Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AgqVIaCea1DN9oidIFpMPv4vLMI.roa
File: AgqVIaCea1DN9oidIFpMPv4vLMI.roa (raw, json)
Hash identifier: SMAuoX3+HknqMyrI175OYDdraEmhSVp+qKu90dAMKkc=
Subject key identifier: 02:0A:95:21:A0:9E:6B:50:CD:F6:88:9D:20:5A:4C:3E:FE:2F:2C:C2
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018B710AD07B694F4AA1DCEEC9018BD22591
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AgqVIaCea1DN9oidIFpMPv4vLMI.roa
Signing time: Fri 27 Oct 2023 12:10:16 +0000
ROA not before: Fri 27 Oct 2023 12:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 178.213.183.0/24 maxlen: 24
178.213.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:0a:d0:7b:69:4f:4a:a1:dc:ee:c9:01:8b:d2:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Oct 27 12:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020a9521a09e6b50cdf6889d205a4c3efe2f2cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:99:19:c7:a9:86:dd:76:78:5e:94:22:a6:
7c:a1:a2:a4:9d:ac:d1:17:29:b6:e4:7e:9f:b0:f0:
1f:d8:b1:91:b8:0f:af:d1:1a:0d:35:4f:59:21:5e:
56:b6:69:a4:b9:30:5e:a2:d4:33:99:d2:fb:6c:b0:
0e:6f:5d:73:63:57:bd:1a:30:54:65:60:6e:13:c6:
10:e6:58:79:63:14:5c:51:05:91:d8:e8:fe:d0:07:
5a:7b:85:4c:0a:6e:ec:0d:83:4d:b3:5e:f5:f3:7a:
b4:f9:b0:9e:78:b7:ec:dd:94:bc:1e:57:aa:a3:8c:
ad:42:2f:2e:a1:cb:79:6e:98:b2:da:af:35:54:39:
e6:12:30:cd:e7:e7:4c:22:40:79:7c:bd:12:3c:a1:
16:a4:6d:ad:33:51:fc:10:6b:0a:00:db:e1:25:1d:
ab:a1:5a:48:6e:5f:36:1b:ae:82:0f:a3:e8:9e:25:
9b:35:6d:4b:ac:f5:06:e5:92:19:d0:15:00:d7:82:
01:79:71:a6:3a:3d:51:13:81:14:76:83:a1:de:05:
f5:2f:b2:c7:01:1a:23:88:f9:01:da:d3:9a:64:69:
b2:e1:5d:3a:10:54:f2:1f:bd:4e:6f:77:f7:19:8e:
e3:3f:6e:51:04:bb:2a:d8:53:88:0e:6e:75:c7:1b:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:95:21:A0:9E:6B:50:CD:F6:88:9D:20:5A:4C:3E:FE:2F:2C:C2
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AgqVIaCea1DN9oidIFpMPv4vLMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.182.0/23
Signature Algorithm: sha256WithRSAEncryption
09:c1:12:c1:21:4a:71:28:58:74:ac:ae:ce:23:0c:06:3a:3c:
7e:ce:7f:09:e5:3e:52:0a:f9:e7:1a:c0:61:62:d2:19:bd:de:
ab:69:fb:e4:c0:95:ba:7f:1c:ab:2a:35:e1:7e:f6:a9:17:e3:
1d:82:16:d6:47:8b:1b:b1:7a:ad:c1:e3:5f:5a:70:3e:d0:fa:
81:28:ac:56:6a:70:36:01:a7:ac:c4:f8:ac:5a:ca:c3:3f:71:
20:93:e2:e0:fc:66:df:88:6c:f7:73:4f:e9:bc:91:40:3d:59:
43:9a:03:96:65:1b:fe:e8:95:2d:d2:16:b3:d5:50:cc:88:cb:
d8:28:0f:7e:5a:9e:f9:aa:5c:ab:11:f5:48:fc:59:7d:9e:d4:
81:66:25:a5:dd:a5:66:ae:4a:05:e0:05:7f:f3:90:ac:0a:0a:
b4:fd:92:0f:22:8c:65:e7:ea:89:b6:2c:3b:f4:bd:f9:bf:e1:
08:f4:71:df:eb:ed:18:f0:58:5b:ba:22:ac:43:64:7e:65:d0:
bc:59:42:67:41:e5:b4:91:66:a6:04:7b:32:31:e8:d8:f9:20:
ce:0b:65:8c:42:5b:68:41:23:ce:70:6f:f6:b0:3a:cc:06:c1:
85:39:e4:d4:e6:8c:db:97:59:a2:3e:cc:a7:36:5f:ba:79:b2:
02:87:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org