Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Db-kU9KMye3ZWzSwnC827Fx4O0Y.roa
File: Db-kU9KMye3ZWzSwnC827Fx4O0Y.roa (raw, json)
Hash identifier: pg0EbCD4+wUvrKYFrXQ2tPJEKVOsKhYAEQYL2220u6g=
Subject key identifier: 0D:BF:A4:53:D2:8C:C9:ED:D9:5B:34:B0:9C:2F:36:EC:5C:78:3B:46
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191BD343D479A1FEA405CD7978BD425DE91
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Db-kU9KMye3ZWzSwnC827Fx4O0Y.roa
Signing time: Wed 04 Sep 2024 13:23:23 +0000
ROA not before: Wed 04 Sep 2024 13:23:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 178.215.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 14:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:34:3d:47:9a:1f:ea:40:5c:d7:97:8b:d4:25:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 13:23:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dbfa453d28cc9edd95b34b09c2f36ec5c783b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:5a:f2:06:24:4a:29:97:84:7d:e1:9a:8e:
3a:39:b0:db:63:cb:88:6a:1e:cf:bd:13:9c:fa:d0:
e0:60:d3:a8:62:3c:51:7a:87:b7:df:04:4c:c3:bc:
11:b3:a2:9e:42:24:f7:b2:04:ea:66:18:5b:94:b7:
ab:c7:73:cb:ce:94:5d:32:86:9e:cd:15:da:39:d7:
be:12:e7:8f:de:41:62:bf:f8:e5:03:65:8f:9e:a2:
a6:6a:30:a9:98:2b:7b:7a:c5:d5:95:c7:1a:3b:6c:
f0:44:6d:65:41:f6:61:d7:eb:3f:b1:ed:5c:d9:44:
14:58:da:2f:46:4a:f2:03:b5:ab:ff:d6:93:2f:af:
be:f6:90:2c:7d:b9:ae:70:5d:87:8f:da:03:18:98:
fd:fe:60:50:b2:b4:14:57:31:61:06:ba:14:75:0c:
65:08:35:56:47:64:4b:57:70:da:28:fb:af:e4:b7:
f0:7f:e6:d4:e0:c7:d6:6c:13:85:bf:56:1e:a3:b9:
e2:89:6c:14:94:e8:e0:7d:be:00:84:c4:c4:81:b0:
5a:6e:d0:27:00:b5:98:07:da:60:dc:a3:91:c7:d7:
79:ff:97:6c:8a:04:51:48:8f:af:b8:33:05:32:5f:
a2:b3:97:72:c7:ef:ff:75:24:87:f9:c7:87:43:6e:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BF:A4:53:D2:8C:C9:ED:D9:5B:34:B0:9C:2F:36:EC:5C:78:3B:46
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Db-kU9KMye3ZWzSwnC827Fx4O0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e1:2d:31:dc:b2:47:fe:3f:c3:80:d0:ea:b7:0c:46:aa:4e:
39:d1:d5:89:2a:76:10:f9:ae:27:6f:a4:e6:9b:66:0a:c7:6a:
a6:ef:d7:cd:80:b4:d0:b9:8e:16:60:0d:be:0e:dd:71:9a:a9:
61:74:27:08:5e:57:7e:5a:ae:1d:aa:89:ae:dc:d6:6d:54:64:
cd:73:2f:91:12:36:f4:6d:f3:1c:2e:f7:63:fb:5d:25:ca:26:
ad:45:bb:f3:ee:5b:c5:5b:05:38:70:69:9a:9f:d0:1e:d0:e9:
d8:58:28:18:2e:54:df:93:1e:1c:f7:34:71:45:8d:d4:30:ae:
d1:3f:a0:49:23:91:ae:80:11:d0:e4:a7:75:6a:9c:52:41:5c:
99:7c:7f:90:01:ce:d6:6f:8f:8b:79:4c:4e:ee:63:78:28:83:
bb:b1:9e:90:16:74:94:b2:d0:2e:a9:38:12:cd:71:43:90:1f:
02:e3:61:71:9a:e8:be:9c:26:61:1e:a9:e0:ae:4f:d2:8f:31:
c4:86:9e:1a:0f:56:ce:ff:2a:00:52:da:a5:b9:a1:a5:13:c2:
c8:25:98:db:63:81:82:45:13:15:c6:49:b0:b0:95:74:44:9f:
4a:60:fc:e7:53:c4:cb:cb:4f:88:db:38:27:db:31:b7:9a:3c:
9e:9f:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 16:54:14 2024 by rpki-client on console-fra.rpki-client.org