Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/DIJEneU9SnYv1R2LSFxcuEkRx_U.roa
File: DIJEneU9SnYv1R2LSFxcuEkRx_U.roa (raw, json)
Hash identifier: c5WMt88t+NcmxAy95QU8mYKz7TaMmV8r0/oP6lCw3jY=
Subject key identifier: 0C:82:44:9D:E5:3D:4A:76:2F:D5:1D:8B:48:5C:5C:B8:49:11:C7:F5
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 0185A4B4B539B66CE952DC7042CC3C646B3A
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/DIJEneU9SnYv1R2LSFxcuEkRx_U.roa
Signing time: Thu 12 Jan 2023 06:39:44 +0000
ROA not before: Thu 12 Jan 2023 06:39:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201416
IP address blocks: 178.211.152.0/24 maxlen: 24
2a0d:2540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:b4:b5:39:b6:6c:e9:52:dc:70:42:cc:3c:64:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jan 12 06:39:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c82449de53d4a762fd51d8b485c5cb84911c7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:5b:d8:ba:fa:7a:a4:b3:c5:e5:6f:c8:5c:
ba:a4:bb:2a:3f:92:5e:62:f8:29:0e:cd:de:67:ff:
ed:17:ca:11:5e:a7:97:59:57:e1:ba:5e:ea:28:28:
97:93:31:55:1f:74:ee:18:7e:4d:a2:6d:cc:0b:52:
cb:49:3b:90:43:6c:94:ff:42:cc:4e:ef:d7:a3:7d:
9e:b3:58:99:a5:fc:f0:e3:18:d2:6f:f4:34:1a:0c:
54:ff:f3:eb:4e:a8:32:8d:93:46:8f:aa:ec:49:00:
49:6d:31:2b:a1:10:cf:fd:97:15:c7:22:a2:55:26:
7a:71:04:d1:3f:c5:4b:bb:59:1e:26:22:0d:ed:0f:
e4:be:48:52:e8:34:88:2a:45:ec:89:f0:06:44:bf:
ba:90:ec:4a:d4:eb:04:ed:9d:e3:91:e1:fa:af:22:
45:db:16:97:8d:4e:28:bb:e5:8c:6a:79:af:a4:8d:
16:3c:a5:43:d2:1e:e7:00:d4:06:e9:5e:8a:93:25:
df:41:1c:61:5c:11:c6:d8:f7:ec:08:5d:25:5b:8a:
52:f3:82:9b:68:9a:29:20:85:39:24:03:09:4b:62:
61:ed:ed:41:48:b6:2c:61:3f:4b:12:09:29:c0:e3:
7b:0e:44:f0:2a:14:3c:81:f7:d3:72:53:8b:90:c9:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:44:9D:E5:3D:4A:76:2F:D5:1D:8B:48:5C:5C:B8:49:11:C7:F5
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/DIJEneU9SnYv1R2LSFxcuEkRx_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.152.0/24
IPv6:
2a0d:2540::/29
Signature Algorithm: sha256WithRSAEncryption
14:6f:eb:e1:82:4d:8a:6f:69:08:ad:97:b3:c7:d6:a4:97:fb:
60:75:e8:d1:62:87:66:00:63:3f:83:be:fb:fe:eb:61:23:5e:
7b:ce:a4:a1:4b:56:7d:81:c2:ab:14:b0:c6:c4:df:1a:8c:0d:
fe:42:e4:bf:d4:a5:46:c5:19:34:f2:49:c2:1c:2a:74:36:45:
b7:0a:29:28:ad:da:41:66:8a:35:dc:d8:8d:39:32:fc:7b:00:
41:c8:03:58:ca:91:f0:a1:4b:c4:3f:fe:f7:4f:d3:1f:a6:90:
54:d0:92:bf:ef:54:18:0d:81:f1:f9:41:72:cb:1a:b1:a8:e1:
73:00:cf:0e:e5:07:b2:62:14:31:cd:37:02:63:e6:2e:6d:21:
c6:e2:87:77:f4:f7:c6:1e:09:d6:67:d7:0c:91:1d:26:37:d2:
05:93:fb:22:59:f4:96:f9:a0:e9:09:12:49:cb:28:5e:a2:63:
fd:da:ec:80:d3:48:4e:44:84:e4:f5:78:6e:4d:fe:b1:37:6b:
b6:38:3b:59:9e:08:be:bd:d0:1e:9a:cb:23:87:32:f1:fe:fe:
66:5d:8b:a1:a6:63:db:23:5d:86:d6:2e:be:45:eb:8a:83:7a:
90:b0:8e:b9:f1:ed:4d:1c:5a:e3:f7:59:d6:00:2f:b8:76:e5:
7a:57:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:58 2024 by rpki-client on console-fra.rpki-client.org