Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ftrrJCVbDdhbNPedfOBFTB8Ww2Q.roa
File: ftrrJCVbDdhbNPedfOBFTB8Ww2Q.roa (raw, json)
Hash identifier: wP7vGDnq6l1g/m+FZBjLV365mbXtg8p5qKwPGQyFuK0=
Subject key identifier: 7E:DA:EB:24:25:5B:0D:D8:5B:34:F7:9D:7C:E0:45:4C:1F:16:C3:64
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0186DEA88EC4C5FE891116B05D5F9715D969
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ftrrJCVbDdhbNPedfOBFTB8Ww2Q.roa
Signing time: Tue 14 Mar 2023 05:47:13 +0000
ROA not before: Tue 14 Mar 2023 05:47:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 178.236.36.0/23 maxlen: 23
178.236.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:a8:8e:c4:c5:fe:89:11:16:b0:5d:5f:97:15:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 14 05:47:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7edaeb24255b0dd85b34f79d7ce0454c1f16c364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:c0:96:1f:03:9e:c7:ed:63:73:be:9c:c8:
ee:02:fd:08:94:73:ca:a0:00:87:89:49:39:52:c8:
37:fc:d0:7e:a7:a8:7f:62:bb:65:59:98:96:87:9f:
87:86:8e:93:9b:69:6d:c2:0e:d9:c9:23:65:c1:d0:
bd:fb:39:8f:1b:5d:8e:0e:af:cb:73:40:5e:9a:fb:
96:d2:de:cc:41:c1:6e:a5:e0:88:60:c4:de:8d:57:
7a:d3:70:f7:08:e7:a4:05:bb:12:12:85:dc:eb:2f:
32:af:01:75:a8:42:66:29:0f:54:7d:96:38:82:fc:
fe:8e:5f:3c:51:4f:29:ec:86:6b:54:38:78:b0:06:
db:b9:8a:2d:36:42:27:30:41:76:e0:76:d8:2b:b5:
bf:1a:32:aa:55:55:ee:d3:51:55:ff:17:a7:61:a8:
58:de:1f:47:64:bf:66:f7:27:bd:17:b1:19:a2:8a:
86:07:03:ba:c2:bc:f0:02:33:01:a8:c8:3b:7f:ee:
94:50:9e:43:88:9b:c9:52:5e:09:ad:12:53:66:7a:
3a:72:4f:3f:05:c0:9a:90:65:fd:e7:23:e4:51:b8:
d9:33:3a:a9:48:de:f7:f9:88:bb:da:9b:bc:fc:1d:
8e:46:d8:6f:0e:72:94:00:15:3b:0c:a0:53:27:36:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DA:EB:24:25:5B:0D:D8:5B:34:F7:9D:7C:E0:45:4C:1F:16:C3:64
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ftrrJCVbDdhbNPedfOBFTB8Ww2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:cf:a7:a2:ed:5f:24:e7:db:7d:96:cc:09:9b:d2:46:de:e1:
4d:6d:bb:73:fd:f2:4d:90:b5:e7:9e:42:6b:7b:3a:f5:54:b8:
dd:96:f2:ae:5b:77:4a:1e:bf:5b:85:cd:31:d9:8b:cc:ca:98:
9e:e2:99:3c:97:43:26:48:ec:fe:50:99:93:30:04:18:a6:ef:
7b:5d:24:0d:35:a0:7b:d3:9b:80:68:84:e5:45:38:47:7e:ba:
61:e4:c3:99:a4:a2:0a:a6:8e:3b:71:d8:24:ef:9b:0a:9e:a1:
48:58:1d:55:37:8c:08:c4:97:1b:35:62:cf:ec:db:51:4f:1d:
98:d5:7b:90:a4:ec:1f:b4:1f:67:4a:44:52:0f:b0:4d:20:7f:
57:d5:d7:75:e0:63:1e:a8:c0:bd:4c:fd:44:3f:11:c6:9f:0e:
27:7c:7c:e3:15:0a:d4:18:be:f9:da:4b:20:1a:a9:3c:65:04:
0c:f5:40:d4:d6:bb:2c:84:72:e7:45:2b:20:c0:6f:40:39:7d:
7d:fd:0d:23:59:3d:9d:bf:6b:c8:d3:c5:63:c9:c4:6f:a6:47:
fb:f9:dd:22:ff:c7:91:7b:f3:1e:ba:d8:bf:2e:2d:b3:3e:ad:
a7:8e:8b:4d:42:67:3e:36:19:0c:dd:29:18:9a:4a:15:9c:78:
e7:b0:c0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org