Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/Fo2jdbNbm2mIgE_4c7uoPPvv4ug.roa
File: Fo2jdbNbm2mIgE_4c7uoPPvv4ug.roa (raw, json)
Hash identifier: wLpLbqCejEY39WcZSos4YflNYliW1KSOXcVmSuYCJQM=
Subject key identifier: 16:8D:A3:75:B3:5B:9B:69:88:80:4F:F8:73:BB:A8:3C:FB:EF:E2:E8
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01856F8B8DD2FF9949E6A88E4873EA4ECFBE
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/Fo2jdbNbm2mIgE_4c7uoPPvv4ug.roa
Signing time: Sun 01 Jan 2023 22:54:54 +0000
ROA not before: Sun 01 Jan 2023 22:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211515
IP address blocks: 178.237.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8d:d2:ff:99:49:e6:a8:8e:48:73:ea:4e:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 22:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=168da375b35b9b6988804ff873bba83cfbefe2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:c9:75:2a:c0:da:d5:6b:7f:47:7a:6e:a2:
63:61:5f:c9:86:a1:da:b9:29:93:95:fd:0b:16:63:
23:2d:07:37:ef:ac:f0:30:e5:66:21:02:5a:cb:c8:
8a:ef:c2:12:9c:5f:e1:81:8b:f1:bb:ae:07:98:49:
8f:87:f1:8d:a9:f1:45:dd:de:1e:78:e3:ba:54:aa:
3c:d7:31:b3:41:ff:18:bf:6d:2d:9a:b6:94:7b:ee:
f0:af:8a:f5:de:79:23:20:01:5b:ae:0e:74:49:5f:
4a:87:05:3c:37:17:69:4a:c1:e8:ec:b5:70:10:db:
f5:56:dc:99:71:4e:7d:8f:c0:c8:9e:2d:bc:f5:52:
8a:81:d4:b4:db:a6:1f:2b:df:a5:09:3c:61:22:28:
0d:27:fd:1d:f9:8c:3d:14:4c:73:5b:32:e0:68:e1:
2e:e9:67:ef:d5:00:13:56:66:e2:b4:13:46:f5:12:
3b:d2:c8:ef:b9:01:2a:db:bb:c1:e6:20:70:86:75:
ab:ab:7f:20:8c:f1:94:83:8a:df:24:b8:14:cf:b7:
d4:83:4a:47:6a:3b:35:82:54:3a:bb:24:e9:5e:b8:
36:3c:e1:f0:76:5a:6f:38:71:0b:37:44:cd:f3:54:
97:34:08:1c:77:8d:76:5e:c2:9a:aa:83:8f:f4:1d:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:A3:75:B3:5B:9B:69:88:80:4F:F8:73:BB:A8:3C:FB:EF:E2:E8
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/Fo2jdbNbm2mIgE_4c7uoPPvv4ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.204.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9f:9c:9e:df:a5:36:40:35:e7:72:47:a2:a4:82:3d:58:c9:
20:ea:99:7e:ce:34:5f:10:b7:b9:49:7d:14:9e:5f:83:00:46:
49:33:86:fa:fb:dc:96:1b:49:a0:e3:b7:db:90:41:3c:70:6e:
6a:ab:eb:64:58:a5:b4:68:31:1c:7f:29:47:08:a0:cd:98:d1:
b9:7e:b3:9a:41:96:5c:97:84:7d:16:a3:37:2a:9e:8d:7f:13:
f5:2d:24:24:50:e0:26:ad:8b:80:9e:ca:6a:93:f3:28:d5:50:
2a:3c:28:1c:4b:a9:d8:fa:d8:7e:a4:a5:4c:da:24:b0:b8:35:
4b:3c:1b:41:9d:73:50:0e:6d:5a:d3:1e:f6:e2:ed:9f:bd:5e:
5e:70:eb:2a:9c:7f:53:27:65:81:ed:99:ca:36:54:91:5b:ce:
b9:52:e8:7c:10:f7:95:26:04:1e:2d:61:6b:26:cc:67:b4:3c:
5d:88:d6:36:3d:1a:c3:2b:d0:5b:09:8f:39:f7:9b:b1:06:35:
82:3a:f7:88:f0:73:ac:f9:94:55:16:77:17:71:fa:05:44:b1:
50:37:5b:74:7f:2d:c3:7c:44:8b:dc:1b:0d:0f:ec:fc:9d:06:
10:de:6d:e3:3c:ba:ee:8d:84:ef:d2:55:52:ee:c2:6f:e7:6a:
ce:2d:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:10 2024 by rpki-client on console-fra.rpki-client.org