Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rT94BmCJSlnPTusnbW3Oj4TMxPo.roa
File: rT94BmCJSlnPTusnbW3Oj4TMxPo.roa (raw, json)
Hash identifier: QQxeIW3e5Xiqc0xiMgQ0r4+vHuqFIlJZZxCYM7sVW78=
Subject key identifier: AD:3F:78:06:60:89:4A:59:CF:4E:EB:27:6D:6D:CE:8F:84:CC:C4:FA
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01887CFDDDB7BDD63068C7842F017B027F65
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rT94BmCJSlnPTusnbW3Oj4TMxPo.roa
Signing time: Fri 02 Jun 2023 16:43:12 +0000
ROA not before: Fri 02 Jun 2023 16:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 178.253.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 07:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:fd:dd:b7:bd:d6:30:68:c7:84:2f:01:7b:02:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 2 16:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad3f780660894a59cf4eeb276d6dce8f84ccc4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:3d:93:fb:46:11:d6:a8:1f:bf:5c:ec:7c:
fd:a7:c3:19:b5:95:35:95:52:4b:89:3d:ae:e6:be:
27:30:30:de:45:d1:9b:bc:d9:c2:f8:c5:cd:d3:38:
b8:98:78:4a:91:ec:9d:e8:2c:3a:af:53:2d:58:b8:
21:25:5c:9d:7c:82:4f:52:89:c4:b9:18:a4:57:4e:
d1:ec:a6:1e:69:48:86:c5:54:8a:45:90:fe:2c:69:
b0:94:6d:d5:30:d1:67:54:f4:dc:b8:10:6f:89:6e:
e8:51:9c:05:2a:f1:dd:5d:1e:6d:19:15:af:f2:83:
04:ea:df:93:5d:22:46:02:70:9f:2c:54:e1:a4:00:
ef:21:29:c3:9b:a1:d2:cd:d0:29:69:ad:7d:fd:1e:
2d:0e:c1:b7:aa:1b:6e:7b:e2:92:eb:05:3f:87:85:
88:8d:c7:54:5b:df:88:70:1e:f7:e7:a3:1b:44:f3:
7d:84:d1:00:bc:8a:7d:e0:07:af:19:d4:f9:f4:90:
42:f0:18:42:42:ba:bd:cd:d1:4e:83:67:2e:8a:7c:
bf:e3:0a:39:e6:1c:9c:a1:d3:b5:82:c4:e0:6b:1c:
05:7e:73:ef:24:2a:9f:e5:77:ee:00:62:5e:9a:65:
b7:fc:65:75:c2:f6:99:93:6d:e8:c5:58:27:32:d8:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:78:06:60:89:4A:59:CF:4E:EB:27:6D:6D:CE:8F:84:CC:C4:FA
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rT94BmCJSlnPTusnbW3Oj4TMxPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b4:ce:3d:f4:f2:4f:5f:82:46:ca:6e:0b:16:19:13:0f:e2:
46:79:b6:6f:7f:4e:e0:ae:72:42:33:ad:ef:91:17:b9:8b:c0:
6c:23:9b:6a:66:65:44:af:f7:e9:30:98:e5:a6:b1:43:74:a3:
7d:86:e5:26:ea:34:65:44:11:bc:a8:cc:1d:0c:f4:0a:d6:6a:
87:2d:2d:82:ed:58:25:08:59:ef:5e:64:4a:86:6c:7a:fa:d3:
4f:40:60:37:51:76:4f:4d:2c:63:b5:dc:67:c6:00:e3:70:52:
a7:d9:fd:54:fd:a6:70:7f:0a:fe:24:e0:f8:1c:f5:58:fe:62:
51:4a:e6:1e:ab:a5:1d:0e:c2:90:f6:35:26:9a:ba:fc:b5:c0:
88:dd:1f:e8:b5:4a:14:36:66:da:07:60:48:26:31:d4:cb:c6:
ae:8a:69:44:a7:c8:93:4c:86:fd:ed:f1:45:31:e6:57:65:e8:
a7:0d:aa:d5:bd:23:d1:6d:fd:ef:01:39:83:52:d0:95:1f:93:
0f:2e:9f:6c:d6:a9:49:88:0b:9e:fd:14:4f:de:6a:7a:d2:0f:
3e:72:d2:b6:53:94:db:ff:f1:82:c7:09:9b:b6:b8:e9:d4:ac:
aa:e1:3f:46:57:85:d8:60:bb:b7:63:b5:08:24:88:26:06:0d:
67:7e:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org