Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/cl27AzRXq_BOiklmQzztB7vMa6I.roa
File: cl27AzRXq_BOiklmQzztB7vMa6I.roa (raw, json)
Hash identifier: TYxl7kVcrcQRifdiMLVQqqZEPPqz6Ne/a2xW4D9ulmI=
Subject key identifier: 72:5D:BB:03:34:57:AB:F0:4E:8A:49:66:43:3C:ED:07:BB:CC:6B:A2
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0186986F708F9A52193F1026D3174D4FF4C8
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/cl27AzRXq_BOiklmQzztB7vMa6I.roa
Signing time: Tue 28 Feb 2023 14:31:25 +0000
ROA not before: Tue 28 Feb 2023 14:31:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 178.171.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 10:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:6f:70:8f:9a:52:19:3f:10:26:d3:17:4d:4f:f4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Feb 28 14:31:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=725dbb033457abf04e8a4966433ced07bbcc6ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:31:40:cf:8a:d6:ee:55:6d:06:24:a2:b3:
e2:0a:85:eb:9a:0a:ba:e2:1c:ee:bf:a3:3c:f1:6f:
3f:2a:a7:95:dd:91:ed:43:d9:51:1d:a5:a7:00:31:
d6:ec:0a:bc:a6:6d:03:6f:a2:05:ab:b0:05:3e:cf:
bd:85:43:41:72:c1:45:eb:bb:e8:64:1e:62:75:46:
5f:74:74:79:7c:7d:d6:38:45:c4:a9:46:25:a4:18:
53:9a:5f:a0:33:99:7f:90:27:57:a5:1b:a5:e1:01:
6e:97:72:f9:36:3a:ec:94:88:2a:5d:ba:3a:67:e3:
69:fa:bb:33:ac:7a:74:cb:5b:20:ca:67:f7:de:d7:
61:20:35:6b:8b:de:6c:d3:88:b2:7e:a5:7e:2c:5c:
f0:06:d0:be:91:83:71:d9:d6:1e:aa:37:cf:a9:c3:
a6:e6:1c:07:78:98:e9:85:80:e5:cb:bf:9e:41:10:
0a:e2:30:09:52:3c:5a:cd:ff:80:ea:3e:28:e2:e9:
c5:af:12:8c:47:dc:12:ad:1c:29:8e:69:d1:7a:87:
b2:a7:d4:f8:e9:24:62:57:84:ef:4f:79:8b:98:7c:
7a:b2:04:2b:a8:4d:60:77:1d:ca:8f:d9:10:95:6b:
95:8c:af:59:6a:a1:c2:a8:c7:16:f7:f5:52:52:cc:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:BB:03:34:57:AB:F0:4E:8A:49:66:43:3C:ED:07:BB:CC:6B:A2
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/cl27AzRXq_BOiklmQzztB7vMa6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.94.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e3:ab:eb:84:ae:c2:2b:6c:32:8b:f1:58:a9:65:83:0b:af:
78:5c:b2:44:99:f2:94:d9:be:5d:9b:e6:75:bb:cd:b6:78:c6:
b1:8a:23:4c:85:2e:20:58:f0:47:06:19:83:68:d8:2d:ab:fb:
87:8e:69:89:5c:3f:68:9d:3d:8f:ed:cc:fa:78:b1:b3:45:7c:
f3:d0:fc:29:80:53:11:33:6b:b4:55:b5:b2:9a:6d:fe:83:a0:
23:4a:f8:c4:4e:ef:5b:05:48:0e:df:8c:1b:2f:32:47:48:0f:
6c:44:92:4a:97:00:6a:b7:c0:17:c4:b2:0f:6a:ee:e4:49:c6:
c3:e2:79:a9:c6:b2:c2:2a:12:9d:81:29:65:dd:a6:d6:82:37:
55:ec:c9:8b:b3:38:5f:44:33:72:75:c6:65:66:1a:48:d7:94:
25:26:ea:76:46:d6:67:85:d7:ee:88:60:b7:82:46:e9:17:00:
16:77:6b:ec:fe:3b:bf:ab:9b:cb:1a:36:a3:a3:3e:63:ec:da:
ea:32:2c:c0:8a:07:9c:c5:64:58:9e:53:c9:df:78:9b:8c:be:
37:04:97:29:6a:74:a5:0e:c1:d1:83:74:a8:76:bd:bc:79:8d:
fd:55:e7:14:21:cb:f2:51:1d:0a:8b:29:de:c0:67:ad:f3:17:
ed:7e:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org