Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t_kPVMIpSxn10kqH7gfXi3MkEdU.roa
File: t_kPVMIpSxn10kqH7gfXi3MkEdU.roa (raw, json)
Hash identifier: C37VfGwBgygcPzZzDLxIKwjxNl0jd+WJrUNTSL3OF+M=
Subject key identifier: B7:F9:0F:54:C2:29:4B:19:F5:D2:4A:87:EE:07:D7:8B:73:24:11:D5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4CD9929C9299101ECA8CD540ACD68
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t_kPVMIpSxn10kqH7gfXi3MkEdU.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202147
IP address blocks: 178.19.40.0/23 maxlen: 23
178.19.40.0/22 maxlen: 22
178.19.42.0/23 maxlen: 23
185.229.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cd:99:29:c9:29:91:01:ec:a8:cd:54:0a:cd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f90f54c2294b19f5d24a87ee07d78b732411d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:ab:f1:75:32:b2:7b:4a:c0:db:6d:99:2e:
9c:8b:c5:9d:21:10:03:e3:06:97:31:44:68:58:01:
14:f1:1e:a6:1e:6c:bc:3e:3e:dc:e7:7e:4d:71:03:
79:79:7c:62:58:e0:6b:30:47:e4:80:12:35:d6:99:
b5:b1:a3:ea:be:df:e5:05:05:0a:c3:a5:dd:6e:dc:
ff:5c:d4:28:8e:f1:e0:3f:1c:4b:60:d5:b3:28:d5:
36:5f:76:4a:e5:8a:2b:8a:99:85:3f:56:00:a2:70:
cb:d9:50:9d:ff:97:0d:35:8d:f3:42:93:c4:ec:f1:
05:fb:f4:bb:d7:2b:2a:ee:37:dd:37:e5:b5:98:95:
54:f8:25:e8:dc:5e:a5:9f:8c:78:18:84:de:f5:a2:
bf:94:78:53:07:d9:19:02:f8:2a:b1:fd:ca:c6:c1:
ee:8d:1e:bb:f7:cf:4e:c6:b7:e4:f7:94:7d:69:30:
bc:cc:e7:42:21:71:4f:94:78:b8:ca:03:21:a6:2d:
89:40:65:39:59:88:9a:6f:af:b8:fe:4d:21:54:d7:
f1:09:6e:f9:ff:10:e4:c9:d1:80:e7:12:57:db:3c:
e8:08:02:0a:e5:12:7a:15:8a:85:e2:40:71:b0:3d:
8a:3e:dd:18:20:b9:65:69:4e:56:ef:06:75:9f:0a:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:0F:54:C2:29:4B:19:F5:D2:4A:87:EE:07:D7:8B:73:24:11:D5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t_kPVMIpSxn10kqH7gfXi3MkEdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.40.0/22
185.229.216.0/22
Signature Algorithm: sha256WithRSAEncryption
87:bf:52:00:1a:df:c9:71:f6:7c:32:9c:1c:0d:56:00:20:26:
78:d2:02:f7:05:76:a8:fd:35:bb:20:73:c0:f4:2d:e5:5a:21:
e5:c6:5a:13:d1:38:39:e7:8b:3a:15:aa:31:6c:a0:4f:b7:f0:
c3:24:05:ac:e8:7b:bc:9b:03:b9:86:58:70:ae:c3:ba:df:f3:
da:88:10:48:ba:e5:21:d7:3a:a9:8b:f5:2c:6a:7f:d6:6c:e4:
2f:33:b3:7a:0f:9d:76:a4:9b:21:07:c6:0c:2d:f4:33:0f:83:
c4:a2:66:3d:d7:1c:01:1a:9e:52:18:23:8c:ea:4b:7a:19:f8:
92:ee:e5:89:17:39:77:c3:68:52:72:e6:ac:15:a4:cb:ce:dd:
4b:aa:a6:41:bd:24:4f:3d:e4:f3:b2:3b:1d:3f:21:f7:aa:df:
b1:86:28:1f:cc:d7:ca:60:0b:fd:12:b8:f4:20:35:33:5b:14:
5e:f0:a9:b4:18:3e:8b:61:df:b2:b2:f3:60:8c:d8:d4:27:38:
73:89:4e:8e:85:59:df:9f:1c:83:58:33:92:2a:90:de:94:5d:
27:f3:1b:02:90:04:cc:c1:19:31:e4:30:36:d9:7e:06:f1:bd:
d9:c2:2b:bc:16:f0:a3:80:9d:a4:e6:87:e3:66:72:62:fd:66:
30:70:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org