Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/nkOdaSPm1j9X2sJcyZ7BKrXiwjY.roa
File: nkOdaSPm1j9X2sJcyZ7BKrXiwjY.roa (raw, json)
Hash identifier: 7erFhbWfOa7b5evfB0TkZ2ay2pT+GB7z4QKupQnI9yU=
Subject key identifier: 9E:43:9D:69:23:E6:D6:3F:57:DA:C2:5C:C9:9E:C1:2A:B5:E2:C2:36
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 01856B53373DE490260F5EA685EE476DD4B2
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/nkOdaSPm1j9X2sJcyZ7BKrXiwjY.roa
Signing time: Sun 01 Jan 2023 03:14:53 +0000
ROA not before: Sun 01 Jan 2023 03:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42546
IP address blocks: 178.214.192.0/19 maxlen: 19
178.214.192.0/24 maxlen: 24
178.214.197.0/24 maxlen: 24
178.214.198.0/24 maxlen: 24
178.214.199.0/24 maxlen: 24
178.214.193.0/24 maxlen: 24
178.214.194.0/24 maxlen: 24
178.214.195.0/24 maxlen: 24
178.214.196.0/24 maxlen: 24
178.214.200.0/24 maxlen: 24
178.214.201.0/24 maxlen: 24
178.214.202.0/24 maxlen: 24
178.214.203.0/24 maxlen: 24
178.214.204.0/24 maxlen: 24
178.214.205.0/24 maxlen: 24
178.214.206.0/24 maxlen: 24
178.214.211.0/24 maxlen: 24
178.214.212.0/24 maxlen: 24
178.214.213.0/24 maxlen: 24
178.214.207.0/24 maxlen: 24
178.214.208.0/24 maxlen: 24
178.214.209.0/24 maxlen: 24
178.214.210.0/24 maxlen: 24
178.214.214.0/24 maxlen: 24
178.214.215.0/24 maxlen: 24
178.214.216.0/24 maxlen: 24
178.214.217.0/24 maxlen: 24
178.214.218.0/24 maxlen: 24
178.214.219.0/24 maxlen: 24
178.214.220.0/24 maxlen: 24
178.214.221.0/24 maxlen: 24
178.214.222.0/24 maxlen: 24
178.214.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:37:3d:e4:90:26:0f:5e:a6:85:ee:47:6d:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Jan 1 03:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e439d6923e6d63f57dac25cc99ec12ab5e2c236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:09:84:97:ed:b0:af:40:97:5b:d6:bb:24:
50:b2:88:1d:54:ba:d2:bd:93:ed:2f:e1:f3:5b:0f:
39:fe:69:fa:1c:95:cc:ea:8a:c5:ed:e0:63:a1:a7:
5b:6a:a1:a0:d4:11:01:8c:b1:55:2a:18:22:06:ee:
a2:6f:8d:3c:1d:1e:fc:f4:15:5b:3e:d5:7f:70:1b:
88:d0:0e:1c:87:f9:fd:6b:a0:7d:2c:44:69:b0:d5:
3d:d3:e1:b1:36:1c:90:2d:2c:9f:b9:07:90:ed:5f:
19:b8:52:aa:d4:76:69:17:67:b5:07:75:61:b8:cb:
19:4a:08:f4:ff:89:32:67:ac:2d:fe:60:f5:c7:d8:
f2:0a:c8:5c:22:fe:c7:4e:d3:87:75:98:f5:7c:e1:
4d:d0:24:d0:63:b2:8f:55:4b:20:3c:4f:33:d4:7f:
8e:4e:26:c1:c3:a0:55:3d:67:ba:e2:74:8d:b4:63:
04:c2:5d:95:1c:b2:04:cf:96:68:91:38:67:10:c8:
ab:ca:d0:81:f9:d1:d1:3d:38:9c:0d:c8:ec:af:51:
1b:71:e5:02:6c:31:85:40:11:c6:ce:ea:cf:cc:6e:
26:e4:61:20:19:dd:75:4f:4b:59:d5:65:de:95:26:
f2:e2:c6:ea:fe:34:99:ef:b5:15:36:38:8a:d0:bf:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:43:9D:69:23:E6:D6:3F:57:DA:C2:5C:C9:9E:C1:2A:B5:E2:C2:36
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/nkOdaSPm1j9X2sJcyZ7BKrXiwjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.192.0/19
Signature Algorithm: sha256WithRSAEncryption
43:90:a2:db:41:97:ee:e7:26:21:90:e2:1e:a7:c7:e7:0f:f3:
6b:fb:cd:30:b5:06:cc:83:65:d2:01:79:55:ed:c6:40:55:75:
31:4b:d8:8d:5a:fb:74:48:0d:aa:43:da:b9:48:21:c5:7e:d2:
82:a7:0e:ad:9d:31:55:ae:ee:03:ee:72:05:ac:1e:a5:01:b8:
ad:a5:39:81:81:92:99:8a:77:da:bb:8f:d8:44:25:e0:2f:cd:
50:90:46:29:17:fe:e0:b2:48:e1:d5:49:f6:80:ce:89:2f:9c:
7d:45:62:fb:fa:b2:2b:34:da:12:15:d3:f9:5b:10:2b:a9:96:
48:a1:c2:4f:40:08:45:c4:33:c2:d2:22:63:5f:48:9e:c7:03:
29:7d:d6:dd:17:9e:13:4e:b9:26:f2:54:99:f1:9f:cd:fe:f2:
75:2c:04:e2:a0:1d:34:d4:7a:3a:d0:5b:17:b1:12:05:b4:c7:
ca:63:24:c6:38:44:6e:b8:91:d0:58:18:cd:ec:66:b4:c6:09:
5c:a3:63:e9:23:18:96:85:ef:32:89:49:05:89:e6:96:85:09:
b4:81:e5:67:b9:bb:24:13:94:32:4b:38:c8:36:c9:49:25:ae:
41:1d:4b:ff:d1:db:11:ab:43:91:bb:b3:d5:4d:15:bc:04:37:
24:93:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org