Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/LtUTgOkIYs-_q7tOa8WT9tCcPyU.roa
File: LtUTgOkIYs-_q7tOa8WT9tCcPyU.roa (raw, json)
Hash identifier: 4u17aHVVBYmP0ydEYDrtXGgTFqE1jU2SnqA/kjZS028=
Subject key identifier: 2E:D5:13:80:E9:08:62:CF:BF:AB:BB:4E:6B:C5:93:F6:D0:9C:3F:25
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 018A46C4E96AD129C006F0FA54FA97D7E5AF
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/LtUTgOkIYs-_q7tOa8WT9tCcPyU.roa
Signing time: Wed 30 Aug 2023 14:07:04 +0000
ROA not before: Wed 30 Aug 2023 14:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 178.255.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 08:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:c4:e9:6a:d1:29:c0:06:f0:fa:54:fa:97:d7:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Aug 30 14:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ed51380e90862cfbfabbb4e6bc593f6d09c3f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f8:7b:bf:8f:a6:75:b5:3f:fe:06:ef:4e:4d:
14:5d:67:01:04:d5:c0:35:92:b6:c4:a4:d4:85:25:
8d:89:47:bf:7c:34:e6:00:b1:2f:15:74:a0:2b:ad:
3e:f0:2f:85:ec:12:6d:a3:32:bc:21:1f:a6:2d:4b:
18:64:36:2a:ce:c2:3b:d5:78:38:ec:5f:b4:96:68:
01:d8:cc:5b:b6:55:68:37:07:b2:58:4a:4e:47:5a:
1b:73:64:8e:f4:b4:5c:4c:45:d5:88:fb:f2:f7:81:
f0:d0:ad:36:97:30:51:59:2d:6a:8b:a1:8b:07:25:
44:cc:7f:5d:5a:7d:6e:7e:32:41:70:97:4b:1e:01:
f6:59:9e:96:2d:82:8a:bf:14:09:ae:01:0d:18:c1:
41:c6:a7:97:b8:26:3c:e3:ba:49:c1:33:3b:c3:29:
21:ed:e1:43:04:62:58:d0:bf:18:92:c3:a5:8b:04:
8b:db:7e:23:f4:9b:54:58:9c:8a:c7:c3:09:1a:c7:
d7:c7:66:8b:27:3c:6d:5d:be:d3:c4:e3:be:5b:63:
22:62:34:86:e5:e0:b1:3d:40:b7:08:5c:e0:02:b7:
dd:3a:ef:9f:97:0d:12:b4:53:a4:f1:cf:b0:6b:e1:
16:ce:42:a2:68:f0:22:96:ec:69:c7:22:fe:f3:73:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D5:13:80:E9:08:62:CF:BF:AB:BB:4E:6B:C5:93:F6:D0:9C:3F:25
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/LtUTgOkIYs-_q7tOa8WT9tCcPyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1a:7a:c3:14:d5:18:ac:a7:28:b3:59:ca:d6:43:5e:eb:22:
18:24:5f:66:49:af:2a:4e:6a:e2:ff:86:84:d6:61:c6:f9:c7:
d0:3d:fa:ef:0f:92:53:c7:76:8b:60:ce:54:56:a8:72:4c:67:
97:2e:45:e7:a0:d5:a2:21:e9:42:c8:63:ac:0e:02:69:29:27:
0d:e4:45:f1:16:eb:1b:2a:17:c1:61:cb:14:9b:c0:7a:e1:f3:
d0:7d:8b:d1:cd:45:5c:7d:73:7d:46:15:22:32:b1:f5:13:e3:
8d:41:08:07:a9:7b:24:cb:e1:17:b7:7a:48:c7:81:50:d1:d6:
be:12:f7:30:cb:66:04:ff:fa:71:7c:40:de:31:36:c4:fa:8d:
10:1b:5c:93:17:0c:2b:a5:26:26:08:29:07:20:32:36:da:ee:
2d:da:74:4d:99:fc:67:f1:72:75:bf:d0:4c:37:e3:1f:8e:b4:
3e:68:12:1a:8b:4f:86:69:9a:d9:98:e8:90:da:8e:02:a0:51:
7b:29:4c:f5:f7:02:53:b2:e9:d9:99:aa:8b:17:dc:10:41:97:
66:e2:0a:99:a3:40:64:c9:03:13:f6:8e:cf:75:d5:ec:aa:5c:
d8:61:61:8c:ad:6d:a6:91:c8:39:aa:07:3b:a3:2d:75:66:53:
28:60:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org