Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/Znqpn_x2rxonOMM1a1RxAaaavbs.roa
File: Znqpn_x2rxonOMM1a1RxAaaavbs.roa (raw, json)
Hash identifier: LiUVKulbcO07+C646l/A5J228S2yU2E32qvkhd3wfyA=
Subject key identifier: 66:7A:A9:9F:FC:76:AF:1A:27:38:C3:35:6B:54:71:01:A6:9A:BD:BB
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 018CC2DB307E1BD4151947590B5F12822568
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/Znqpn_x2rxonOMM1a1RxAaaavbs.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210220
IP address blocks: 178.218.244.0/22 maxlen: 22
2a0d:bfc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:7e:1b:d4:15:19:47:59:0b:5f:12:82:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667aa99ffc76af1a2738c3356b547101a69abdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:48:83:33:9d:90:6e:ea:89:22:95:e8:6b:
a4:4c:e7:30:30:53:ef:87:2c:9e:23:5b:32:72:2e:
8b:69:91:1d:40:e5:c3:ca:88:f1:3d:ed:e9:03:66:
91:84:81:57:18:de:a0:d9:81:45:f0:0f:5c:aa:11:
5a:4a:d1:4e:f1:87:dd:fa:e6:33:37:f2:58:b1:e5:
98:72:66:96:17:94:07:e7:a5:e4:c3:d8:55:fa:80:
92:a5:9e:96:c2:46:ed:29:b5:26:7b:70:12:7b:1c:
79:ed:48:31:32:a1:46:b5:0e:f8:c2:5d:cd:58:ee:
2a:99:f1:d0:9c:d5:8b:ce:ee:48:da:53:4e:ce:19:
53:ba:0b:ed:14:69:41:49:8c:40:0f:e9:70:0b:96:
3d:80:e1:42:fb:de:53:1e:b7:52:62:bf:ad:19:1c:
d4:ab:9f:2f:fd:db:4c:6a:b0:37:92:40:b2:54:2c:
d4:a3:24:61:47:a8:75:f8:da:5c:0c:18:10:e5:c1:
a9:fc:ae:cc:d7:7a:9b:46:f5:55:ec:bf:f3:2d:bd:
32:ee:47:d8:22:b0:d7:d3:58:4a:2e:86:19:19:6d:
b3:12:f5:7c:a8:d2:6a:b0:20:f3:90:18:70:9e:65:
9a:a9:35:74:a3:02:5d:0a:9d:25:d8:8a:6a:1a:8b:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:A9:9F:FC:76:AF:1A:27:38:C3:35:6B:54:71:01:A6:9A:BD:BB
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/Znqpn_x2rxonOMM1a1RxAaaavbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.244.0/22
IPv6:
2a0d:bfc0::/32
Signature Algorithm: sha256WithRSAEncryption
da:ed:df:46:fd:5a:a7:f9:cf:e7:6b:fd:13:1e:11:5a:ec:f5:
af:bd:86:5c:be:60:a3:d3:e8:c5:d9:e2:95:fd:43:af:cf:c1:
3b:1f:4e:29:86:33:44:fa:6c:04:8d:53:64:91:96:71:29:64:
6d:c0:74:97:3b:94:8b:ba:2a:61:a8:bd:8d:bd:a9:cc:57:dd:
3d:64:67:94:ed:c6:a3:4b:c0:68:1b:02:6f:a2:75:48:b8:0f:
0d:f3:8f:7e:be:9e:aa:8e:16:ce:77:fb:b1:5c:36:e2:b7:e4:
72:bb:20:65:99:ae:42:09:a5:eb:56:07:0d:0d:fc:67:20:70:
b1:3c:a4:9f:ac:af:07:a7:54:45:cf:ca:a3:e6:94:13:ba:69:
78:08:89:2e:da:ee:19:cf:77:cd:d8:fe:20:1b:89:9e:1a:a0:
6c:4e:fa:54:dd:0e:8b:c5:7c:69:48:10:d2:75:92:e3:81:ac:
6f:84:dd:c9:35:5d:26:cb:75:57:54:f9:18:d9:e6:91:5f:90:
04:1e:dc:ff:6c:c9:60:49:d7:55:94:d5:00:e0:b5:e8:2e:f1:
0d:40:db:a4:fc:f1:55:7f:d8:e0:21:39:e7:52:7b:fc:2e:69:
80:d1:2b:c0:f5:95:5a:b7:b3:05:6c:6f:ce:33:83:c1:a6:fc:
83:5f:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org