Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/In5R9DqqYEWd6OT9uEGYSAIAO4s.roa
File: In5R9DqqYEWd6OT9uEGYSAIAO4s.roa (raw, json)
Hash identifier: ihoWqbIuA2KRPofuk+T5vLMDr/Zoi4J/P9VMojhPVEY=
Subject key identifier: 22:7E:51:F4:3A:AA:60:45:9D:E8:E4:FD:B8:41:98:48:02:00:3B:8B
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 018AB1DD39F15F728CF129679DDF60F958B8
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/In5R9DqqYEWd6OT9uEGYSAIAO4s.roa
Signing time: Wed 20 Sep 2023 09:13:00 +0000
ROA not before: Wed 20 Sep 2023 09:13:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198369
IP address blocks: 178.130.134.0/24 maxlen: 24
178.130.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:dd:39:f1:5f:72:8c:f1:29:67:9d:df:60:f9:58:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Sep 20 09:13:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=227e51f43aaa60459de8e4fdb841984802003b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:80:f4:25:b1:93:ae:93:3b:72:02:9c:da:
eb:1a:e8:72:f7:fb:32:9c:91:74:71:92:47:62:cc:
34:2b:3e:4b:e6:1c:f2:7a:28:84:24:0d:af:ad:13:
3b:b9:c5:68:80:1c:18:a3:05:b4:3b:44:52:64:14:
d9:72:b6:36:0b:22:d6:fb:fa:9d:27:81:6e:7b:a5:
d8:43:c2:9d:57:29:97:00:05:17:af:22:d4:2a:db:
2f:92:e5:bf:10:42:b1:8e:67:8e:89:20:eb:02:bd:
e4:a2:1c:e5:e6:18:f3:39:4c:34:80:62:59:85:c3:
0c:7f:17:6f:bc:93:43:dd:12:65:f0:dc:98:04:dc:
73:e5:5a:85:b8:8e:ce:96:b0:c3:01:99:78:bf:a0:
a6:f2:89:09:cd:ea:52:fa:65:68:79:de:1e:e0:d0:
4c:c3:b1:56:f6:d8:0d:86:36:98:4b:67:1c:18:4b:
20:b3:10:33:04:60:57:3f:62:5d:75:bd:68:ce:18:
e0:86:ac:57:23:75:c1:dc:dd:50:89:2b:3e:c2:28:
ea:8c:f0:84:cf:4f:45:30:70:40:fb:c7:74:e6:a2:
64:b5:63:fa:d8:45:53:ca:d4:7f:f9:f0:af:bd:d5:
d8:00:a6:d9:ee:99:c5:a5:82:a9:06:fb:fd:13:0f:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:51:F4:3A:AA:60:45:9D:E8:E4:FD:B8:41:98:48:02:00:3B:8B
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/In5R9DqqYEWd6OT9uEGYSAIAO4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.130.134.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:56:0a:5a:4c:af:7b:ca:a9:43:37:e4:4a:2d:7d:5f:ff:9f:
d8:c7:8e:4c:b0:18:34:e4:6f:a2:ba:7f:97:4f:e8:fa:25:e0:
7b:9c:8c:06:df:60:dd:23:a0:3a:0e:da:a8:0c:5b:df:27:2a:
25:19:55:11:6c:09:06:72:1b:4e:55:23:2e:1a:eb:c3:70:16:
d5:26:0a:47:2b:12:4d:5e:a6:28:c4:4b:9c:00:3c:2c:1a:4d:
81:0f:e0:6f:3d:e2:02:12:ad:e9:2a:af:37:bb:8a:c6:5b:e1:
ae:18:f4:2b:7a:c1:41:b8:c9:68:2f:32:76:b3:d7:b7:73:a0:
27:d2:73:c1:72:81:f4:cc:ef:5b:66:43:db:26:04:fa:37:9f:
88:5c:f1:20:b7:2e:cc:98:dc:36:43:41:b6:22:07:81:f5:c5:
44:d3:6f:49:14:4b:9d:5b:b5:37:d3:04:0b:f7:7e:4d:26:e0:
20:5d:be:66:3c:97:83:87:91:2e:01:82:9d:2a:28:8f:4e:5c:
3f:b6:e1:6e:5b:47:92:9a:e1:8d:26:61:93:f5:83:1e:c3:83:
09:e1:e3:7e:6c:a9:4c:89:e0:c4:b2:df:08:48:06:d8:2d:3b:
b9:2f:ad:a1:40:ef:a7:b1:6c:97:81:cd:0d:7c:5c:77:9b:92:
09:af:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:18 2024 by rpki-client on console-ams.rpki-client.org