Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rWQQNVgGhY54yXo1_56_rB8wweM.roa
File: rWQQNVgGhY54yXo1_56_rB8wweM.roa (raw, json)
Hash identifier: 5GZX0OTx6TofmrdToeJRovoBoPOqkP14IyOadtUUn6U=
Subject key identifier: AD:64:10:35:58:06:85:8E:78:C9:7A:35:FF:9E:BF:AC:1F:30:C1:E3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E0A8AD3EABE44E148F39D6D28C268
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rWQQNVgGhY54yXo1_56_rB8wweM.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 178.253.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 09:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0a:8a:d3:ea:be:44:e1:48:f3:9d:6d:28:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad6410355806858e78c97a35ff9ebfac1f30c1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:47:20:6d:67:f3:87:d3:c6:8c:6b:2f:db:
21:b6:a6:2d:32:fc:94:12:88:88:68:a7:47:e3:bd:
56:7d:e6:39:10:f5:3f:65:18:ca:21:cb:7f:7f:32:
e8:4a:5a:27:f8:57:7f:4b:40:4e:b0:4a:25:2c:7c:
6f:3a:bb:2f:5b:7b:b3:4f:33:b1:57:a8:05:1e:d4:
09:f7:d4:a9:5b:59:3d:84:8b:df:fd:46:ed:ae:ba:
4b:35:a8:89:be:b2:34:72:3a:f5:0d:ff:81:c5:e0:
ad:c4:af:3b:74:79:79:35:bd:30:b0:50:4e:e2:7c:
df:08:f8:e4:a7:2e:8f:09:95:92:71:11:75:5c:eb:
ad:9a:5a:e8:20:29:52:c8:43:1e:10:62:ce:67:59:
f6:0e:de:6c:a3:4a:9c:10:9b:b0:db:b7:38:a9:8d:
7c:32:d5:cc:f5:52:7f:82:40:79:f4:41:61:88:2e:
59:3d:4b:ec:b6:e6:ff:13:e3:f7:b8:b3:ee:2a:80:
7c:09:b0:de:92:05:7a:4c:0b:1f:37:87:cc:71:54:
0c:c8:bb:c5:91:71:ea:5b:78:0c:45:d1:23:50:f8:
41:3c:9b:8f:54:d3:94:3c:77:46:e6:6f:af:35:b7:
95:7b:d3:8b:d7:26:e1:36:1f:ff:97:a9:9c:3a:69:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:10:35:58:06:85:8E:78:C9:7A:35:FF:9E:BF:AC:1F:30:C1:E3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rWQQNVgGhY54yXo1_56_rB8wweM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
77:48:1a:21:e3:84:30:d7:31:13:c2:ae:fb:f8:19:4a:5e:ed:
82:6d:fd:6e:45:07:85:0c:c5:3a:2c:ee:35:b3:cb:03:79:b4:
69:3a:61:1a:84:ff:d4:3d:15:67:f2:3d:83:53:9d:a5:5a:b5:
e9:03:aa:6d:27:59:dd:f9:3d:3d:56:2a:5d:d3:ba:b4:62:b6:
42:d6:0f:a7:b0:b0:6d:d7:17:ac:45:58:15:2e:69:16:ea:25:
30:f1:26:1c:44:54:41:1d:26:24:47:8e:5b:77:bb:e1:fc:4d:
7c:9b:48:c9:0e:4e:b3:d4:9a:fc:1d:ff:8b:3e:54:4f:8f:94:
a8:cf:0f:9e:79:0b:52:ec:b7:70:c8:16:6b:da:6e:f8:67:0e:
62:0e:f2:fd:9c:1b:7a:8f:34:41:6f:ba:bd:ad:4b:8a:d4:e2:
86:63:ac:63:5f:cb:98:cc:b8:6f:1f:8e:fa:a2:45:1d:6c:c7:
20:9d:46:a1:fa:c4:5c:71:35:26:d5:c9:d8:d5:bb:b5:cd:98:
f0:20:9e:29:80:a0:b9:e6:81:f9:60:1f:36:6f:f1:d6:98:77:
0e:9a:94:f5:bb:64:37:0c:0d:3c:5c:e8:4e:2c:fa:88:10:c8:
79:11:2c:79:45:a0:32:cc:5e:8b:4f:7a:bb:e1:3c:74:93:03:
f8:e7:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org