Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/HSXt3vP9eKZpVrVM5yfUpW7n0RU.roa
File: HSXt3vP9eKZpVrVM5yfUpW7n0RU.roa (raw, json)
Hash identifier: c1nKe02vZ7XY1lKECk+Zs3nDYviVQB5GR+xuFta0TNw=
Subject key identifier: 1D:25:ED:DE:F3:FD:78:A6:69:56:B5:4C:E7:27:D4:A5:6E:E7:D1:15
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 018572E81FB29086A3622B6929916E88FE81
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/HSXt3vP9eKZpVrVM5yfUpW7n0RU.roa
Signing time: Mon 02 Jan 2023 14:34:53 +0000
ROA not before: Mon 02 Jan 2023 14:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56426
IP address blocks: 178.215.152.0/24 maxlen: 24
178.215.146.0/24 maxlen: 24
178.215.151.0/24 maxlen: 24
178.215.149.0/24 maxlen: 24
178.215.150.0/24 maxlen: 24
178.215.147.0/24 maxlen: 24
178.215.148.0/24 maxlen: 24
178.215.159.0/24 maxlen: 24
178.215.153.0/24 maxlen: 24
178.215.158.0/24 maxlen: 24
178.215.156.0/24 maxlen: 24
178.215.157.0/24 maxlen: 24
178.215.154.0/24 maxlen: 24
178.215.155.0/24 maxlen: 24
178.215.144.0/20 maxlen: 20
178.215.145.0/24 maxlen: 24
178.215.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1f:b2:90:86:a3:62:2b:69:29:91:6e:88:fe:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Jan 2 14:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d25eddef3fd78a66956b54ce727d4a56ee7d115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:cb:80:f0:8a:64:27:76:13:be:e2:63:fc:
69:d5:ec:f0:74:0d:6e:07:45:33:67:2a:9b:2e:a3:
44:f6:cf:15:e4:cd:b5:33:2c:27:4b:88:94:0c:3f:
1a:b0:28:ab:ba:db:7a:02:d9:f4:e7:05:19:5f:9f:
cf:2c:08:42:a2:54:97:b3:92:45:0e:ca:a6:09:fc:
2d:ac:b6:23:ec:32:d4:57:44:39:6f:43:d9:11:58:
32:e7:a4:21:10:fc:c0:c9:be:30:9a:93:da:92:ba:
48:8c:aa:52:88:70:c1:cf:d6:e2:de:41:55:7a:58:
be:bd:ee:41:c9:7e:0c:df:4f:be:c0:23:92:16:40:
5e:d0:b7:c1:5b:ea:85:c5:99:53:46:d7:d2:a1:71:
c1:cd:c6:64:46:85:9e:8d:f9:c1:48:b3:6d:29:8c:
22:37:9c:dd:1e:02:07:fd:11:47:09:2b:f9:e2:64:
4e:e2:a2:69:e8:4f:c2:05:b7:54:06:a2:5a:45:a2:
f4:5a:20:15:64:c5:69:fb:46:69:d1:e0:d8:58:4f:
bc:21:80:cc:fc:5f:a9:5f:03:be:cf:d9:d8:60:cc:
95:c6:b7:70:d5:1b:e5:c1:a5:5f:c8:f5:a6:ca:d3:
e9:4f:31:35:8b:e3:71:19:67:ca:0b:1c:e8:c3:08:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:ED:DE:F3:FD:78:A6:69:56:B5:4C:E7:27:D4:A5:6E:E7:D1:15
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/HSXt3vP9eKZpVrVM5yfUpW7n0RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.144.0/20
Signature Algorithm: sha256WithRSAEncryption
20:10:78:d4:56:0b:64:dd:89:7b:69:10:0b:bf:02:23:50:5f:
a7:a9:06:da:57:97:fd:4b:e3:50:5e:e1:b9:22:01:0b:69:c7:
30:14:a2:d9:48:ac:20:4c:21:23:eb:1d:d3:1f:f8:b3:db:5d:
6b:cb:dd:3e:19:63:76:e8:4c:cd:71:1f:5a:ff:c2:6d:5c:99:
cd:c2:af:ec:74:2e:e8:c2:72:09:08:d3:4e:c8:ce:a1:63:e6:
df:5f:8a:2e:9b:c2:d1:0d:f1:60:12:70:6f:20:1f:52:78:f7:
17:46:a1:d2:e1:47:c8:c8:af:cc:b6:77:0e:bf:7e:8f:a4:38:
04:82:b7:04:6f:61:8c:52:33:4e:2b:c4:4b:bb:ad:35:9f:d8:
44:98:d0:15:26:c1:a4:35:4b:05:75:f5:12:9f:66:bc:a4:9d:
0e:23:20:2e:1d:ce:22:64:85:9f:52:8c:85:d4:43:b0:a2:58:
ac:4a:bd:3e:4e:a9:a9:fc:6c:64:20:8c:59:10:b2:9f:61:77:
ab:e6:17:c7:80:e5:36:38:07:2c:7f:2f:0c:d3:23:b4:c2:92:
77:78:ed:58:38:73:c3:4c:eb:46:f2:39:c0:29:db:26:d7:3b:
56:d9:f3:13:92:4d:61:b7:8e:ca:2f:b9:b9:b7:e0:a6:fa:4a:
00:6b:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org