Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/A07eXXDNmY2cQ3T__s135X1HQWI.roa
File: A07eXXDNmY2cQ3T__s135X1HQWI.roa (raw, json)
Hash identifier: O3cbUQbRqCT1qY6fHvfgijya165oY5RzHQtgt9AbDkY=
Subject key identifier: 03:4E:DE:5D:70:CD:99:8D:9C:43:74:FF:FE:CD:77:E5:7D:47:41:62
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01856FA6EFD0CCDBFC5BC63A8EEF453EAA26
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/A07eXXDNmY2cQ3T__s135X1HQWI.roa
Signing time: Sun 01 Jan 2023 23:24:49 +0000
ROA not before: Sun 01 Jan 2023 23:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57776
IP address blocks: 178.175.156.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ef:d0:cc:db:fc:5b:c6:3a:8e:ef:45:3e:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 23:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=034ede5d70cd998d9c4374fffecd77e57d474162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:87:51:fe:d0:08:04:ac:ba:d2:72:df:17:
93:77:e3:90:ab:9e:f0:f4:58:fb:05:8a:f0:a2:a2:
52:54:70:a9:21:99:fb:02:0a:21:16:06:3f:66:64:
4c:81:8c:76:06:6b:80:7a:6f:a5:31:36:5a:42:e6:
bd:ce:a3:54:08:f8:3c:d9:09:cc:7f:42:23:c6:b8:
d5:3c:4c:7f:28:86:70:47:3a:d4:f7:ed:36:24:75:
63:7c:1d:81:71:49:71:a8:de:d1:18:14:fb:1c:c5:
a7:5f:7a:58:ae:10:4f:c3:e6:96:cd:03:5e:e4:4e:
bb:4c:1c:bd:a9:cd:69:ca:58:5b:71:70:32:b4:31:
cb:9b:d6:fa:35:36:fd:7c:31:72:59:14:b9:b1:c4:
b8:63:a4:ce:bd:94:9d:47:02:5e:4d:a5:0b:9d:f1:
b3:08:a9:bd:0b:78:cc:0d:e5:a9:f7:78:72:ac:16:
f2:84:7b:5c:b8:a0:45:5f:1c:1a:1f:f9:0e:74:10:
dd:af:f8:ea:29:6e:94:2a:56:f0:5e:00:b3:d3:00:
a3:0c:67:b0:b8:b2:df:eb:33:22:da:b8:84:11:59:
2a:f2:ad:ab:e7:d9:08:09:63:ce:03:72:86:64:7c:
9a:ef:c7:ab:39:ac:2d:43:78:c1:9d:e2:fc:eb:e3:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:DE:5D:70:CD:99:8D:9C:43:74:FF:FE:CD:77:E5:7D:47:41:62
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/A07eXXDNmY2cQ3T__s135X1HQWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:9c:d8:88:0d:e1:39:fd:97:85:8e:8b:20:20:95:bd:ba:22:
21:1c:d1:b9:6f:4e:8d:95:6b:21:56:f7:a9:49:70:3a:e1:9b:
fa:a5:f9:52:dd:83:88:cc:d1:bf:dd:d9:a9:86:a5:86:3a:f1:
7d:de:8b:cd:0e:16:0d:cb:8b:f5:9b:87:7c:e0:c9:71:15:3d:
59:2c:94:8d:43:c2:ba:2d:31:aa:7c:08:ce:bf:d8:95:bb:a9:
a1:fb:b7:fd:93:c3:36:9a:4e:42:00:5e:a8:10:51:02:25:84:
b3:f2:bc:f5:79:0d:fd:84:a0:d5:1b:12:9b:a4:55:65:df:fd:
59:79:b8:90:3d:d9:8b:7e:ba:c6:3a:b0:a1:c9:af:a2:5d:f1:
02:7f:68:f7:cf:9a:aa:9e:e1:af:30:6a:5d:f5:bc:18:1d:3e:
5d:a6:3c:cc:c0:b0:b5:76:12:1e:9e:f6:34:74:ed:b8:96:9b:
a4:b3:2b:9a:3c:73:c5:ef:4b:ba:5a:c0:f9:ef:ff:83:df:f0:
37:1c:fc:01:93:d7:b0:ab:b3:86:52:a9:e8:0e:e8:fb:b7:96:
15:a2:cb:be:b4:50:da:da:5c:a8:f7:87:07:aa:6d:84:ee:78:
61:b1:af:bf:97:96:c2:3e:58:52:00:ca:5f:cd:70:8e:ed:23:
e5:30:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:56 2024 by rpki-client on console-fra.rpki-client.org