Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VWN7RrN0BakQbBZYmYfiQ7eA_g0.roa
File: VWN7RrN0BakQbBZYmYfiQ7eA_g0.roa (raw, json)
Hash identifier: AuvMKX00q5RM2OcLoA8YxO+8iXZFEX+7+oyni3yilQk=
Subject key identifier: 55:63:7B:46:B3:74:05:A9:10:6C:16:58:99:87:E2:43:B7:80:FE:0D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7DBC0DBF652EEEB4A133A1527D88B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VWN7RrN0BakQbBZYmYfiQ7eA_g0.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150303
IP address blocks: 178.253.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:db:c0:db:f6:52:ee:eb:4a:13:3a:15:27:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55637b46b37405a9106c16589987e243b780fe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:d6:11:1e:bd:07:f7:f7:98:4d:09:f0:9b:
ca:1e:f3:89:70:82:b2:a1:76:d2:0e:1e:f0:b1:cf:
40:15:e3:53:ec:b8:3a:16:24:df:56:ef:63:99:bb:
2d:29:72:2b:04:cd:94:b0:f6:54:eb:4d:a0:64:80:
a5:64:69:99:3c:ad:81:d9:c6:ca:07:45:8d:85:30:
10:a1:64:94:70:60:2d:4b:ed:a4:9d:2e:ec:dc:35:
d9:d9:cf:ad:37:dd:18:e7:d1:26:77:76:73:c6:99:
c8:5b:fd:e3:e0:c2:e5:a4:b8:af:ea:03:d6:69:eb:
7e:6f:58:2e:09:0f:90:d2:b9:9c:72:92:f8:a2:f6:
3f:60:d3:11:e9:5e:bb:96:1b:b4:0e:2b:64:75:e5:
2b:92:cb:f9:c1:c4:6f:74:73:e7:4f:fe:25:36:9d:
ae:3b:3a:85:e7:f4:6b:3c:af:b9:ee:0b:e1:6f:59:
c5:e8:bc:7e:25:97:73:7b:12:5e:c7:fe:1c:cf:a3:
3a:15:83:bb:ce:cb:6f:ca:9b:30:9c:a8:e1:78:ff:
0e:80:f5:1b:e9:77:88:13:4e:79:1c:19:9c:55:88:
74:bc:5b:aa:7a:bd:11:25:d4:f8:30:e0:d4:de:3b:
b4:37:74:99:51:fb:79:6f:39:fb:79:b9:3d:bc:58:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:7B:46:B3:74:05:A9:10:6C:16:58:99:87:E2:43:B7:80:FE:0D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VWN7RrN0BakQbBZYmYfiQ7eA_g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:36:e6:4b:8b:b4:29:80:27:bb:92:c5:cb:e8:a0:57:e9:c0:
74:ba:da:b2:90:7b:da:51:ee:36:33:ae:b0:e8:05:08:87:e5:
db:3b:91:36:74:bf:51:48:11:8b:58:b6:bf:79:16:9f:1f:23:
65:65:88:df:db:b7:6e:44:16:96:2f:b9:99:c0:13:9c:14:24:
ac:4c:94:a7:e9:bb:dc:c8:28:31:e6:ab:a8:93:5b:3e:6e:15:
a1:37:3e:0f:8e:07:09:f7:10:5f:01:ec:70:67:e8:37:e8:e9:
0d:b4:29:68:08:b9:03:ff:0b:c8:06:17:ba:88:6f:b2:26:b2:
24:91:b1:fc:b2:fe:b4:1a:c1:1a:0e:89:05:c8:4d:9a:af:3c:
7a:c4:ee:b3:3c:94:fa:73:40:3e:ca:59:c1:4e:bb:bb:2b:a4:
ab:1b:0e:d3:3d:54:f3:a7:c5:1c:87:1f:1a:81:c4:be:ee:3b:
bf:62:01:96:55:97:7a:15:a6:65:50:2e:d8:7e:fa:4c:6d:2c:
12:60:5d:8e:d1:b0:57:f5:2f:f2:73:4c:f9:36:f3:cc:b3:f3:
78:9a:0c:b2:04:d5:d7:66:34:1f:44:da:80:4e:f1:53:ce:50:
e4:44:6a:36:75:8a:24:91:5a:0c:c9:2c:ce:7b:1b:d7:b0:c5:
96:62:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org