Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/jZqo88hbDx6BTAHj_6AlRj4YgU0.roa
File: jZqo88hbDx6BTAHj_6AlRj4YgU0.roa (raw, json)
Hash identifier: fHXejCCrgTIpEw2OQv+PEnzqFIksJIMcI4SG5g6zMLY=
Subject key identifier: 8D:9A:A8:F3:C8:5B:0F:1E:81:4C:01:E3:FF:A0:25:46:3E:18:81:4D
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018DA924407A2948CB7A4C92829393784117
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/jZqo88hbDx6BTAHj_6AlRj4YgU0.roa
Signing time: Wed 14 Feb 2024 19:42:21 +0000
ROA not before: Wed 14 Feb 2024 19:42:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215567
IP address blocks: 5.178.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 11:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a9:24:40:7a:29:48:cb:7a:4c:92:82:93:93:78:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Feb 14 19:42:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d9aa8f3c85b0f1e814c01e3ffa025463e18814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:4e:97:a3:a2:c0:a5:ee:f9:96:01:a0:d6:
83:de:93:d4:f3:62:b2:bf:97:a0:65:86:2e:49:53:
14:6f:fd:5f:61:00:04:33:43:b6:74:e7:89:5b:81:
2a:ec:1c:fb:27:12:d7:3a:79:b5:a2:d1:62:ea:65:
67:39:82:4c:30:1a:ad:6b:7a:16:dc:1f:5e:1e:0a:
31:bf:88:9e:70:03:c7:6e:14:ed:b8:86:a8:8d:c1:
9a:46:2e:ee:66:c4:db:81:41:c7:00:47:0f:73:88:
ab:de:49:e4:0d:ac:79:d6:5b:85:3c:21:25:44:ab:
82:a3:07:d9:a9:23:83:16:bf:ec:aa:15:1e:f9:7a:
2e:62:9d:66:b2:19:3b:bb:f2:b8:b2:ee:1c:e8:a0:
e5:ed:f0:9b:cb:b0:f7:42:ac:32:6b:38:d4:bd:e7:
12:13:06:d3:54:3d:76:04:b9:c4:08:48:86:cd:41:
ec:6f:7e:78:9f:b8:97:26:06:dc:03:0a:1d:2d:b5:
71:9c:f3:9e:3f:ae:34:51:a4:23:c6:c2:8a:5e:d9:
f2:29:c9:96:01:8c:e9:32:9d:a2:cf:f6:09:67:6e:
90:92:37:ed:ff:5b:78:09:99:89:b8:b7:9c:6f:9d:
d2:9b:ba:06:31:ad:5b:28:41:2c:55:37:bb:5f:0f:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9A:A8:F3:C8:5B:0F:1E:81:4C:01:E3:FF:A0:25:46:3E:18:81:4D
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/jZqo88hbDx6BTAHj_6AlRj4YgU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1c:82:fe:29:2d:d0:96:cf:ec:95:69:d9:87:89:74:14:96:
94:20:c0:ed:70:ad:e1:49:e9:07:64:a0:d1:6d:38:36:11:88:
d1:79:07:32:83:4a:6d:ef:d7:62:dc:5e:0b:4a:b2:48:a9:a6:
da:60:72:74:cd:33:33:77:4b:9f:e0:05:cb:98:4f:78:90:c7:
8b:b6:40:41:fb:ae:ff:a5:ea:14:81:ec:ba:db:a5:49:f9:cd:
cc:c8:87:e8:49:f1:d1:46:33:9b:7a:79:83:ed:c5:45:73:f9:
b9:3b:a1:3c:f1:bc:31:eb:26:06:fb:86:da:49:c4:f2:f9:1c:
bb:5c:bd:88:00:57:c8:d5:cd:1d:26:fd:b1:87:94:6a:75:f5:
2e:63:c9:d6:88:ef:42:00:de:aa:a1:50:de:f7:4d:da:46:15:
9f:5f:45:0b:aa:53:58:e9:f1:48:75:d6:63:9f:c2:47:9b:b7:
7d:ef:21:5f:0c:13:f1:b1:be:b3:bd:01:2a:81:76:1e:fa:df:
70:c8:c9:1a:dc:14:69:e6:e0:fc:5c:c1:b9:f8:bd:f0:6d:ba:
63:88:d5:a7:bc:1d:24:ea:55:7e:e8:9a:68:f7:f6:a2:68:57:
12:96:20:6e:0f:1d:4c:39:a8:e5:45:0b:33:92:bd:39:39:6b:
d2:7a:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 14:54:01 2024 by rpki-client on console-fra.rpki-client.org