Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/VeSYQL0WcWPjhkOPFKzF06n3nQc.roa
File: VeSYQL0WcWPjhkOPFKzF06n3nQc.roa (raw, json)
Hash identifier: hHAWvkTZSDEHrXYnGp9p6bwiG33TQBuyLV4KG2lvJvE=
Subject key identifier: 55:E4:98:40:BD:16:71:63:E3:86:43:8F:14:AC:C5:D3:A9:F7:9D:07
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 018572559907DDEF452F4E9D403D3625E041
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/VeSYQL0WcWPjhkOPFKzF06n3nQc.roa
Signing time: Mon 02 Jan 2023 11:54:50 +0000
ROA not before: Mon 02 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 178.20.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:99:07:dd:ef:45:2f:4e:9d:40:3d:36:25:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 2 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e49840bd167163e386438f14acc5d3a9f79d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:e4:4b:9b:ef:59:81:a0:65:44:14:a6:96:
8d:71:ed:d7:a0:f3:c3:9d:46:57:0c:76:ab:3f:c7:
75:59:7c:51:09:c5:08:52:c9:96:aa:32:aa:2c:36:
64:94:b3:ab:08:56:a5:84:73:4e:08:55:08:0f:52:
59:1b:38:3e:b4:e9:1b:12:2f:22:c7:27:0a:22:c8:
9b:0a:bb:7e:2e:d7:c9:bf:08:4d:93:8a:b0:14:11:
9b:a2:8e:ec:50:48:36:f0:07:5a:00:61:35:b3:71:
4c:ab:d5:a8:7c:d7:0b:7f:b1:38:8e:d8:fc:32:68:
49:8b:dd:35:0c:24:f3:3a:08:10:fc:26:d6:67:0b:
b5:f0:50:d3:fd:0b:b8:1b:c4:0c:1c:17:0d:63:cc:
e5:dc:32:4a:0e:ad:7a:db:be:1a:2d:83:e7:96:6b:
27:b3:17:21:20:5d:60:3d:4f:66:9a:99:b5:ea:d5:
15:e3:7f:66:ef:a7:94:6d:b0:df:23:bb:28:23:9e:
fa:da:bb:bf:98:88:f8:de:f8:36:07:81:c4:9d:c0:
4a:fd:b0:57:d2:79:b3:17:2e:4d:73:9b:67:9c:aa:
3e:53:dd:93:f6:93:f8:e7:20:52:55:1e:00:a8:82:
5d:dc:5b:8f:0b:d6:43:74:e8:b5:89:f1:e7:51:e7:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:98:40:BD:16:71:63:E3:86:43:8F:14:AC:C5:D3:A9:F7:9D:07
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/VeSYQL0WcWPjhkOPFKzF06n3nQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fb:80:73:7c:dd:0b:27:2f:7e:61:ae:ff:65:20:96:26:ce:
ce:19:e9:c1:21:53:1e:e9:76:dd:d8:01:10:2b:dd:53:06:a5:
83:0a:45:f2:06:48:12:ed:89:b6:c0:3f:55:50:97:8a:b7:a1:
34:df:28:e9:13:19:4f:84:9f:0c:fe:d6:1a:91:8e:55:3a:c4:
9d:81:a0:d0:44:3c:65:cb:d2:1a:be:b4:f4:88:e2:b6:43:0d:
cd:94:96:25:f9:03:a6:07:90:94:50:c8:7d:3b:a7:2b:c7:f4:
df:bc:47:f2:c2:bc:f5:18:d0:3c:f6:25:bd:d3:92:1a:ae:40:
c9:cf:bd:87:dc:50:c9:d2:64:1c:e4:93:26:25:07:93:4b:22:
d6:fe:24:2e:70:92:95:2b:56:49:f6:f0:3d:9c:19:e8:1b:4d:
b8:e3:2b:13:41:09:fd:e0:cc:c7:4c:22:b8:eb:e3:c2:5a:2b:
70:74:ac:43:de:ac:49:4a:9a:dc:07:0a:de:b9:4e:35:21:13:
61:65:a0:39:81:06:4f:d9:98:3c:ee:d2:b5:5b:54:9e:2c:01:
e4:f2:8d:e1:18:eb:2b:7b:34:78:d7:04:b3:01:c8:11:72:31:
5b:90:2f:75:11:29:44:c7:82:5d:da:44:48:4e:ba:2b:5b:4f:
96:f6:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:57 2024 by rpki-client on console-ams.rpki-client.org