Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/02kOKdgzlXdzsHXGYhENJF1HL60.roa
File: 02kOKdgzlXdzsHXGYhENJF1HL60.roa (raw, json)
Hash identifier: pvnzV/j72L74N9OE1CYJiowHcFdHTmUxn6/ZgLh3RiY=
Subject key identifier: D3:69:0E:29:D8:33:95:77:73:B0:75:C6:62:11:0D:24:5D:47:2F:AD
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 01857070642490C7619F15DA63968AD69DB3
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/02kOKdgzlXdzsHXGYhENJF1HL60.roa
Signing time: Mon 02 Jan 2023 03:04:51 +0000
ROA not before: Mon 02 Jan 2023 03:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50894
IP address blocks: 178.22.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:64:24:90:c7:61:9f:15:da:63:96:8a:d6:9d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jan 2 03:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3690e29d833957773b075c662110d245d472fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:eb:b8:e3:be:cc:f3:02:e0:b3:31:df:3b:
b3:24:00:99:ce:d4:9f:64:0e:ed:2d:2e:96:b1:85:
b8:64:c2:a3:7a:76:90:87:51:3c:18:6a:ad:66:61:
9d:fa:93:78:17:24:f0:82:53:d7:74:53:fd:81:5a:
7e:8a:ee:0c:ca:db:3e:ed:10:48:14:fa:9e:83:ee:
6d:f6:d6:f0:c3:f2:b2:e5:f5:f1:c0:4b:42:d5:fa:
59:47:7e:91:17:aa:56:5b:7a:6c:b2:72:d3:e1:b9:
47:91:8b:e2:71:9b:bb:de:5f:2a:2c:4f:02:8a:be:
c5:b2:bd:4f:0a:c3:a9:92:8c:d5:b4:15:00:30:d0:
8d:64:23:41:68:98:da:3f:c4:53:f6:a4:f7:31:ea:
07:be:a4:66:82:8a:c0:34:9c:44:19:1c:c6:e9:82:
c6:e1:b9:ba:f8:5c:82:f9:51:24:ea:95:ff:a4:cc:
28:e1:23:07:f8:78:f4:6b:be:61:78:73:50:2a:90:
5f:58:64:19:5c:f9:6e:d0:19:ee:1c:96:71:8e:6c:
09:5a:80:e5:8b:c3:9f:c4:70:ad:dd:10:d0:6b:76:
37:da:d4:af:53:99:63:e4:af:96:45:82:fc:32:42:
35:10:ff:69:f3:d7:49:d3:f9:2c:e0:f9:08:f8:6c:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:0E:29:D8:33:95:77:73:B0:75:C6:62:11:0D:24:5D:47:2F:AD
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/02kOKdgzlXdzsHXGYhENJF1HL60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.240.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:99:b1:b0:b4:1c:bf:0c:61:73:1d:fd:b5:ba:3f:5c:be:f0:
a1:c3:31:b0:0a:a9:ee:e4:02:0f:88:14:46:a4:7d:0d:90:6c:
4a:0d:9c:3b:95:4a:95:8e:49:d6:c8:d4:65:46:71:1d:4e:84:
a4:59:eb:1f:80:a3:7f:77:a0:37:81:6e:98:ba:e5:34:6f:bc:
9f:82:00:af:03:5d:d6:c9:2a:a4:8c:9a:58:18:a0:20:c3:ce:
ac:af:8b:4c:a1:e6:86:e4:7d:9c:98:40:1e:77:a7:db:83:4d:
bc:e5:a2:fb:56:3c:5a:e2:b6:5a:93:af:2a:26:09:9e:bb:0e:
dc:a0:5d:0d:eb:85:2f:ba:6a:0e:f0:59:43:c8:70:62:5b:58:
76:87:f8:d5:44:32:38:ad:c6:18:79:e6:d3:02:8d:d7:b8:ba:
00:cd:85:22:1f:f2:28:cf:39:b0:85:65:ed:94:bb:90:cd:d0:
86:2c:e4:1f:6a:b1:b2:db:61:8a:8d:79:ff:43:46:c7:fa:2a:
40:60:aa:db:a9:02:c7:cf:61:fb:23:e1:0f:b3:26:91:28:dc:
6e:f3:c2:f1:cf:fd:91:02:9b:64:49:48:10:00:4f:87:1f:05:
42:c8:1f:f5:8c:31:84:4b:e7:f6:d9:d1:f8:12:d2:de:29:cf:
3e:93:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:11 2024 by rpki-client on console-ams.rpki-client.org