Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/g4uFgbJ0aQ0UMJ61WxjZ-kbseB8.roa
File: g4uFgbJ0aQ0UMJ61WxjZ-kbseB8.roa (raw, json)
Hash identifier: a05FPn/EiF1gALNg3qJsvSVDP++g45jCKeVDjkhgioM=
Subject key identifier: 83:8B:85:81:B2:74:69:0D:14:30:9E:B5:5B:18:D9:FA:46:EC:78:1F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A3FA326A8D92AD5CA853B80579C9E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/g4uFgbJ0aQ0UMJ61WxjZ-kbseB8.roa
Signing time: Mon 02 Jan 2023 12:34:52 +0000
ROA not before: Mon 02 Jan 2023 12:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 178.236.36.0/23 maxlen: 23
178.236.38.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:3f:a3:26:a8:d9:2a:d5:ca:85:3b:80:57:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=838b8581b274690d14309eb55b18d9fa46ec781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:86:86:4e:b5:93:4f:2f:e7:23:8e:09:62:
12:a8:0f:3e:4e:9a:c4:d6:1e:2b:40:36:72:74:eb:
b8:2f:30:88:e9:95:35:22:d0:92:e1:e8:95:a5:26:
4e:35:9a:77:66:d4:ac:6b:a2:58:99:47:63:22:e6:
49:6e:9f:ec:44:3a:4d:a6:d5:77:4c:ce:b3:dc:34:
04:28:ce:e9:2e:40:55:b2:35:32:4f:1c:1d:8f:01:
a0:fd:f3:5d:8e:e1:d4:93:de:6d:8d:e1:6f:07:b2:
1e:c5:93:a5:66:4e:aa:7d:ea:9b:d5:11:09:32:d8:
31:c1:4c:54:a4:01:02:1f:9e:8c:de:0b:55:69:9d:
c1:d1:c6:e0:cc:74:6d:f0:ec:58:4b:4a:73:c4:08:
30:a7:16:81:8c:04:93:39:c1:f8:4c:ce:9b:2a:68:
29:23:da:61:d7:f3:22:0d:94:dd:6d:fe:9c:24:25:
05:a9:9a:c6:3d:35:88:6e:b8:7f:5d:ac:c7:45:10:
76:3f:96:79:96:86:06:af:01:a8:6b:c2:3c:0a:6c:
e2:45:47:41:85:ed:63:93:12:bf:3e:9e:2d:be:24:
f5:cf:d1:24:26:db:bb:73:00:4e:d0:b1:08:0c:77:
2a:b3:34:61:d8:ee:90:1c:8d:8b:1d:b6:1b:0f:ac:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:85:81:B2:74:69:0D:14:30:9E:B5:5B:18:D9:FA:46:EC:78:1F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/g4uFgbJ0aQ0UMJ61WxjZ-kbseB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.36.0/22
Signature Algorithm: sha256WithRSAEncryption
62:19:76:9c:31:13:08:31:77:34:d5:6c:e5:67:db:72:7a:d6:
18:f2:cb:08:c6:b0:d7:31:73:f9:8b:a9:3f:47:87:ed:77:e6:
0f:4a:95:db:a6:8f:f1:48:af:f7:22:70:17:aa:4e:f1:29:0e:
96:ba:38:b5:07:4f:ec:4a:4b:a3:40:de:93:df:f4:96:c8:64:
7d:24:d8:77:b0:21:b6:da:64:9f:3f:93:c6:1e:6e:26:e4:78:
a0:c7:e8:4b:5e:af:ad:45:0f:f8:b8:cd:0f:63:65:19:a8:6c:
fc:dc:25:77:28:19:c5:0f:3d:af:65:fa:a6:63:27:f5:5c:54:
03:06:ae:93:70:f1:f9:d4:44:ba:88:99:59:8a:f9:1a:f6:46:
e6:c8:26:70:6a:0c:6c:b8:be:1a:16:fe:09:0b:59:5c:6c:dd:
ac:bd:25:f5:6a:d3:68:30:3e:5b:e6:83:3a:d0:13:62:db:75:
5e:09:1c:10:52:9e:47:4e:f9:e0:07:e5:ff:c8:8e:13:c2:f4:
9c:bf:2b:28:00:f6:5f:34:b8:09:cf:44:39:4b:6c:30:c2:6f:
9b:03:c8:3f:bf:e4:fa:2c:ea:6e:37:0c:37:db:73:00:27:58:
0d:7f:ee:a6:e4:bf:e7:13:29:44:5a:fc:4b:5c:8d:d4:56:bf:
b1:86:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org