Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/x1UWx4iwNZL_e3K5cijzh8lPRgY.roa
File: x1UWx4iwNZL_e3K5cijzh8lPRgY.roa (raw, json)
Hash identifier: QufsjDUMlKzVBKRssQ/P5hP/kWRyaNaxlUs+4C8i4SY=
Subject key identifier: C7:55:16:C7:88:B0:35:92:FF:7B:72:B9:72:28:F3:87:C9:4F:46:06
Certificate issuer: /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial: 0185729EF1FE5C3435B1E8D97D3C69300B8A
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/x1UWx4iwNZL_e3K5cijzh8lPRgY.roa
Signing time: Mon 02 Jan 2023 13:14:57 +0000
ROA not before: Mon 02 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210393
IP address blocks: 178.211.158.0/24 maxlen: 24
2a12:f480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:f1:fe:5c:34:35:b1:e8:d9:7d:3c:69:30:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Validity
Not Before: Jan 2 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75516c788b03592ff7b72b97228f387c94f4606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:ff:4c:2f:fb:5d:ea:3b:ed:eb:99:df:0b:
50:6a:67:df:4d:73:d6:7f:01:f2:01:15:c7:85:f9:
72:b2:af:50:da:ac:5f:7f:0a:8f:b4:dc:86:61:af:
6c:90:81:a3:c4:33:c9:c4:d8:5d:57:3d:2a:15:11:
86:60:e7:92:c7:64:e2:51:c2:96:95:fa:cc:d2:f9:
77:a8:fd:aa:c5:1a:a2:92:69:76:95:fe:c4:a7:a9:
f0:4b:3a:2a:66:7f:d5:a9:81:e0:e4:28:58:97:88:
f7:28:36:93:70:b6:5a:46:2d:12:94:cd:3b:4c:19:
03:61:b6:18:14:2a:fc:73:6d:d3:ec:55:9a:e3:c7:
3d:46:d3:77:db:e2:a8:55:d3:89:13:f8:06:5b:36:
22:0c:08:c6:10:bb:c4:a7:8d:1b:58:4c:4f:b5:10:
20:92:63:33:86:2f:b5:1b:32:1e:28:6d:08:69:db:
88:4e:eb:8c:6c:73:2e:97:d5:5e:6d:0c:30:b4:fb:
23:1b:03:b6:ad:4d:33:99:a6:8b:72:f6:6c:f0:d4:
a7:fb:05:a9:cc:33:fe:52:00:20:02:96:cd:32:98:
06:f4:2e:65:6f:51:e7:79:d8:8f:3f:3d:b1:10:63:
00:99:f0:b5:03:eb:84:dc:f8:ed:37:f4:50:fc:49:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:16:C7:88:B0:35:92:FF:7B:72:B9:72:28:F3:87:C9:4F:46:06
X509v3 Authority Key Identifier:
keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/x1UWx4iwNZL_e3K5cijzh8lPRgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.158.0/24
IPv6:
2a12:f480::/29
Signature Algorithm: sha256WithRSAEncryption
1c:81:fd:89:ed:8b:3d:3c:f6:68:58:ce:44:9f:72:a7:22:a9:
7c:41:7a:f7:0e:b4:77:9f:2f:6a:de:b2:98:0d:77:47:1b:ea:
4c:4e:39:33:13:85:83:ca:00:04:25:1c:86:0c:d8:01:e4:b3:
28:46:9f:3f:95:f3:98:48:ce:d1:a9:da:4b:44:64:94:9b:7f:
c0:c1:56:bc:6e:9b:6f:80:ba:fb:ab:ce:39:c6:0d:22:d3:b6:
7a:7a:9e:8b:0f:19:2e:15:ce:12:88:7b:98:20:90:30:74:dc:
f5:d9:c5:10:86:c9:28:9d:13:ed:45:49:11:ff:84:27:17:33:
88:da:8b:22:e5:3a:87:c8:38:b0:5b:75:08:66:98:48:4f:47:
f0:6b:05:a2:f5:f2:b1:1d:67:6e:06:89:94:9f:0a:2d:05:15:
e7:24:aa:b8:80:cb:ac:20:5b:51:84:6b:a5:81:0e:6d:a5:9a:
11:c0:57:90:cc:a7:fa:95:89:8b:9b:49:b4:45:8c:f3:37:62:
c1:9a:1d:a2:ba:21:33:0f:a5:63:11:82:0d:ca:f5:04:99:04:
13:20:4e:01:4e:da:3f:ba:de:b2:10:ae:b6:71:b6:e7:c9:18:
45:b8:cb:4b:d5:89:3b:fb:b1:7c:92:d0:67:c9:db:35:61:86:
b0:00:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:05 2024 by rpki-client on console-ams.rpki-client.org