Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/g4YErsMsCoiBpZzqOiLckrOa5Bs.roa
File: g4YErsMsCoiBpZzqOiLckrOa5Bs.roa (raw, json)
Hash identifier: dG6NZ96Uo+g7YIJZ/h7AA/8W33SAK26tH9ZZu/m0o6k=
Subject key identifier: 83:86:04:AE:C3:2C:0A:88:81:A5:9C:EA:3A:22:DC:92:B3:9A:E4:1B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188DCE10CE4B3A4DE9DC4F642A7921AC4F6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/g4YErsMsCoiBpZzqOiLckrOa5Bs.roa
Signing time: Wed 21 Jun 2023 07:35:16 +0000
ROA not before: Wed 21 Jun 2023 07:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 212.69.10.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 08:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:e1:0c:e4:b3:a4:de:9d:c4:f6:42:a7:92:1a:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 21 07:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=838604aec32c0a8881a59cea3a22dc92b39ae41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:a0:f2:5e:fa:8d:e7:7f:76:30:9e:c7:4f:
3d:ea:55:46:ab:d9:e2:6b:e6:23:80:fc:3b:c6:b5:
af:20:0b:be:c9:92:d1:34:92:50:38:2f:0c:46:d1:
ba:09:9f:e9:47:34:b7:82:5f:a2:4c:ed:ca:64:42:
39:41:81:de:91:dd:84:6d:e3:40:ed:8b:86:47:58:
01:c6:33:cd:a9:ed:fb:4a:94:a6:7b:33:33:83:80:
8e:4f:f7:cb:7f:8f:25:5b:a7:64:c9:d8:a6:3f:06:
12:a5:e7:e7:33:02:d4:49:fa:af:ee:92:b5:28:7d:
e9:fc:4d:0f:18:1a:84:85:b9:34:55:b0:40:1d:4b:
55:56:e1:2a:48:48:56:4f:fb:f6:ef:38:ff:d3:1a:
e2:41:b7:d6:90:93:29:29:db:fd:99:6e:ff:6e:d0:
df:83:cc:60:cd:68:40:3a:c0:fd:cc:ba:87:db:00:
7b:1c:b3:19:68:1a:f2:15:2a:5e:a9:64:db:fc:2b:
f3:ca:40:7f:c2:44:56:99:7f:4f:8f:2e:7a:2b:76:
6c:f6:81:49:9a:7c:97:42:86:f5:1a:06:6f:4e:7a:
4a:32:d3:b8:dc:7e:da:b5:ee:dd:26:af:1d:92:eb:
fa:91:02:e1:e4:b0:23:a0:c3:dc:49:58:cc:94:7a:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:04:AE:C3:2C:0A:88:81:A5:9C:EA:3A:22:DC:92:B3:9A:E4:1B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/g4YErsMsCoiBpZzqOiLckrOa5Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.235.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a8:e1:c6:2f:99:2b:24:78:ef:fd:8e:ff:5a:69:f7:d2:fd:
ed:dc:0e:a1:26:f0:f5:41:85:92:c5:b9:49:c2:2c:71:73:52:
3f:a7:1d:80:98:7a:35:08:22:12:0d:c2:ab:20:8e:e0:15:ed:
57:41:20:68:6d:90:95:ca:9d:3a:dc:84:57:34:76:4b:51:79:
f1:f4:0d:4c:43:eb:66:cb:c2:4e:2e:36:43:0e:70:17:87:f3:
31:85:cb:6c:cb:f4:ab:ff:64:10:57:8c:e8:8b:ca:c2:45:66:
28:14:26:39:22:b6:e3:bc:0a:1a:5a:e5:c0:b6:a0:04:a2:f4:
d7:41:d6:b1:f9:d1:2b:9b:d1:bd:a4:40:c5:dd:77:97:7f:d7:
4a:5d:2e:05:68:3e:49:8d:af:df:f2:12:d5:ce:d5:65:74:d6:
ab:eb:aa:ba:b9:0e:17:83:8e:22:83:3b:fe:8a:62:be:e9:e7:
9e:75:65:75:5a:d9:ef:cd:b3:cf:95:41:81:59:e5:03:ea:8e:
e7:01:05:07:09:24:5c:16:c4:b8:5f:37:d6:e9:63:46:ad:7f:
c3:1e:4f:0f:b0:ae:d5:d6:f2:74:1b:db:63:af:cb:ad:18:0c:
a8:7e:94:70:c7:42:29:0f:b1:e6:8c:0a:44:75:00:4b:90:9a:
4b:23:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org