Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zKpLnkyUUqtkGz4qxICRt_eafuM.roa
File: zKpLnkyUUqtkGz4qxICRt_eafuM.roa (raw, json)
Hash identifier: El5GJRIshx26R5/1r7QZOcLGCWav6QH7dkqWowWV7f8=
Subject key identifier: CC:AA:4B:9E:4C:94:52:AB:64:1B:3E:2A:C4:80:91:B7:F7:9A:7E:E3
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CF8027915991592E6DE360BC378CB9E2C
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zKpLnkyUUqtkGz4qxICRt_eafuM.roa
Signing time: Thu 11 Jan 2024 10:12:40 +0000
ROA not before: Thu 11 Jan 2024 10:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30277
IP address blocks: 5.178.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 09:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:02:79:15:99:15:92:e6:de:36:0b:c3:78:cb:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 11 10:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccaa4b9e4c9452ab641b3e2ac48091b7f79a7ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2a:53:52:85:b8:28:65:64:68:a6:88:9a:f3:
2c:e8:20:20:79:0a:8c:40:23:e5:52:3f:e9:62:32:
6c:43:c0:c8:d8:d5:75:47:4b:f0:56:75:1a:2e:9c:
45:30:97:09:4e:9f:48:ed:3e:16:81:f6:09:a8:fe:
b9:c2:f4:36:91:e9:9c:43:9f:53:9b:38:7d:bd:94:
96:02:6b:30:b8:1d:ad:93:23:fd:3b:1d:a5:d8:36:
94:7f:53:1e:a3:a6:ae:ef:92:61:4a:32:f2:d6:92:
d9:d2:97:78:3a:eb:47:64:46:c1:ba:d9:cf:8a:e1:
2f:bb:49:e4:88:20:d5:d4:d3:81:5f:63:10:2d:73:
a5:d6:aa:7f:e8:2d:31:09:56:82:25:47:1c:a0:82:
59:f1:98:a9:ae:82:cb:4a:86:13:51:a8:d5:e0:cf:
8c:43:8f:3e:32:00:d2:6f:a5:5d:49:85:23:fd:33:
ae:5f:15:ce:4d:09:82:c3:d1:26:ea:31:f2:0c:70:
73:c8:bd:ee:6b:34:86:45:31:1d:ab:ec:47:fc:c0:
05:8c:a9:c1:52:18:d8:d6:0c:b4:8c:05:6b:28:bd:
98:2f:00:c2:bd:37:67:5e:f0:65:0c:06:59:18:2c:
18:3a:17:74:76:79:fe:e0:46:cf:a7:99:ea:fc:a3:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:4B:9E:4C:94:52:AB:64:1B:3E:2A:C4:80:91:B7:F7:9A:7E:E3
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zKpLnkyUUqtkGz4qxICRt_eafuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.108.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:98:d2:5b:ca:37:9c:cf:9c:e5:59:9e:d5:28:14:18:16:3d:
ee:85:2d:6d:e4:1a:18:ae:ab:d8:49:e1:5b:a7:a8:77:b0:a0:
e6:24:5d:93:c2:92:5d:6b:8e:ac:cb:ea:9b:64:f8:2f:1a:54:
d3:e9:1e:20:31:40:4e:e7:c0:34:22:87:a2:f8:37:9f:8a:46:
4a:38:ea:2d:38:58:85:7a:0d:a7:6b:96:07:5d:fa:2d:47:e1:
d9:16:e4:78:bc:1b:6e:b3:cf:04:93:47:13:e8:42:2f:cd:a7:
0b:08:f2:ca:db:28:54:4b:fe:8d:a9:9c:e6:0e:7c:fe:01:63:
9d:a0:99:9b:12:16:fe:7c:48:8a:d0:2d:36:c1:3e:46:83:a5:
c3:df:f5:46:26:62:57:58:79:bf:9c:f0:d4:df:d6:fc:e7:a6:
a6:7c:b4:0c:b2:1e:33:ff:55:2d:eb:7f:53:67:69:e8:27:df:
bd:8c:83:36:5a:7f:bc:31:a8:6f:36:43:c8:a5:cd:01:b9:78:
ad:3c:82:89:aa:7f:ca:97:37:2a:60:7c:5b:e2:3f:ad:0e:ae:
6e:20:86:f6:f2:94:1d:d9:2a:e9:06:88:6e:89:bb:fb:8a:1d:
aa:63:f4:1a:2a:db:dd:2f:dd:e4:ca:09:93:ec:cf:40:76:7f:
b5:e1:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 13:08:17 2024 by rpki-client on console-ams.rpki-client.org