Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/J-ce0X2ZTaRaG73yZJG2lyoYcYU.roa
File: J-ce0X2ZTaRaG73yZJG2lyoYcYU.roa (raw, json)
Hash identifier: b49rP9Sdk5AguLaV4v3x9Q00tu41YitdgrpOSKLsKtU=
Subject key identifier: 27:E7:1E:D1:7D:99:4D:A4:5A:1B:BD:F2:64:91:B6:97:2A:18:71:85
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0187FA950DE8411CFBC30472F1C03C7560CA
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/J-ce0X2ZTaRaG73yZJG2lyoYcYU.roa
Signing time: Mon 08 May 2023 08:58:05 +0000
ROA not before: Mon 08 May 2023 08:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61108
IP address blocks: 178.238.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 16 Aug 2023 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:95:0d:e8:41:1c:fb:c3:04:72:f1:c0:3c:75:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: May 8 08:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e71ed17d994da45a1bbdf26491b6972a187185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:a0:dd:ff:f1:5f:d1:82:31:a7:eb:bb:64:
bb:2c:a0:78:69:e6:29:ad:6f:7e:02:23:39:b8:81:
49:3d:26:6b:55:92:58:7a:ac:88:e7:ac:d1:97:8c:
be:94:9f:ce:c2:db:44:d1:3f:22:d7:fe:db:a4:25:
40:de:aa:9a:19:7f:07:df:cf:95:ee:fc:39:31:00:
86:fe:28:92:bd:d3:67:68:ef:c9:e1:37:33:a8:bd:
c7:80:24:a2:43:08:5c:50:e8:b3:5b:e7:6b:ea:4d:
b3:40:2a:c3:53:76:ae:e9:e1:2f:ab:37:ae:e5:2b:
13:b4:d3:8a:7f:86:08:48:d3:28:17:39:c6:08:cd:
c9:b0:bc:37:ef:73:6f:b4:18:ff:b2:89:37:01:1b:
eb:a3:92:8a:d9:fa:bb:b1:82:25:19:eb:84:18:58:
13:a5:ae:ca:16:47:2d:ce:fe:f8:d8:0d:dc:5b:d6:
81:da:0d:22:21:1b:ec:0a:53:47:8a:87:c7:45:82:
dc:d1:f8:11:bb:f0:ca:d3:47:51:3d:81:a7:a9:ef:
60:0a:0c:ed:08:80:85:37:ae:20:b3:20:6c:f8:4a:
22:1a:3d:68:a2:50:21:29:64:8a:b9:74:30:ee:98:
50:46:87:eb:09:f7:bf:ab:b0:a5:2b:04:b6:12:f8:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:1E:D1:7D:99:4D:A4:5A:1B:BD:F2:64:91:B6:97:2A:18:71:85
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/J-ce0X2ZTaRaG73yZJG2lyoYcYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:39:a5:82:8f:8b:4b:a4:9c:f2:ee:10:40:5b:de:16:f1:54:
3f:94:f3:f2:ac:a1:65:e0:45:d5:a1:4a:28:6c:d9:0b:f8:a1:
fe:8e:aa:13:5d:da:51:d5:3f:7a:58:d9:e7:2d:6c:b8:9d:12:
f4:4a:da:67:55:5c:47:b0:df:6e:23:8d:a6:7b:ed:76:e9:2e:
a2:98:fc:36:30:ca:e6:47:f5:58:ad:81:2b:03:5d:93:b5:91:
cc:d8:fa:9c:28:b0:ba:1f:91:bd:10:40:c3:5f:f1:ba:e9:c2:
54:be:59:64:45:24:80:6b:9f:9e:d9:4a:cc:30:1f:42:78:4d:
d1:3b:13:20:e5:75:75:9c:70:6a:25:a0:bf:c2:eb:cc:4f:e0:
04:9d:2e:85:c7:2f:cd:9b:3d:48:26:03:95:dd:e2:b3:22:15:
51:c0:b6:ea:b5:94:16:a6:f2:b4:55:b1:f9:e2:90:34:a6:19:
c4:71:19:e0:9b:ab:ba:91:3f:54:7a:ce:2b:b3:8f:fb:1e:2e:
f3:de:17:76:3e:0d:1d:03:79:ba:07:1d:1a:19:38:58:1a:85:
14:15:2f:ac:d3:6e:50:24:e1:19:5f:dd:4e:82:70:90:f4:d2:
f8:91:29:b6:4a:41:f9:fe:0e:19:65:98:44:08:33:0f:d8:af:
e5:45:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:00 2024 by rpki-client on console-fra.rpki-client.org