Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/56DgBBQ7wE4LzvE_p749DhykCJs.roa
File: 56DgBBQ7wE4LzvE_p749DhykCJs.roa (raw, json)
Hash identifier: boGzkhQ/Iws61QyEt/SgiMr0fCz1vV4bYxC3Mf2+zlc=
Subject key identifier: E7:A0:E0:04:14:3B:C0:4E:0B:CE:F1:3F:A7:BE:3D:0E:1C:A4:08:9B
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01856F8B8D70E96767BEEBE79640B0F358A2
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/56DgBBQ7wE4LzvE_p749DhykCJs.roa
Signing time: Sun 01 Jan 2023 22:54:54 +0000
ROA not before: Sun 01 Jan 2023 22:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211347
IP address blocks: 178.237.201.0/24 maxlen: 24
178.237.207.0/24 maxlen: 24
2a04:7e00::/48 maxlen: 48
2a04:7e00:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8d:70:e9:67:67:be:eb:e7:96:40:b0:f3:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 22:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a0e004143bc04e0bcef13fa7be3d0e1ca4089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:0a:d8:27:eb:38:c3:de:70:28:42:11:8b:
59:c2:55:8d:dc:fd:de:42:b0:89:fe:66:16:05:0b:
2e:f2:7a:c1:79:ca:5b:28:98:48:dc:b0:3d:86:97:
a9:7c:44:19:d6:73:28:e1:d1:5c:e6:04:4e:6b:63:
5c:97:78:6e:4d:a0:7e:90:9e:d3:0c:88:61:98:7b:
e2:9d:fa:f7:12:67:fe:89:1f:18:da:48:84:ab:e7:
55:b6:ac:9e:5e:77:cb:0b:38:2d:f3:5e:c9:56:74:
68:4c:28:b7:b4:7a:80:fc:a2:ed:2a:81:4a:c2:b1:
b6:38:71:b9:0d:e0:19:b9:1c:15:a8:19:c0:6f:af:
92:f1:a3:58:bb:ef:b3:93:1a:be:17:5d:e8:67:66:
8a:5e:e0:7f:93:8a:46:4c:52:d5:59:38:7b:9e:43:
4f:12:0c:8f:d6:ab:d3:f7:bf:f6:15:3c:7d:d0:a0:
2f:55:b3:6d:3e:7f:38:f1:22:2f:d8:08:39:95:6c:
46:5c:36:30:db:c7:80:77:07:55:9d:17:1f:e9:ad:
40:1b:70:0e:11:bc:c7:e9:06:55:e5:96:4d:19:df:
8a:5a:24:27:ff:21:fa:84:5e:4b:f0:8b:05:37:2e:
4e:bf:b4:7e:b5:b5:eb:95:8a:39:85:bc:b5:19:5c:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A0:E0:04:14:3B:C0:4E:0B:CE:F1:3F:A7:BE:3D:0E:1C:A4:08:9B
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/56DgBBQ7wE4LzvE_p749DhykCJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.201.0/24
178.237.207.0/24
IPv6:
2a04:7e00::/47
Signature Algorithm: sha256WithRSAEncryption
5c:88:7d:08:98:d3:0e:d6:0e:a9:59:f4:f6:1f:86:b4:ff:8e:
a5:36:8e:8b:25:9a:38:3a:8b:bd:0f:54:14:58:07:d6:3b:97:
82:ed:2e:2d:4f:62:41:b4:77:5c:42:48:75:69:61:29:ef:38:
8f:68:43:81:97:1c:72:3e:83:b1:58:2c:f2:f2:0f:5d:1c:7a:
f2:9b:68:55:95:c1:d4:cc:7a:31:74:d6:53:8c:c8:7f:d7:5c:
74:69:5b:d3:0d:4d:39:88:e8:ae:17:de:90:a9:e5:62:1a:25:
36:1b:bb:c5:c0:6e:3e:e9:5e:94:a0:80:de:fc:9c:64:d3:36:
4e:bc:21:1f:4a:71:c8:17:24:e3:34:a3:87:38:ad:eb:be:cc:
b4:10:05:f0:c4:0e:42:16:5d:d2:30:2c:53:da:bb:e3:c8:f9:
84:07:7a:d3:12:e4:14:ed:86:f4:fe:a4:16:1c:33:30:4c:53:
f8:81:02:a9:5c:84:12:d3:a6:28:8f:8d:f6:6f:6a:11:60:80:
aa:eb:06:77:26:b2:0a:09:d0:62:2c:ee:4f:58:d0:b1:a4:9f:
93:14:d4:55:26:a9:b8:3b:97:ba:76:e7:88:61:80:98:5b:48:
79:0a:db:bf:26:51:e2:c8:68:4b:bb:8e:2a:d5:30:05:74:59:
48:6c:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org