Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/F-ZeBhVgnWtye4QqKIY-WPCDZvI.roa
File: F-ZeBhVgnWtye4QqKIY-WPCDZvI.roa (raw, json)
Hash identifier: uEoknJE+yEMc0QUHxf6TF9tSB2G4xQCiu1FOcifCQV0=
Subject key identifier: 17:E6:5E:06:15:60:9D:6B:72:7B:84:2A:28:86:3E:58:F0:83:66:F2
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 0185A7522A82B8998311057C20F6BF3DECB9
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/F-ZeBhVgnWtye4QqKIY-WPCDZvI.roa
Signing time: Thu 12 Jan 2023 18:50:57 +0000
ROA not before: Thu 12 Jan 2023 18:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 178.159.100.0/24 maxlen: 24
178.159.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 12:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:52:2a:82:b8:99:83:11:05:7c:20:f6:bf:3d:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 12 18:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17e65e0615609d6b727b842a28863e58f08366f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:86:9f:f0:39:a8:59:97:84:77:91:05:86:
66:df:2c:9a:d1:a2:ad:4f:59:20:89:ae:a5:50:bd:
99:b2:a0:53:bf:73:5f:fe:42:35:c0:09:e9:fa:c2:
13:99:5c:2d:b2:ae:25:72:99:43:28:62:ca:71:bc:
e4:aa:44:3f:2d:4e:dc:62:c0:86:ee:0b:d6:88:d2:
c9:11:59:20:8f:39:2b:42:89:35:da:c0:8d:f2:a0:
41:d9:6d:c5:33:8e:e6:f3:92:2e:07:00:8b:53:cf:
55:15:3d:a5:9f:a1:a3:04:5b:d6:d3:78:5e:e7:d0:
3d:0e:61:8d:39:00:6c:00:f8:6d:cf:3a:39:34:3d:
e7:b6:32:2a:2c:80:3d:08:d9:08:68:c8:fc:e4:53:
86:dd:44:23:02:ce:9a:9f:d0:24:46:1d:a3:78:ae:
7e:f7:e3:45:8f:34:41:81:b8:21:3b:9d:af:38:04:
ed:74:df:ba:ce:db:84:f2:9a:5a:2a:42:50:b7:7b:
13:c2:f6:66:b5:23:d2:35:28:81:f2:87:62:65:95:
87:e5:3e:67:92:e2:25:37:fc:39:60:cc:84:93:94:
6d:ab:28:29:8e:14:52:68:3b:38:05:9e:fe:7a:b1:
80:ec:26:33:0d:40:cc:40:4a:5c:9c:82:2c:72:1d:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:5E:06:15:60:9D:6B:72:7B:84:2A:28:86:3E:58:F0:83:66:F2
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/F-ZeBhVgnWtye4QqKIY-WPCDZvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.100.0/24
178.159.107.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7e:e0:88:cb:98:ca:6c:38:e1:57:03:dc:0b:f7:03:3a:b5:
0c:ca:1c:1a:48:20:73:cd:37:63:d3:d5:61:9e:58:fb:f1:11:
66:7a:59:1b:e7:0c:8e:df:3c:4e:e8:75:a9:4e:79:b5:63:5b:
02:18:9c:ed:98:13:b1:b0:14:93:b3:9c:1a:f9:2e:5c:a4:9c:
3c:95:a6:23:90:8c:ad:80:59:42:ac:90:42:fe:c6:65:fb:de:
93:f9:6d:1e:3b:93:ff:83:dd:f2:98:c3:6c:47:7e:4d:35:5b:
02:eb:5c:09:7f:a5:b3:29:1b:35:cd:69:d5:53:8e:14:99:bd:
fb:e9:60:e4:a8:5c:4b:3c:76:03:aa:69:a5:21:8c:98:ad:f1:
4b:92:a1:4a:ff:34:89:9c:57:81:ad:05:ad:ba:3a:04:c5:6f:
7f:64:d1:13:3e:7a:f4:e4:c2:c1:89:97:e4:5c:40:78:08:7a:
60:84:49:39:f4:3a:de:80:ef:44:4a:7d:71:19:29:8e:92:c4:
7b:bc:c4:fb:e5:20:72:3c:54:7c:33:f9:66:e3:24:a9:3b:c1:
47:9e:e2:36:83:be:46:32:a3:8f:32:b7:da:5b:e0:ec:8f:8b:
52:9e:f7:5b:1b:ac:01:a1:ae:28:80:6f:da:5d:c2:01:19:f7:
c3:3c:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:17 2024 by rpki-client on console-ams.rpki-client.org