Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2I4_ConZV2lph5D6qOjBTtJKO3I.roa
File: 2I4_ConZV2lph5D6qOjBTtJKO3I.roa (raw, json)
Hash identifier: PvczEBMn+MmEbbbLLtWlAOykfgyLKA4mruRQHa62o30=
Subject key identifier: D8:8E:3F:0A:89:D9:57:69:69:87:90:FA:A8:E8:C1:4E:D2:4A:3B:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01893ECE8C06FE5A41D15326791041AED700
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2I4_ConZV2lph5D6qOjBTtJKO3I.roa
Signing time: Mon 10 Jul 2023 07:57:50 +0000
ROA not before: Mon 10 Jul 2023 07:57:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 178.215.239.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:ce:8c:06:fe:5a:41:d1:53:26:79:10:41:ae:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 10 07:57:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d88e3f0a89d95769698790faa8e8c14ed24a3b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:65:ae:8d:45:c8:1d:57:43:4f:87:34:cf:
72:cc:dc:9a:a3:1e:7f:e3:6b:02:e1:03:0c:7f:86:
fa:dd:6a:da:01:38:1b:5e:48:ab:8f:f0:97:d3:b6:
b2:bc:a0:f0:f4:73:9e:05:59:c1:93:3e:03:27:7b:
be:7b:8a:82:58:ac:0f:af:b4:1c:0d:49:c5:23:c2:
fb:a3:25:70:e4:6f:10:42:eb:96:06:2e:49:ce:6f:
f3:7d:21:51:fd:bc:f6:9e:0f:ac:c5:c9:0f:0b:d9:
49:c8:9e:61:19:c1:af:60:9e:e1:ef:d1:40:5e:a4:
94:a5:9b:a7:a0:6b:c5:7b:54:b6:86:cb:a1:27:58:
0e:d2:31:a7:fe:bd:bf:23:84:11:58:df:15:2c:2a:
ac:61:3f:56:3b:bd:4a:b0:29:f8:62:30:45:e8:4a:
ce:c6:65:d8:61:73:b5:31:dc:67:58:2e:69:c5:87:
87:19:69:6d:ab:47:dc:03:84:eb:1c:70:8c:bf:fa:
55:eb:89:e8:ae:06:fb:0d:28:26:40:94:c5:1c:60:
b3:15:21:ad:24:d4:9d:bb:00:1f:c2:6d:a2:65:17:
bd:6f:38:e6:12:1c:35:7f:0f:de:b2:54:62:09:1e:
9d:be:6b:56:4f:95:0e:62:b2:23:fa:5d:ae:ed:ef:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:3F:0A:89:D9:57:69:69:87:90:FA:A8:E8:C1:4E:D2:4A:3B:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2I4_ConZV2lph5D6qOjBTtJKO3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.78.0/24
178.215.239.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f9:fd:55:84:a4:76:bd:51:10:ff:33:27:43:36:ca:9c:0b:
28:5d:f6:72:6f:e3:de:b1:10:8a:b9:95:b0:ab:7a:4f:40:50:
78:b7:f4:cf:63:7e:7b:0d:6d:49:f7:e1:98:64:15:59:a4:91:
f2:2c:69:3b:4b:7b:19:ec:2e:62:00:1f:b7:e7:a0:48:db:2b:
d3:29:01:0c:58:a5:bf:f3:29:ac:46:0b:f0:10:53:ae:b6:e4:
eb:93:96:12:4d:49:f9:d0:ae:9b:90:a8:6c:54:ff:bd:a0:a9:
47:f5:bc:4a:05:a3:ba:06:a5:2a:e8:2e:83:19:a9:73:eb:11:
d5:48:1a:eb:83:c7:4f:01:d8:22:47:5f:62:a6:17:64:4b:d9:
76:f7:a4:28:48:9f:78:fc:23:69:36:08:ab:94:2f:d3:64:3b:
d7:a9:52:af:6f:6d:db:3c:aa:0f:2f:15:76:8f:75:0b:46:a5:
49:ab:e7:1a:46:dc:0d:9b:c6:69:17:d9:33:fd:01:ff:8a:93:
dd:85:74:75:00:40:15:c5:93:c5:e0:39:a1:b6:27:54:ea:fd:
12:fd:cd:1c:25:55:21:92:38:62:b8:bb:1a:ec:52:3e:81:a3:
93:0b:36:de:90:5e:38:e1:7f:d1:f0:1c:bf:85:ef:6d:a4:06:
75:2b:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org