Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/01g39s7Inu5oqrcEJ2mGA0JJyx8.roa
File: 01g39s7Inu5oqrcEJ2mGA0JJyx8.roa (raw, json)
Hash identifier: 5FdglZvgomxzhgTQz22yG2nexw/gWgyF49ZD/iqqn5Y=
Subject key identifier: D3:58:37:F6:CE:C8:9E:EE:68:AA:B7:04:27:69:86:03:42:49:CB:1F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018C90DB4618A38357E5B54AE3389653E4A4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/01g39s7Inu5oqrcEJ2mGA0JJyx8.roa
Signing time: Fri 22 Dec 2023 09:28:58 +0000
ROA not before: Fri 22 Dec 2023 09:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 131640
IP address blocks: 178.173.238.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:db:46:18:a3:83:57:e5:b5:4a:e3:38:96:53:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 22 09:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d35837f6cec89eee68aab704276986034249cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:e0:79:e4:ae:f6:46:62:2c:63:95:d8:70:
73:8c:4e:55:a1:63:2a:ab:2a:b7:08:96:2e:30:89:
13:88:59:67:12:61:77:1a:78:8d:04:7a:41:ff:6c:
ad:bf:56:d5:83:e1:31:47:2d:96:50:79:80:04:17:
9f:9b:45:43:16:b1:b9:62:97:86:e3:1c:19:cc:bb:
8d:94:1f:40:14:bc:3a:87:a6:2d:b5:b5:3f:98:34:
5d:ce:dd:41:b4:44:31:f3:4c:b1:e3:e5:0a:a6:b2:
08:99:53:98:80:56:bf:56:79:46:29:fc:95:46:fa:
3e:af:b7:29:5d:79:63:41:4f:56:22:6d:c8:53:1c:
7e:4e:a4:d0:d7:b7:d1:c6:37:4a:cd:09:0c:6a:3c:
2e:d8:62:ea:9b:1e:8a:82:2f:9e:65:dd:4c:8e:46:
3e:50:ba:54:a2:d1:f7:25:f8:0f:70:6d:ec:d3:dd:
47:0e:10:ff:56:a4:01:96:28:11:2d:c1:5d:8a:6f:
5b:b5:63:6f:d6:25:64:46:16:ec:c0:c9:d5:e9:c2:
b8:71:70:b8:ba:51:38:fe:5c:7a:12:36:19:90:4b:
72:0b:ad:b0:bf:9c:63:8c:f8:51:28:a3:57:21:ae:
12:2c:bd:77:ea:32:e2:08:13:2f:2d:c8:2f:46:d3:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:58:37:F6:CE:C8:9E:EE:68:AA:B7:04:27:69:86:03:42:49:CB:1F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/01g39s7Inu5oqrcEJ2mGA0JJyx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.238.0/23
Signature Algorithm: sha256WithRSAEncryption
97:dd:42:94:a2:4a:68:a5:83:8d:91:30:b7:83:8e:83:1b:d3:
d6:26:28:d7:d9:9a:02:f2:e4:2d:29:c6:48:64:fb:7d:50:f6:
47:be:b0:1c:00:cf:b3:35:a7:f7:d4:20:85:99:66:97:1f:bd:
c2:7f:4f:69:d8:5f:43:cc:7f:3e:df:3c:72:91:b3:bd:d2:cb:
0c:a2:18:cd:63:2f:a4:fd:cc:1d:f9:60:1f:65:ff:d5:7c:a3:
2a:16:5a:52:da:bc:1e:10:6b:ed:4b:38:e2:cf:48:bc:e0:10:
7c:88:dc:90:85:a3:83:20:0d:26:0c:01:5e:3b:ac:f5:73:3a:
d5:cc:5a:ea:89:67:d6:ea:5e:c8:17:8c:22:c0:f2:28:bc:1e:
bb:17:e2:58:df:9e:2f:c4:95:c5:b8:7d:ac:3b:d0:98:d5:15:
9f:7e:38:14:52:eb:b3:93:ff:77:1a:3c:9c:b7:08:93:9d:b7:
d9:15:c0:fc:0e:a6:91:56:99:dd:5d:65:12:13:d7:c8:57:44:
6f:bd:8f:e1:5b:16:1d:8f:5e:49:f9:60:fe:33:d1:4d:a6:82:
1f:18:63:1f:c5:27:16:a1:bd:0f:69:f2:ee:f1:66:b3:13:e1:
d5:28:b6:20:11:80:2c:5d:06:51:4b:a3:ae:ae:7c:69:d9:bc:
d1:b6:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:23 2024 by rpki-client on console-ams.rpki-client.org