Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/m1TZVClamAqALE4f6R6K2VJLV8s.roa
File: m1TZVClamAqALE4f6R6K2VJLV8s.roa (raw, json)
Hash identifier: zUUEGnIx3XHSAZkmOlazbaXfgXNQ4rvfWboHyTIcs1g=
Subject key identifier: 9B:54:D9:54:29:5A:98:0A:80:2C:4E:1F:E9:1E:8A:D9:52:4B:57:CB
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC0E0C19F7AEC7115288C9F7D49FF
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/m1TZVClamAqALE4f6R6K2VJLV8s.roa
Signing time: Sun 01 Jan 2023 06:04:47 +0000
ROA not before: Sun 01 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197437
IP address blocks: 178.16.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c0:e0:c1:9f:7a:ec:71:15:28:8c:9f:7d:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b54d954295a980a802c4e1fe91e8ad9524b57cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:97:40:c8:40:4f:5a:43:96:fa:10:f1:fa:
8f:97:3b:4f:ea:5a:f5:c0:a7:65:ca:6c:4e:72:78:
12:82:5a:bf:99:bf:cd:e1:b5:05:66:1e:02:50:fb:
b7:be:cb:8b:fa:b1:bb:a1:c1:dd:eb:4f:de:16:be:
91:55:a5:aa:f0:d3:0e:b2:36:4d:d6:f9:69:76:1b:
94:76:56:2f:18:59:05:f5:3f:b7:44:10:a4:0b:ef:
d3:03:3c:63:10:90:ae:77:97:55:d5:bb:7e:83:e9:
a6:fb:b5:7c:59:8b:a0:88:5c:23:49:99:5f:fb:9b:
81:e0:b7:ea:59:1b:4d:7b:2b:3a:38:2f:81:e5:ae:
e9:da:ff:04:da:25:18:0a:64:f0:af:87:b5:88:8c:
e0:06:9d:b5:22:bc:7b:26:40:f4:35:b1:a7:75:b8:
e0:70:52:86:07:2a:f6:0d:d8:4b:8f:33:f3:3b:ac:
43:1c:7c:6d:8c:b4:e0:c1:10:b0:63:45:50:7d:b3:
28:48:67:d3:5a:77:2d:2d:ca:28:7e:0d:82:b9:60:
d7:10:b0:f5:31:1a:a0:89:19:28:4e:3e:e3:bd:0c:
05:8e:94:cc:27:62:cb:00:6e:96:0d:0c:1b:19:a3:
fc:ef:43:5c:e0:90:6b:39:80:ca:e8:33:6d:e2:cf:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:D9:54:29:5A:98:0A:80:2C:4E:1F:E9:1E:8A:D9:52:4B:57:CB
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/m1TZVClamAqALE4f6R6K2VJLV8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.114.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e7:d3:e5:0a:67:5b:12:e5:2c:28:04:2a:75:85:59:f5:b2:
27:3f:bc:ac:ac:0e:f3:59:d5:1d:d6:df:17:4a:48:54:f4:34:
8d:b1:f5:6a:b0:ad:be:73:ba:ba:fd:8e:02:20:74:06:cb:58:
41:17:bd:cb:86:23:99:ab:fe:ff:58:de:cf:32:f3:87:56:df:
a6:6d:45:b8:b8:d2:ae:71:88:58:42:ab:9e:94:e9:1f:e1:fb:
80:6a:44:46:00:41:2d:5f:20:91:29:40:5a:7f:3f:a8:64:9e:
35:88:c8:e5:82:63:3e:5c:cc:09:a0:d5:a5:ad:db:0c:bc:52:
c0:f1:bd:4e:5c:be:72:46:d5:c2:8b:c3:12:d1:27:7a:94:94:
36:a6:1b:9f:77:c7:2c:7f:50:21:97:a3:96:5a:0f:70:3c:60:
9d:de:9d:15:b9:f9:1e:e9:7e:6d:76:a1:9f:6a:43:e3:c2:87:
49:84:eb:a9:25:2c:66:4a:ed:05:05:bf:af:c1:08:19:39:77:
50:c7:25:ca:c3:d9:d9:f7:bf:9e:8c:8e:c7:43:13:38:63:2d:
28:c2:09:0a:27:0a:3d:ff:8f:f0:5e:39:7d:ea:46:c1:54:23:
e5:8f:e4:67:ea:d2:d8:5e:a7:2c:c4:61:1f:ae:05:59:d0:be:
6a:e4:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org