Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/V6mWn2wDY2Vn0G1e7a9E0ImFFu0.roa
File: V6mWn2wDY2Vn0G1e7a9E0ImFFu0.roa (raw, json)
Hash identifier: 0IYQv/p63HdCOUTgJ5rDGg1iI1XZ6J/LlLnzVItgoFU=
Subject key identifier: 57:A9:96:9F:6C:03:63:65:67:D0:6D:5E:ED:AF:44:D0:89:85:16:ED
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01856FA6F0BC63EC7F0849DDF126EF22D7A6
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/V6mWn2wDY2Vn0G1e7a9E0ImFFu0.roa
Signing time: Sun 01 Jan 2023 23:24:49 +0000
ROA not before: Sun 01 Jan 2023 23:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62337
IP address blocks: 178.175.164.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f0:bc:63:ec:7f:08:49:dd:f1:26:ef:22:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 23:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a9969f6c03636567d06d5eedaf44d0898516ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:09:8a:db:16:d1:3a:1f:d5:38:d4:ca:f6:
31:45:24:25:2d:f0:ac:ec:bd:e5:46:9a:1b:49:84:
da:4b:48:fc:59:56:ec:d8:75:7c:8f:d7:f9:ce:77:
19:af:38:b9:10:42:6b:50:45:67:a2:6b:31:e8:80:
7f:dd:c6:eb:3a:5a:93:56:ef:6a:8f:a5:fe:2c:e2:
65:7e:b6:35:21:b0:71:7b:ea:1a:28:5c:a9:37:38:
97:3c:5f:a9:30:a6:17:c6:52:34:4b:e2:6e:bd:be:
4f:16:23:ad:04:98:f0:04:ee:1e:7c:3e:8b:4f:3f:
f9:b3:1e:52:78:ec:8d:c0:02:5a:5d:63:6d:87:6d:
cf:44:8c:a8:98:6c:17:ff:27:a4:73:aa:f2:31:9f:
a7:27:a3:93:7d:4c:03:8f:c3:d4:c4:73:3a:c0:c4:
83:3e:69:56:a5:a2:51:96:af:9c:07:79:bb:5a:e7:
0b:d3:6d:ea:e2:a0:26:d2:59:af:b0:f2:01:14:63:
6d:1a:54:6c:96:97:36:17:c6:59:57:0b:e8:a5:43:
83:93:46:b6:4b:42:29:da:b2:3e:9d:e8:06:68:c9:
03:da:86:01:23:2f:17:8e:5b:26:79:03:61:6a:fb:
61:bd:e8:3b:c7:8a:32:f6:3e:9c:41:94:15:b4:a9:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:96:9F:6C:03:63:65:67:D0:6D:5E:ED:AF:44:D0:89:85:16:ED
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/V6mWn2wDY2Vn0G1e7a9E0ImFFu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.164.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:25:c7:64:d1:01:62:c1:05:fa:68:3e:ea:1a:da:25:ab:73:
6e:78:df:b7:4f:b4:ad:ef:b5:9e:3f:01:52:be:f0:80:a3:ed:
d0:97:f2:d4:27:4b:c4:bd:b9:a6:5e:99:3f:70:74:f7:77:6d:
ae:ae:1e:42:78:a2:09:b8:52:97:c6:db:da:6c:f8:df:5c:36:
f1:04:65:51:1e:20:64:95:4a:64:28:89:52:e4:60:99:f1:07:
b4:25:13:1b:3b:5c:df:23:6f:19:1b:4c:9a:4e:80:be:4e:cb:
32:6b:c3:46:3d:74:f1:dc:0a:07:c3:9f:6a:07:02:73:90:1d:
40:73:e5:32:73:ab:e5:aa:fc:b9:91:95:5a:77:81:01:91:04:
78:46:57:93:70:06:9e:af:82:68:22:43:5b:5a:34:f6:40:ee:
40:50:2a:1f:31:a3:d9:0f:bb:8b:fe:19:22:11:48:04:a3:b2:
85:d7:2b:da:f2:59:f3:03:c6:b1:50:1d:18:f6:1c:1d:cf:26:
60:57:93:50:e4:ee:12:a0:32:3b:29:3c:8d:84:57:05:2d:02:
28:59:da:95:56:82:4e:cf:97:7d:cf:85:d8:6d:13:c9:c8:79:
69:ac:c0:b2:02:ed:15:d5:10:0e:d0:d1:c8:21:07:2f:3a:f8:
73:01:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:56 2024 by rpki-client on console-fra.rpki-client.org