a7:ec:be:
7e:9c:e1:1e:5d:c7:a7:fb:31:bd:47:e5:7a:ee:8b:
c6:07:75:d5:1f:ca:78:01:a4:7a:73:80:5e:b6:9c:
2b:b4:1d:a7:0b:c4:68:3d:42:0c:6b:84:1a:37:1e:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:57:EA:BC:CC:E7:C1:E1:A3:AD:92:5F:9A:37:1B:74:17:E9:23
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/ooxX6rzM58Hho62SX5o3G3QX6SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.8.0/21
Signature Algorithm: sha256WithRSAEncryption
57:5f:72:f2:2f:b4:1a:6c:a4:5a:4a:ef:bf:16:da:15:2d:69:
24:e6:47:4c:50:0e:40:ee:ed:1b:d2:2f:1e:7b:ab:6c:e9:0e:
f6:c5:ff:47:fd:ef:6f:fb:08:50:f4:c3:1b:1c:3d:8c:fe:30:
3d:a8:fd:87:10:32:7f:34:87:5d:cb:3c:0b:19:7a:27:7d:e7:
19:f3:77:4b:4e:07:c7:b7:86:e4:fd:fc:89:0a:ef:e5:26:bd:
e6:2f:1c:de:d9:67:38:6b:d4:1a:dd:af:c1:f5:a5:75:92:a8:
9f:01:6c:ab:95:fe:b3:6d:a4:8a:81:2e:4f:47:90:79:b0:11:
31:c9:28:ee:19:ea:97:de:95:18:27:62:94:8d:4c:5e:02:6a:
bf:83:15:c3:91:3c:5f:db:79:a3:79:e7:57:96:92:8c:6e:72:
bd:58:f9:c9:60:55:41:4e:31:a4:93:fe:62:86:46:6c:78:4b:
47:a5:3b:c1:3d:01:db:0d:f7:2e:f8:5c:88:3f:4c:cc:d8:ef:
80:d1:d4:2a:28:76:62:9e:77:42:ab:79:35:3e:11:c1:ef:bc:
30:d5:87:1b:3c:2e:f7:e3:28:dc:82:c5:ef:41:47:4c:92:5c:
39:a3:8f:be:ac:ca:53:a5:00:68:d0:6b:18:0d:da:02:2f:e5:
62:c4:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:26 2024 by rpki-client on console-fra.rpki-client.org