Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jCETz3jsA3ZSZHj8ejD_TT8rg1E.roa
File: jCETz3jsA3ZSZHj8ejD_TT8rg1E.roa (raw, json)
Hash identifier: OpDhj/vR4icPLMSFDJ6GLHps9aMcseaO2UrL5C51HY4=
Subject key identifier: 8C:21:13:CF:78:EC:03:76:52:64:78:FC:7A:30:FF:4D:3F:2B:83:51
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E14FE1F8B1ED68AD99FC31B4DD6DF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jCETz3jsA3ZSZHj8ejD_TT8rg1E.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 194.28.128.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:14:fe:1f:8b:1e:d6:8a:d9:9f:c3:1b:4d:d6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c2113cf78ec0376526478fc7a30ff4d3f2b8351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:88:08:3b:29:1e:5e:9a:6b:93:e8:06:e6:
ab:f4:ed:5f:f8:87:e0:f6:25:bb:29:cb:c4:0a:57:
33:ee:af:2b:05:b1:af:7b:7e:77:84:cd:a1:74:d1:
ca:3e:53:3e:d1:a6:7f:f0:6b:c4:9e:47:b2:49:19:
f9:4c:af:a8:6c:09:91:f3:e2:a4:d4:37:ad:c0:59:
10:7d:87:00:88:e2:4c:6b:da:c4:31:b5:5b:fd:3b:
72:ef:e5:61:a4:b4:22:66:da:d8:4b:63:cd:35:3e:
3a:bd:44:16:73:53:cd:17:70:67:dc:0f:7d:94:21:
4c:32:91:1c:b9:84:ca:2f:5e:13:da:12:60:e8:02:
a5:4e:00:93:45:68:f5:d5:51:79:43:ba:6a:aa:9f:
05:d5:e0:75:eb:a5:89:a1:c5:90:89:64:4c:28:f7:
36:1b:f0:56:35:b6:ac:25:18:b1:1a:27:b0:ab:c1:
dd:c0:35:69:40:6a:4a:48:18:a8:50:fd:f8:79:84:
bf:65:8f:2d:f6:4d:ad:37:49:e1:75:41:6b:e3:a8:
23:fd:cf:8f:d2:af:5a:7f:80:55:43:df:6f:62:7d:
d4:e5:30:de:38:12:d6:45:99:3b:9c:2e:2b:b2:12:
00:51:19:41:cd:d8:9b:0a:2c:18:d8:db:98:db:07:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:13:CF:78:EC:03:76:52:64:78:FC:7A:30:FF:4D:3F:2B:83:51
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jCETz3jsA3ZSZHj8ejD_TT8rg1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.243.0/24
194.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ce:51:19:64:70:e4:1d:91:6b:7a:52:8d:f8:47:9c:bc:51:
8c:90:65:f7:af:3c:6b:02:46:97:10:4d:e9:bf:97:fe:a3:81:
97:b8:7a:7f:fa:6b:79:eb:34:f3:29:0f:2e:d6:f9:22:66:ba:
b9:7c:5e:be:4a:1d:cb:b4:7e:da:2c:fa:c5:43:5f:4c:4f:61:
22:c5:cf:48:bf:d5:5a:7e:29:4f:c1:1d:89:9a:0b:b0:57:58:
75:28:d7:29:7e:3d:33:97:9e:d9:0c:7c:f0:e8:f8:7e:89:26:
c8:9f:3f:5d:b1:ff:0d:12:dc:db:b4:6c:a1:39:a4:9e:f4:de:
65:71:f6:f6:60:99:13:24:c7:58:36:8e:a2:a6:5a:e8:c3:0d:
ae:4a:f8:a0:dc:ce:cc:7d:82:de:ce:3e:50:10:cb:5a:56:ad:
2c:b5:50:10:a1:46:56:40:8d:cf:88:df:0c:a4:fd:d7:82:57:
c5:23:65:c5:ec:77:c4:3b:77:3e:2b:34:5c:a9:bc:99:9a:92:
31:28:47:a7:c3:fe:7a:5b:c9:34:ad:b2:69:36:46:4f:d3:1b:
bf:6d:89:46:f6:ac:f0:b2:59:e8:dd:3d:8f:73:9f:12:7a:b2:
e1:d6:a5:bf:cc:cf:db:1a:a7:18:3b:5a:e5:36:50:0d:59:fc:
56:8c:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 13:35:23 2024 by rpki-client on console-ams.rpki-client.org