Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/0FdM3h1DuKN6mpRDQJCkO_do48M.roa
File: 0FdM3h1DuKN6mpRDQJCkO_do48M.roa (raw, json)
Hash identifier: m+e5RMjKh11ChdAj8NarUdEeQ+W7mSUwKMJD9wv/bm8=
Subject key identifier: D0:57:4C:DE:1D:43:B8:A3:7A:9A:94:43:40:90:A4:3B:F7:68:E3:C3
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0187DE7DDC0AE0D9B50D20914853BCF92F4B
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/0FdM3h1DuKN6mpRDQJCkO_do48M.roa
Signing time: Tue 02 May 2023 22:03:22 +0000
ROA not before: Tue 02 May 2023 22:03:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 178.20.209.0/24 maxlen: 24
178.20.210.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:7d:dc:0a:e0:d9:b5:0d:20:91:48:53:bc:f9:2f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: May 2 22:03:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0574cde1d43b8a37a9a94434090a43bf768e3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:3c:87:aa:e3:35:f6:23:91:9c:85:18:17:
22:76:b0:21:ad:7f:14:6c:6b:d8:ea:b5:2c:a5:1a:
fe:36:e6:20:91:a3:fb:7f:d9:ac:44:81:8a:8d:0b:
9f:64:21:30:44:30:f0:6b:45:07:d5:72:1c:a5:b9:
3f:57:6c:97:dd:d2:02:b3:0b:ec:f9:6b:db:ec:1f:
56:d5:c4:f5:53:d4:d9:96:ec:24:aa:68:3a:1e:c9:
02:13:86:63:1a:03:f0:3a:5d:a5:3d:07:42:eb:15:
f4:85:ea:e4:e0:85:36:30:6e:0f:b4:60:eb:e9:16:
61:cd:75:4e:b6:f5:6e:ea:63:8b:40:80:cd:11:3d:
2f:b7:c4:25:92:32:c8:be:af:ab:01:81:2f:24:bb:
56:c6:3e:6a:87:dd:30:a2:57:97:f7:d1:8f:65:8c:
5e:fc:94:58:d4:2b:7e:37:8d:fa:19:35:b0:29:82:
73:89:59:b7:8c:84:2f:f6:66:d6:66:89:e8:71:79:
7a:35:21:4d:03:5b:20:c7:de:49:2c:21:d1:e1:9b:
dc:e6:6e:da:f6:ea:51:5b:f4:88:6a:dd:48:39:f0:
15:da:a8:46:ac:4e:3c:8f:fb:16:04:ac:df:2e:c2:
33:4e:78:b0:7e:33:0e:88:d3:9f:0d:20:a5:d3:48:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:4C:DE:1D:43:B8:A3:7A:9A:94:43:40:90:A4:3B:F7:68:E3:C3
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/0FdM3h1DuKN6mpRDQJCkO_do48M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.209.0-178.20.211.255
Signature Algorithm: sha256WithRSAEncryption
d5:43:6e:e8:e6:40:7b:ef:b2:83:5e:61:c0:8c:07:a1:26:1c:
dc:08:3e:e1:03:87:de:2a:51:0f:38:d6:51:00:67:bc:75:ce:
d0:eb:69:f0:b7:3a:c5:69:8b:ec:6e:9c:b2:3c:a8:5d:23:17:
9a:48:b5:a1:0d:ad:57:c7:65:61:f0:c8:52:dd:37:54:df:6f:
a9:ed:f9:84:3b:4c:3e:e3:e8:ac:14:85:4f:a4:aa:b9:d3:ce:
97:3e:c5:a3:42:ff:34:24:99:d5:5d:57:46:b0:fa:24:55:19:
58:e7:bd:2a:80:7d:3e:d4:f8:1c:ab:d7:b0:2f:46:ce:02:da:
8f:f9:12:ec:8a:71:7d:20:ee:f4:38:e2:40:96:a7:51:ce:0d:
09:b3:3f:f8:55:96:36:f9:bf:d1:c7:e1:26:b7:20:40:a2:a4:
28:95:8f:22:cd:ae:7b:94:1e:05:a4:3f:5b:aa:1a:be:00:51:
42:7b:51:39:5b:81:c2:6c:71:87:e2:01:27:19:b1:fa:8e:ed:
a7:a6:a8:80:96:84:1a:6d:94:29:03:25:50:a3:68:32:ab:3c:
d1:66:3c:96:8e:54:04:1b:7e:89:82:77:1d:f1:fa:37:e8:36:
6e:81:ad:d4:9e:d2:76:82:75:2a:06:51:b9:ed:a1:c6:9e:7b:
d0:9b:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-fra.rpki-client.org