Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/szlrWLDU44O12i5Y4RUBzHbgUeA.roa
File: szlrWLDU44O12i5Y4RUBzHbgUeA.roa (raw, json)
Hash identifier: gJneijNzZNQ1EHSdMwP4poXnqCPwZqLyKBdxHjkti4M=
Subject key identifier: B3:39:6B:58:B0:D4:E3:83:B5:DA:2E:58:E1:15:01:CC:76:E0:51:E0
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A714E10C3E76A7D85F27E8BD4D9C6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/szlrWLDU44O12i5Y4RUBzHbgUeA.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131640
IP address blocks: 178.173.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:71:4e:10:c3:e7:6a:7d:85:f2:7e:8b:d4:d9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3396b58b0d4e383b5da2e58e11501cc76e051e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:11:38:b5:46:5a:16:c6:ad:5a:54:ef:ae:
8f:fc:89:c5:d3:42:36:ed:3b:87:29:88:6e:a3:0c:
5b:ad:45:5a:f8:b5:8f:ba:46:a1:c7:3f:e9:31:3b:
5f:d0:e1:81:8e:a8:11:9f:ee:8a:d2:7f:a2:21:3a:
71:2b:ae:bc:20:75:e8:b8:66:72:ed:1b:98:b8:4a:
ac:a7:a4:dc:e9:bc:80:e4:b5:d8:8c:b1:f7:ea:eb:
2e:7d:53:53:68:03:0b:5e:0c:cc:c2:8c:3c:8b:bc:
5d:a7:b9:e4:21:f2:02:d2:69:6b:fe:59:56:9d:00:
c6:1c:d1:a2:e4:86:fa:cc:3e:0f:6c:08:cb:78:9b:
ab:99:1e:f3:c8:4c:32:6f:f8:1b:74:9b:06:46:a4:
66:7e:b7:0f:65:e0:df:63:f4:e9:8b:82:cd:26:84:
c8:d9:cf:67:04:81:99:b8:0a:96:b7:85:1c:5a:57:
1b:74:e3:a8:ca:e2:87:cb:0f:bc:0e:72:de:f7:bd:
5a:50:cd:7d:d8:dd:16:ec:f9:57:67:b4:28:29:2f:
af:5e:30:b4:4c:8b:38:6b:d8:c1:38:18:9e:a3:c8:
fb:cd:8a:41:63:45:e7:6c:52:0f:43:34:77:aa:e7:
4d:36:0e:d1:f5:64:34:9d:06:40:e6:33:ca:67:44:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:6B:58:B0:D4:E3:83:B5:DA:2E:58:E1:15:01:CC:76:E0:51:E0
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/szlrWLDU44O12i5Y4RUBzHbgUeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.238.0/23
Signature Algorithm: sha256WithRSAEncryption
51:d8:9d:aa:32:09:29:f9:55:f0:83:17:97:ed:11:2c:6e:a5:
cf:4e:ed:c4:4d:85:8e:a1:46:4d:89:f8:7a:00:21:b7:58:0d:
5e:69:a6:0f:e3:ef:ae:7e:63:a8:c9:e6:61:1f:36:6c:e6:be:
16:e3:c8:6b:f4:a4:8e:57:09:c7:a9:b4:0b:87:8a:66:90:71:
38:61:a5:64:20:d0:ec:ba:22:f1:9f:11:34:77:37:52:60:a6:
aa:67:02:0f:80:9d:4d:dc:80:8d:6a:73:b7:a2:84:25:40:aa:
a1:b2:cb:43:19:9e:1b:2e:ea:b1:fd:10:d5:91:ac:33:97:04:
37:ae:ae:cf:07:b6:43:bd:d1:7e:62:0f:81:57:d4:6e:bd:05:
2b:ab:58:ba:96:fd:dd:77:71:08:11:ec:50:64:77:fe:e2:5b:
2c:20:86:9d:00:5c:47:d1:56:17:e4:93:2e:84:49:ec:e4:86:
49:25:18:1d:1d:4d:6b:d0:8b:a6:5c:60:24:d3:e6:44:bd:84:
a1:1e:e1:06:95:ad:df:d9:a2:53:8a:e2:5a:fd:6d:b8:6f:9d:
5d:f1:e1:2e:7c:0f:61:7a:3d:5d:f4:d3:2b:00:8a:42:69:f5:
c3:26:37:73:1e:0b:64:7c:c5:b9:02:a5:b8:ea:cb:b2:c7:e0:
b2:ae:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 10:44:39 2024 by rpki-client on console-ams.rpki-client.org