Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-1GR2Q_la_-IDWIZH38iwpRtuVg.roa
File: 1-1GR2Q_la_-IDWIZH38iwpRtuVg.roa (raw, json)
Hash identifier: +2R2aNoNwyvqefLW/ydAoYdA1Y+HEBI88sITIIzHHCQ=
Subject key identifier: FB:51:91:D9:0F:E5:6B:FF:88:0D:62:19:1F:7F:22:C2:94:6D:B9:58
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42551C48D2AAC2E024FB6B15B4C7A1E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-1GR2Q_la_-IDWIZH38iwpRtuVg.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 178.218.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 16:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:51:c4:8d:2a:ac:2e:02:4f:b6:b1:5b:4c:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5191d90fe56bff880d62191f7f22c2946db958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:8e:78:15:e3:a6:21:a1:72:74:e4:a2:1f:
a7:05:a9:52:51:b8:0f:3c:1b:3c:d4:48:b4:f5:c1:
a7:b7:ce:b8:83:68:47:c7:94:00:7d:84:61:d8:31:
5c:4b:31:9e:73:9b:c9:a6:b3:72:2e:31:97:d1:8f:
34:3c:ba:ba:c6:ff:e3:3c:b4:6f:a3:13:60:0d:53:
3a:eb:75:15:46:fe:2d:f7:08:1b:0f:f2:27:66:34:
3d:54:3f:77:0d:81:5a:b3:f3:f6:fd:c8:96:6e:a1:
b5:35:20:95:b1:2d:b5:df:84:5f:ce:dc:34:ef:ea:
c4:c5:a8:4a:94:7a:d3:58:90:de:7c:b9:f2:3b:08:
55:44:e8:2e:90:72:f4:7d:a8:35:70:f3:80:06:79:
2e:d0:9f:e4:46:5b:06:c5:f7:6a:61:b5:0d:33:b4:
e5:9a:dd:e2:0e:bd:e8:61:2a:33:ca:14:bd:da:93:
dd:2a:1f:7a:22:06:55:e0:42:bc:d4:27:0a:35:ab:
a9:dd:fc:8c:79:75:42:44:bb:1b:5b:b6:b8:77:63:
4b:7c:4f:64:cd:28:1a:3a:e9:60:a8:d0:2b:93:32:
52:1d:c5:b5:d6:13:9c:ba:91:86:12:27:bf:5d:ae:
a9:5d:04:28:1c:49:d8:f1:d1:b0:19:18:b3:18:f0:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:91:D9:0F:E5:6B:FF:88:0D:62:19:1F:7F:22:C2:94:6D:B9:58
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-1GR2Q_la_-IDWIZH38iwpRtuVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e5:bf:6a:e9:0a:6a:5c:e2:48:c4:58:b2:4f:09:72:aa:f5:
ec:63:14:92:36:a6:8e:9b:b1:11:a3:aa:bf:90:df:40:18:94:
24:81:b1:83:3b:f0:b8:6b:53:2a:87:4a:cd:ad:4c:78:51:df:
f4:5c:c7:e2:cc:20:3c:b7:2b:cf:98:c1:04:7d:74:85:58:fd:
ee:d1:2f:cc:85:d6:25:48:3a:d8:e8:09:c0:e7:e8:0b:aa:4e:
c5:a6:0a:40:fe:e6:78:4c:93:87:93:fd:9e:48:45:ee:d8:60:
83:74:ae:c0:ed:34:01:1e:f8:99:40:53:16:95:bf:9d:e3:73:
36:a5:03:5a:5b:37:b3:d6:75:3f:9c:8b:e1:3e:dc:ff:fc:b6:
d3:97:61:53:e9:24:ae:bb:3f:56:a8:48:15:69:be:35:21:61:
69:04:4d:3b:34:aa:25:50:18:ec:42:45:09:1b:27:a0:46:a1:
8b:a4:28:ba:96:2d:9f:8e:10:82:92:8a:07:5b:71:36:ca:b1:
c3:c5:6d:8d:06:d1:de:82:11:a2:2a:88:8a:9a:6a:ef:81:2d:
54:ed:ef:c6:f1:a1:a4:29:61:c2:30:db:82:56:fe:21:bf:44:
6d:12:2a:94:33:2d:9d:43:56:6f:d1:61:08:bc:ec:bf:75:3c:
8e:78:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org