Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_tHdzEOIrtapZ5BUUdHH1-jHXrc.roa
File: _tHdzEOIrtapZ5BUUdHH1-jHXrc.roa (raw, json)
Hash identifier: pX4LO4NxaOJgrLjqUlqw+/1QT9uRh/yj2FiPSND8G4o=
Subject key identifier: FE:D1:DD:CC:43:88:AE:D6:A9:67:90:54:51:D1:C7:D7:E8:C7:5E:B7
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FFB7AC18444F0D1BB0E5717BAD19
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_tHdzEOIrtapZ5BUUdHH1-jHXrc.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200030
IP address blocks: 178.156.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:ff:b7:ac:18:44:4f:0d:1b:b0:e5:71:7b:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed1ddcc4388aed6a967905451d1c7d7e8c75eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:76:7d:94:d3:bc:5c:30:4b:fe:31:a2:4f:
d1:5b:96:f8:ed:0a:c6:6f:6e:ad:9d:51:f5:29:27:
1f:f3:cd:01:cc:ee:e1:7b:6a:6a:c8:5c:ce:94:bd:
0d:16:39:c5:b7:bb:75:87:91:e9:1c:f5:41:9c:95:
47:10:df:a5:80:74:40:2f:dc:ca:b0:26:96:21:f3:
58:c2:58:59:f2:f6:5c:de:91:c1:a1:6a:be:cd:f4:
91:47:23:7c:9f:78:e5:93:48:b1:3d:85:30:93:fb:
fe:ae:74:e8:35:5f:98:40:c7:19:91:2e:1b:98:39:
07:50:c6:c1:5d:27:85:a0:68:d4:7a:ff:e3:dd:57:
bd:6c:10:62:a1:ef:1e:b7:a5:7d:e7:64:26:f5:0c:
93:84:1d:a5:ec:a2:d4:6a:93:27:fe:f3:d3:0b:c4:
d9:46:94:8e:e2:fc:78:07:59:1b:85:44:13:ef:32:
1c:10:31:91:a2:6a:0b:bb:ce:4b:55:9f:ec:e9:48:
c5:6e:0b:ac:14:2b:6a:86:75:47:2f:8e:c7:76:03:
c9:0f:dc:7d:c7:e4:94:48:b7:58:ea:69:7b:27:5c:
97:29:30:e5:2e:6b:d0:6f:c9:6e:71:93:b2:23:f2:
a8:a1:24:74:45:d2:9b:96:3c:d5:45:f0:df:0c:f0:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:DD:CC:43:88:AE:D6:A9:67:90:54:51:D1:C7:D7:E8:C7:5E:B7
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_tHdzEOIrtapZ5BUUdHH1-jHXrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.156.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:50:f3:56:dd:42:28:21:4c:4b:72:09:36:a3:71:6c:9a:02:
a4:16:0c:28:a8:6d:c7:a5:e1:a6:85:9f:dd:02:d1:f5:22:52:
22:69:f6:52:7c:ce:0d:dc:b0:7b:55:c4:79:76:9f:68:47:b7:
e2:d1:71:4f:85:d8:0a:2b:75:ca:17:41:d9:0f:0c:6d:de:f4:
4c:ef:ab:74:6c:9e:63:83:09:bd:ce:9b:57:34:99:46:a3:6e:
06:9c:6f:36:22:96:63:d8:2c:6f:13:94:94:d1:dd:79:cb:6b:
f3:eb:2f:b0:a2:fc:e4:fa:ce:62:74:ba:0b:67:21:4f:5d:ff:
70:b0:57:b9:0d:60:96:ab:b2:00:e6:8c:11:22:f1:dc:1b:76:
07:14:4f:49:65:e5:c5:62:27:c4:4c:ff:09:2a:e8:f3:59:c5:
fd:be:1c:46:ec:cd:ff:7a:53:87:f4:94:3d:af:b0:83:20:49:
6c:e3:8a:e3:f8:05:50:68:df:80:13:81:14:dc:da:64:09:6c:
e4:05:c1:e9:42:da:23:4e:48:0d:09:9a:c3:7f:4d:26:2c:b7:
11:fb:13:32:f2:6d:ac:98:45:8c:f3:6b:9b:55:8c:0b:19:d1:
bc:80:39:5a:2f:48:c5:92:90:3a:f9:49:57:66:42:bd:08:6e:
05:68:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:36 2024 by rpki-client on console-fra.rpki-client.org