Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ck20p33xousiJoYXsmDwP4j8ymM.roa
File: ck20p33xousiJoYXsmDwP4j8ymM.roa (raw, json)
Hash identifier: A7POm4Mh2KBHJwTPF7siqoOy5Xa52ophOjfx2KgdVTk=
Subject key identifier: 72:4D:B4:A7:7D:F1:A2:EB:22:26:86:17:B2:60:F0:3F:88:FC:CA:63
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01856F8B8D3808C22F52A19B39DD4F27EC08
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ck20p33xousiJoYXsmDwP4j8ymM.roa
Signing time: Sun 01 Jan 2023 22:54:54 +0000
ROA not before: Sun 01 Jan 2023 22:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56666
IP address blocks: 178.237.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8d:38:08:c2:2f:52:a1:9b:39:dd:4f:27:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 22:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=724db4a77df1a2eb22268617b260f03f88fcca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:77:fa:84:54:d5:a1:d1:0c:0c:4b:e5:5b:
f1:69:66:ad:02:1a:9a:16:83:bc:9e:8f:6a:38:b2:
29:0e:b1:4b:ce:9a:b0:05:e6:4f:c6:c3:84:a1:aa:
08:18:39:e2:01:cd:ae:b0:73:9f:88:1c:fd:a0:86:
79:c4:d8:21:e7:13:d6:3b:27:16:96:51:50:1f:e5:
95:81:ce:76:75:ed:7f:8d:7c:01:33:c9:30:49:f2:
02:a4:c2:d2:bc:2c:15:6d:73:de:c3:ba:73:d2:1a:
01:68:59:bf:ae:fd:bf:46:ed:c3:7b:e8:54:9c:37:
ad:49:3e:03:17:6f:cb:0b:7c:14:d3:bb:a8:fb:e3:
20:13:12:b4:23:5b:89:dc:7e:f9:65:1b:1e:68:f3:
54:b9:fc:2c:0e:0b:7e:69:22:fd:e5:87:90:a4:49:
5b:34:f2:46:39:e5:49:26:97:f7:a2:41:72:2d:ab:
3e:82:46:18:ae:0b:57:74:2a:b4:d7:1c:a7:97:8c:
3a:7a:1a:01:6f:23:f8:66:49:c6:41:94:46:53:0d:
fd:4b:35:09:98:48:b5:5c:64:4b:ff:61:d2:67:85:
19:1c:b6:35:25:0a:aa:ba:c7:15:0f:95:b8:0d:f3:
f9:3a:1d:9f:3b:77:31:36:c5:64:2c:24:c6:ff:cc:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:B4:A7:7D:F1:A2:EB:22:26:86:17:B2:60:F0:3F:88:FC:CA:63
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ck20p33xousiJoYXsmDwP4j8ymM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.206.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2a:34:86:fc:d8:14:d8:0d:f2:59:e1:3c:84:9c:93:80:95:
c6:2b:14:c6:88:86:dd:63:c5:67:fd:41:4f:53:35:4a:08:83:
f0:b5:70:ce:fa:c5:59:6d:14:31:00:46:83:ff:63:d1:a4:88:
79:30:9a:29:ce:c8:83:02:ab:d9:cf:21:3d:d0:ed:a9:53:8b:
6b:d0:da:47:cf:5c:ca:dc:70:ba:3c:a8:f5:7c:f3:70:df:7d:
6d:7d:c7:19:db:4d:d4:a3:d9:bc:34:10:a3:6d:7c:d6:2a:f7:
38:08:ab:07:19:04:91:a4:e6:85:dc:62:e0:37:36:87:97:0a:
24:b5:3c:11:e1:4d:58:1c:98:35:d7:76:74:34:a3:9e:d8:06:
9f:7c:a7:26:9e:e0:5c:1e:9b:0a:51:3c:11:e5:f9:b7:b8:34:
51:56:ba:a9:78:a6:85:45:83:7e:df:ff:b7:68:25:29:90:c7:
46:40:07:42:29:0d:02:35:18:3f:12:c0:d1:18:a6:9d:19:2a:
a8:6a:ec:e4:89:62:d9:9e:66:be:f3:6d:f6:38:b7:4e:ec:c3:
41:f8:f0:4d:3d:d2:70:11:80:8a:41:b5:b3:d3:04:16:90:b1:
a1:d3:8b:3f:74:e4:21:b1:66:53:ef:5c:e8:74:29:7b:67:4d:
6f:f6:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org