Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa
File: m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa (raw, json)
Hash identifier: EnZP4HnfZiPmg3enThvKbEePkAEiiHtCg+91VKG9gwQ=
Subject key identifier: 9B:E8:39:66:D6:94:65:6E:81:69:27:32:87:E8:91:F3:7A:1C:DD:3B
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01856D4ABDB3D4E9EE5B252909C78A4569EE
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa
Signing time: Sun 01 Jan 2023 12:24:52 +0000
ROA not before: Sun 01 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200504
IP address blocks: 178.183.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:bd:b3:d4:e9:ee:5b:25:29:09:c7:8a:45:69:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jan 1 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9be83966d694656e8169273287e891f37a1cdd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:42:65:d4:20:32:a6:dd:81:d1:36:be:d4:
73:25:0a:f8:17:d5:e7:2c:2a:91:69:ec:52:21:f3:
3a:76:c6:2b:d5:a8:8a:1a:72:b0:1a:9b:ab:65:f1:
0a:69:82:6a:9c:f2:34:6f:ef:2e:57:aa:c8:c5:40:
4f:4a:3b:90:bb:96:e2:75:6a:bd:50:9e:c1:36:84:
1a:2d:5b:c3:48:e2:74:a1:c3:d9:90:d0:50:50:9f:
32:ee:46:0b:7b:d4:5f:09:87:24:19:ed:7f:cf:fb:
bd:69:26:07:a3:11:fc:3f:ff:ab:ad:a4:c3:13:51:
4f:ac:ea:89:fc:33:9f:10:b1:8b:de:c2:46:d9:fb:
22:30:f9:3a:d7:1b:7a:81:fb:95:7a:8b:d0:e4:3f:
20:3e:a8:68:2c:2f:c8:df:b4:2a:4b:fa:eb:51:84:
72:e9:d5:28:37:34:6d:79:55:a5:04:39:c9:5b:12:
a7:17:03:e9:08:73:1c:1f:b4:89:d9:35:96:65:1b:
47:91:bf:de:ac:38:86:5a:85:51:83:19:9a:b1:56:
a0:4a:eb:44:58:ec:86:d5:20:7c:8e:28:8c:1d:37:
53:9f:8e:fe:f4:0d:d6:6e:76:45:9c:21:7c:4f:af:
4f:10:7b:a5:93:22:49:d6:8a:e1:c2:ab:0d:59:54:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:39:66:D6:94:65:6E:81:69:27:32:87:E8:91:F3:7A:1C:DD:3B
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.183.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6f:3c:4b:25:a2:2f:6a:3b:b1:50:e2:bb:76:51:0d:6c:c4:
0a:82:13:df:77:ac:2e:70:92:36:e1:1c:f9:e3:15:d9:da:07:
bb:0d:9e:29:f7:f7:44:98:75:85:f3:cf:bd:39:ad:85:d4:d5:
b4:31:dc:14:e3:9e:4f:ea:f4:b3:14:28:4a:fa:ad:d7:43:1c:
ec:56:66:89:1d:e8:9c:2b:1d:9e:f5:22:c5:23:d2:da:df:fd:
49:28:a4:8f:6c:94:a2:04:2e:45:53:30:a2:14:46:ca:b4:8a:
5f:2e:fc:f9:81:b3:a4:00:7a:73:2d:55:76:dc:7a:cf:df:f6:
6b:6e:8b:b6:dd:64:dc:26:6d:36:af:e7:d0:dc:0c:fc:50:e1:
a3:30:80:9d:ef:54:0e:fc:1b:25:a5:db:39:9b:5d:5a:33:fe:
0c:2b:3d:15:54:69:b4:79:fb:f5:5d:c6:e4:40:3d:e2:be:a4:
c5:a9:d5:8d:7f:82:bf:02:8c:5d:17:56:03:ab:97:b3:6a:f8:
2d:f0:e3:93:a7:d9:d6:17:f3:81:b9:ee:ef:30:17:a2:de:c8:
89:cd:48:73:51:0c:dc:8c:a1:30:a6:af:91:a0:3d:65:fe:4f:
6f:07:2e:49:7c:9d:df:3e:8b:94:22:cb:21:df:d0:a2:ca:3b:
3f:7a:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:44 2024 by rpki-client on console-fra.rpki-client.org