Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa
File: ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa (raw, json)
Hash identifier: 3sSARO+D4ajDTcP8qSzYAk2PWGo5hgpg4iKlc2egSz0=
Subject key identifier: 82:0C:8C:E0:0E:00:F5:2B:05:79:39:4E:CE:E2:82:D5:89:92:80:11
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139AA9928DFECE95FB190FEA6869B6A
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa
Signing time: Mon 02 Jan 2023 06:44:42 +0000
ROA not before: Mon 02 Jan 2023 06:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62236
IP address blocks: 178.219.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:aa:99:28:df:ec:e9:5f:b1:90:fe:a6:86:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820c8ce00e00f52b0579394ecee282d589928011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:af:4c:d9:88:1a:41:73:59:06:40:2e:31:
1a:73:4d:fd:01:1b:1c:bb:ed:43:9a:78:8a:79:2d:
9c:96:35:c5:ae:12:39:70:bd:71:d2:12:89:38:f6:
0c:f8:cb:50:db:b4:5f:bc:db:9d:92:e7:d1:2f:8c:
96:81:88:80:88:73:a6:69:c3:61:c9:4b:30:ee:7d:
21:4d:f2:23:f2:fb:ac:da:38:9d:43:33:7d:89:26:
8c:ba:d0:a9:17:8f:5c:d6:0b:19:f8:9e:64:49:69:
34:95:fd:b2:46:e6:f9:a4:d3:8c:38:c3:ed:d0:20:
47:22:e9:4b:28:27:e2:76:bd:c5:18:45:19:88:d8:
06:5e:d9:76:db:20:4e:bd:d1:fb:02:b7:b5:e0:a3:
9b:f0:06:e7:43:cd:3c:cc:c0:48:1e:8a:8b:27:78:
7d:d0:d1:d3:c3:0b:79:f6:6b:b8:d8:ec:73:df:5d:
69:8b:31:80:d2:b0:8d:55:8b:ab:74:06:b0:6e:81:
88:74:ab:aa:49:01:8a:f5:c0:04:50:aa:06:78:be:
35:5f:a5:8d:b4:1d:56:46:16:c8:98:66:b1:6b:ff:
8a:cd:2d:9b:c4:47:f3:d3:dd:16:2b:8a:e5:4a:6e:
58:e1:c0:20:5b:04:ae:92:16:c2:ef:95:01:ca:0f:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0C:8C:E0:0E:00:F5:2B:05:79:39:4E:CE:E2:82:D5:89:92:80:11
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ggyM4A4A9SsFeTlOzuKC1YmSgBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.155.0/24
Signature Algorithm: sha256WithRSAEncryption
68:41:06:ac:00:c4:0c:da:92:0c:12:90:ed:3e:c5:c2:70:54:
0a:ea:53:3a:47:7c:15:73:e2:8d:22:0a:42:a4:9f:e3:45:82:
12:06:ca:c3:ea:80:28:05:17:ed:ac:66:95:c6:67:50:c2:36:
06:86:88:f2:66:17:c7:fa:38:35:ee:70:f8:49:da:45:ec:0a:
aa:c2:b1:d6:e2:7c:ad:64:6f:34:81:aa:08:b2:91:74:06:df:
29:1d:18:d0:ae:85:8f:8a:60:94:23:bb:3a:3f:30:b5:3d:28:
4c:9b:7c:41:1f:57:90:da:de:53:c4:73:66:74:f4:1e:d3:27:
f5:cc:40:4f:2a:af:63:a8:6c:ae:fa:cd:dd:2b:13:cb:f1:4e:
d1:96:10:56:cd:85:d6:52:f5:30:64:9c:74:f7:03:f5:9f:fe:
0c:1d:74:e9:23:72:28:9c:b8:85:f1:c8:45:91:4d:ec:66:8b:
a6:51:0a:88:70:20:5d:21:60:46:b5:fa:e6:e7:1c:f3:9d:8f:
2f:66:56:4e:ef:ba:80:6e:71:00:b1:38:13:4f:3b:da:3f:f0:
21:0e:6b:d4:1a:1f:e1:00:16:91:65:5b:6c:b5:9d:c7:97:3b:
9f:4d:d1:41:c3:ac:c1:93:f7:03:a7:5a:e3:b9:2f:0f:dc:c9:
de:b2:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:00 2024 by rpki-client on console-fra.rpki-client.org