Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/d-7llGmqC0nAOsKRrKXKEoolxXc.roa
File: d-7llGmqC0nAOsKRrKXKEoolxXc.roa (raw, json)
Hash identifier: B9/Ah39YWqP4mJJssMnKelRogrKdIRWScV6aZJUo6us=
Subject key identifier: 77:EE:E5:94:69:AA:0B:49:C0:3A:C2:91:AC:A5:CA:12:8A:25:C5:77
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A79DB8743BD48D2C37DF1A74C72DA9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/d-7llGmqC0nAOsKRrKXKEoolxXc.roa
Signing time: Mon 02 Jan 2023 08:44:48 +0000
ROA not before: Mon 02 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 178.175.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:9d:b8:74:3b:d4:8d:2c:37:df:1a:74:c7:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77eee59469aa0b49c03ac291aca5ca128a25c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:e7:88:c2:6b:c1:d4:f5:f3:96:2e:48:17:
46:69:4a:39:ba:2b:fb:09:2f:09:02:fa:50:24:04:
49:6b:5a:d6:0d:4c:8d:ad:2a:3d:a4:77:62:cf:46:
93:2a:e2:fe:84:91:18:28:96:c3:ce:cd:af:d0:3a:
d4:9d:c9:d3:88:14:c9:cc:0c:29:52:ec:f6:47:df:
9c:4e:54:da:48:de:f8:f8:ff:b7:0c:1e:76:eb:38:
dc:36:f1:b2:3c:43:11:bc:20:ed:1d:e9:93:ec:c0:
28:3f:bc:f7:ea:b0:c8:a9:b0:80:32:c4:fb:d8:c5:
b5:91:0a:ac:d2:33:cb:4e:66:cb:69:ab:2b:db:32:
ed:25:a3:bb:6d:59:18:56:ee:3d:c3:89:89:cf:44:
73:87:cc:d2:02:6b:01:8e:2b:ef:f2:05:22:1b:ab:
bf:49:31:5c:d3:ae:28:79:a2:d5:23:d6:12:79:2c:
fe:67:74:39:9d:e7:eb:41:f8:40:9b:e5:65:c2:2d:
c6:34:50:90:55:24:ce:cf:f3:1f:a0:06:61:12:60:
8b:a9:93:5b:f8:84:51:3e:26:f7:51:26:ce:db:df:
e6:d8:a9:a0:5d:c9:11:93:c3:b0:a1:f3:27:c9:b3:
a9:53:97:ea:5e:a8:4e:68:e7:97:99:c1:b8:7f:63:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:E5:94:69:AA:0B:49:C0:3A:C2:91:AC:A5:CA:12:8A:25:C5:77
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/d-7llGmqC0nAOsKRrKXKEoolxXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:92:b3:88:98:c0:cb:27:4e:b8:39:11:64:61:73:62:63:58:
02:84:e7:50:c1:14:12:7f:a3:c2:7e:bc:12:47:6c:d3:42:b1:
72:09:1d:3e:fe:a1:2d:ea:5b:36:28:0f:25:ca:bc:fc:50:3f:
27:0f:ff:39:07:a1:86:01:46:c6:b9:cf:24:25:16:38:6d:99:
61:13:2e:8f:3e:63:fc:7a:e0:c5:b3:67:5b:ae:59:b2:b8:f8:
da:63:3a:90:5b:6b:af:62:37:2e:2b:22:10:eb:2b:64:f2:05:
51:d5:ef:09:e6:98:d2:bf:fe:21:c4:05:c2:15:dc:65:47:06:
ad:e8:1b:56:f5:50:30:e2:79:fa:05:7d:22:8b:1d:d5:ef:d2:
1c:94:18:a6:26:af:2b:b9:8b:2f:35:ec:d4:dc:14:a0:95:47:
15:21:cd:09:3c:65:08:8a:f4:63:b7:df:54:a7:16:ec:4f:ce:
be:10:0a:5e:47:e5:dc:c2:da:51:01:79:a0:ca:34:4e:97:a7:
2f:b2:bd:ff:fc:c6:d9:00:02:ff:fd:d4:73:b2:de:0c:83:40:
1e:3d:57:32:24:de:22:f9:79:a5:62:9a:5b:cd:da:dc:30:47:
4a:98:88:63:92:c7:56:67:2a:f0:99:7f:56:61:1d:2c:92:e1:
64:6c:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org