Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/5MO-JIngAavwM9MH-qcnZVihKC4.roa
File: 5MO-JIngAavwM9MH-qcnZVihKC4.roa (raw, json)
Hash identifier: OT+vG6uvrj7mVdTX5wBGOoBjg9nFAi2/Rm8qSrw/gqU=
Subject key identifier: E4:C3:BE:24:89:E0:01:AB:F0:33:D3:07:FA:A7:27:65:58:A1:28:2E
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 018CC5000B37FC18B9F619B723D8641CDE3C
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/5MO-JIngAavwM9MH-qcnZVihKC4.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196936
IP address blocks: 178.217.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Jun 2024 22:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0b:37:fc:18:b9:f6:19:b7:23:d8:64:1c:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4c3be2489e001abf033d307faa7276558a1282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:60:74:24:9d:51:e1:ce:8e:84:93:1b:5c:
3d:3d:d4:3a:16:8b:50:47:ad:7d:a4:88:b2:53:54:
e9:f2:c2:cf:d3:d4:20:57:1a:cc:2b:5f:ab:bb:52:
84:d6:a7:88:7e:b7:a3:e4:aa:96:03:fa:93:b2:c6:
bf:71:82:8f:f6:9a:04:72:b7:62:27:e8:31:4a:3b:
10:54:c5:a9:46:c7:da:c2:ca:95:84:76:ec:78:53:
a6:ef:59:72:67:c6:03:b9:d8:56:2b:3f:eb:8f:49:
1d:0a:a9:c2:3e:c3:7f:a4:d1:26:07:06:b2:e2:be:
1c:23:7d:0d:2b:91:8d:51:2a:d6:25:c9:29:50:1f:
4c:ba:33:73:ea:a4:fb:c3:cc:81:a8:a5:5b:c3:76:
6d:75:07:23:40:c5:bb:55:c6:a4:b5:e1:f0:43:76:
07:b8:4e:eb:fe:c6:bc:d3:8a:da:d6:d7:86:35:6f:
35:28:3a:1a:73:0e:3f:50:53:b5:7c:19:0a:6c:90:
20:63:51:cf:dd:83:82:9c:68:c4:a8:0c:8d:05:a8:
d9:ff:76:47:d3:a5:2c:99:8f:ac:25:a4:3e:92:6e:
b0:70:0a:d5:5a:ed:ed:a8:4b:a4:e5:85:52:45:8b:
61:50:60:5c:45:b5:69:16:2d:97:09:ee:b0:c2:db:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:BE:24:89:E0:01:AB:F0:33:D3:07:FA:A7:27:65:58:A1:28:2E
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/5MO-JIngAavwM9MH-qcnZVihKC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:8e:29:5a:01:da:03:2f:c9:22:65:4a:fe:53:59:8a:7f:bd:
57:9d:d0:ef:a5:84:b2:59:db:5c:7e:4f:bd:cb:d3:22:d0:92:
94:14:c0:7a:6c:3c:92:83:c3:94:0e:7c:ce:a0:b2:d2:28:9d:
9c:a0:7a:35:42:73:00:8c:06:50:45:2f:7d:40:9f:e0:7c:34:
06:77:82:b9:7a:c3:33:fb:f1:c0:37:10:32:e5:02:8d:f7:1b:
b8:be:b0:4d:6a:b7:a7:07:70:d6:43:0d:57:46:bf:d3:07:b9:
2a:32:80:74:5b:ae:92:20:5d:26:41:c4:e6:87:7e:dc:cd:d5:
a3:c2:3f:e0:23:c7:1a:a2:64:ff:8a:6f:aa:87:2e:3e:40:e9:
82:4a:2a:3a:cd:2f:4a:ba:44:19:d8:0c:5a:67:bd:16:3c:03:
93:46:d2:87:0c:41:36:14:5b:39:51:87:79:12:57:81:54:b4:
8d:44:5b:a6:08:a7:10:c3:62:84:1a:af:a9:7a:9b:b0:7d:0b:
95:58:93:ae:0d:d6:00:54:ef:c9:e8:a7:9d:39:8c:4c:8c:30:
c2:90:bd:bf:58:5f:9c:79:98:14:53:81:09:07:17:fd:a0:9a:
a7:22:12:a0:5b:b1:fe:9c:3c:e2:2a:55:ee:c4:63:ad:88:3d:
86:04:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 02:14:12 2024 by rpki-client on console-fra.rpki-client.org