Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/Mb7YKtORPVUeERXrErWgZ7_NViY.roa
File: Mb7YKtORPVUeERXrErWgZ7_NViY.roa (raw, json)
Hash identifier: 6tn2i8D5hQv3NO8JCLl1aBakqaiO3JGeSDbT2Vvxo6A=
Subject key identifier: 31:BE:D8:2A:D3:91:3D:55:1E:11:15:EB:12:B5:A0:67:BF:CD:56:26
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 0185711555A91FD1E2E70264E49B4480A7CD
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/Mb7YKtORPVUeERXrErWgZ7_NViY.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205325
IP address blocks: 178.216.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:55:a9:1f:d1:e2:e7:02:64:e4:9b:44:80:a7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31bed82ad3913d551e1115eb12b5a067bfcd5626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:fc:0e:26:4c:2c:86:7f:b2:64:63:4d:5b:
05:39:1d:85:5e:e0:da:d2:ef:d5:a0:57:b4:88:8d:
be:ad:62:61:ef:8a:7e:15:89:2d:b5:e2:5d:a8:ed:
b3:eb:32:35:d6:18:02:54:fa:22:7e:57:13:b7:9e:
e4:3b:4c:49:36:23:42:45:07:42:27:bf:aa:8d:b9:
57:00:bc:6c:ea:65:5c:10:dc:1a:da:ee:61:fc:42:
b6:e0:43:ed:41:03:24:72:f2:c8:3e:59:34:c0:67:
2c:51:3a:ea:19:60:1e:32:03:84:4d:f0:62:fa:4a:
c4:c8:7b:d7:2f:ba:2f:ca:6a:2a:85:2a:de:97:20:
d1:d0:cc:2b:ef:8e:ec:20:d1:1a:b2:44:f4:d6:87:
a4:49:96:ba:fe:eb:d2:22:95:bf:55:64:d9:01:73:
6b:dc:98:a9:f2:b3:ba:dc:73:fc:d2:42:67:27:87:
ae:27:d0:a9:9e:08:57:64:c5:df:bb:7f:7d:f1:27:
9f:1a:39:87:32:2f:47:8b:43:fc:7b:f0:70:de:36:
4e:6b:53:62:96:5e:8a:6d:dd:2c:c4:e2:bb:78:fa:
4f:40:84:e6:07:b7:11:c1:2c:2c:ca:ea:33:6e:48:
3d:4f:4d:5e:f0:8f:78:90:0f:05:b6:9b:bb:4f:a1:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:D8:2A:D3:91:3D:55:1E:11:15:EB:12:B5:A0:67:BF:CD:56:26
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/Mb7YKtORPVUeERXrErWgZ7_NViY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.245.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a8:79:c6:86:e6:00:b5:9d:d1:f9:96:c2:73:69:9b:b4:e2:
44:15:49:32:91:ce:9b:4a:64:fa:1b:a0:15:20:42:ee:c8:ef:
bb:2d:9f:97:01:d1:62:65:71:d9:d0:49:f9:da:a8:df:3f:24:
dd:90:5d:73:0f:51:0d:3c:5d:97:2b:a4:1c:26:62:8e:dd:77:
eb:7d:9b:28:4e:78:8c:ad:fa:3e:17:f0:cd:3b:11:57:cc:06:
f2:0d:34:23:e6:b1:aa:cb:44:ad:e9:36:0d:85:88:6d:ec:72:
0a:ba:73:96:57:32:9c:9f:eb:56:fb:8c:1e:96:0c:0f:52:d1:
82:44:69:db:ac:dd:03:bf:51:b3:8f:da:01:5b:81:58:3b:0b:
2d:7b:a9:10:25:98:8e:e3:17:49:9c:d8:23:fc:63:58:e4:d0:
a3:5c:bb:1d:91:f8:ec:55:d8:7f:b3:2d:1e:df:ee:3f:21:bb:
71:4f:dd:44:55:d8:ec:bf:54:0f:19:38:4b:64:ae:6b:06:d8:
b3:c2:fe:c6:12:f5:10:f4:14:af:b4:51:fb:67:70:97:7d:80:
19:9c:2c:de:09:19:98:c7:93:2c:9a:a7:e6:26:0e:03:d6:d5:
94:c5:e5:1f:30:bd:41:4a:1d:04:99:b1:03:4c:da:09:4a:55:
d5:5e:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:29 2024 by rpki-client on console-fra.rpki-client.org