Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vtJbe_2DJHWq81ERWHmsvA3qdLc.roa
File: vtJbe_2DJHWq81ERWHmsvA3qdLc.roa (raw, json)
Hash identifier: auhXAXCukZDeXL/K5Qx/F8D2+htRzE9Othb+WPB36ps=
Subject key identifier: BE:D2:5B:7B:FD:83:24:75:AA:F3:51:11:58:79:AC:BC:0D:EA:74:B7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018573901109838EF1322CA86803F8205C18
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vtJbe_2DJHWq81ERWHmsvA3qdLc.roa
Signing time: Mon 02 Jan 2023 17:38:19 +0000
ROA not before: Mon 02 Jan 2023 17:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212508
IP address blocks: 178.218.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:11:09:83:8e:f1:32:2c:a8:68:03:f8:20:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed25b7bfd832475aaf351115879acbc0dea74b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:64:dc:24:49:84:d5:50:8b:74:89:87:2c:
80:7d:2a:e6:a4:f5:6d:26:5e:67:27:93:52:7f:b1:
b4:54:8c:53:ed:a9:1d:13:2f:96:00:f0:16:d1:70:
a6:6e:f7:e5:8a:8a:7c:2a:0e:54:eb:17:23:f0:2a:
9c:e4:1e:29:4c:8e:22:4b:a1:18:f3:03:48:95:72:
ea:42:46:d8:9a:11:ec:7c:24:0f:a9:78:3f:83:b0:
7e:d1:c6:8b:0e:14:e8:72:a5:2b:54:86:b6:6c:95:
af:75:b9:1f:83:0e:e5:a1:bb:cc:e2:2a:ce:47:14:
af:ab:10:a8:c8:ed:ef:7c:b7:d0:f0:d9:e1:e3:2a:
8b:41:af:d7:19:18:34:95:10:0b:5e:06:2f:b5:49:
54:d6:01:86:8f:29:9c:e3:fd:b9:76:03:54:35:62:
a3:72:33:0d:f9:61:0f:4c:20:87:71:38:2b:11:0b:
cc:00:fc:9c:62:5f:45:c7:6b:b0:01:3b:b0:38:53:
fa:39:62:d9:da:1f:05:30:65:7e:61:ba:51:f4:c9:
99:20:67:92:c9:78:d5:93:fe:22:47:27:79:27:ec:
cc:42:de:36:c8:2b:dd:e3:86:c1:b5:fe:e4:14:aa:
bd:47:07:bb:a1:b0:61:52:51:dc:06:00:30:a6:26:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:5B:7B:FD:83:24:75:AA:F3:51:11:58:79:AC:BC:0D:EA:74:B7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vtJbe_2DJHWq81ERWHmsvA3qdLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.144.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:b1:01:96:e9:4d:e6:9e:ab:e7:35:e7:dc:1d:2a:c7:21:
ce:9b:6c:b8:a3:0d:1a:3c:50:0c:82:19:b7:c7:de:aa:b3:48:
d8:1d:c7:92:20:98:ba:d8:f1:13:8f:c1:1c:c7:b1:ce:f8:b8:
e9:78:80:65:aa:ba:dc:9f:f1:69:e7:11:42:5b:52:25:65:78:
76:72:b7:4a:94:65:ee:61:b9:ba:ca:74:9a:be:01:11:f8:52:
76:cc:9f:a2:d0:15:55:c5:8e:98:05:bc:8d:03:73:07:4b:b7:
4c:0f:30:aa:cb:2d:da:99:4f:5e:90:55:0d:26:ca:04:25:97:
7c:73:d4:3f:90:cd:de:5f:2a:b5:e3:88:a0:d3:00:db:ca:b6:
44:85:bc:88:04:77:b5:18:25:52:a9:96:de:29:78:38:fc:29:
b1:91:b9:46:81:e3:cf:1a:f2:2c:f0:59:97:74:03:64:d7:a2:
0e:e6:d3:eb:2c:81:99:a6:2a:6e:8c:61:cb:6f:7a:b7:d4:b4:
df:5b:09:fd:22:72:1d:f5:e1:bd:68:e4:73:7e:5a:24:9e:c0:
b9:25:45:39:88:44:05:57:83:3a:12:d8:46:a2:39:cf:5d:98:
8c:fe:b2:1b:6c:c6:18:09:e9:ff:4c:7b:b0:66:0b:40:e9:1c:
44:4d:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org