Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/LtKdvqCItwj1UtcA7xGAfAM0_cs.roa
File: LtKdvqCItwj1UtcA7xGAfAM0_cs.roa (raw, json)
Hash identifier: qQ1sP9ZRlq2LWdERsVWNZixiNgnghcCVi5s0uTPXv6M=
Subject key identifier: 2E:D2:9D:BE:A0:88:B7:08:F5:52:D7:00:EF:11:80:7C:03:34:FD:CB
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 018572DED14AE729740921EB2A8ADDA4006F
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/LtKdvqCItwj1UtcA7xGAfAM0_cs.roa
Signing time: Mon 02 Jan 2023 14:24:43 +0000
ROA not before: Mon 02 Jan 2023 14:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44099
IP address blocks: 178.248.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:d1:4a:e7:29:74:09:21:eb:2a:8a:dd:a4:00:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jan 2 14:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ed29dbea088b708f552d700ef11807c0334fdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:20:9f:b8:b9:41:db:16:7a:fe:7f:81:e4:
21:af:ba:1c:1d:2a:03:b8:24:84:b9:d1:fa:28:0a:
f1:38:e6:60:b8:c2:8d:93:ba:4c:2b:66:cd:fe:c9:
f2:08:2b:64:cd:72:2a:dd:5b:9d:7d:21:9b:25:16:
21:01:e4:0a:0f:ef:bb:88:39:75:fd:72:fe:05:16:
d4:af:8c:8a:15:7d:fb:a9:5c:a0:9d:0b:b4:b4:90:
ae:95:39:60:86:23:83:58:de:b4:dd:1b:64:21:b3:
d2:40:92:f2:5b:99:4b:08:71:f8:cc:28:07:ba:c0:
dc:2e:7c:3d:d7:fe:ea:c1:26:76:b9:15:9f:b3:f0:
be:67:cd:d7:45:0b:93:ab:af:3a:b8:fd:fd:23:0b:
a4:43:df:06:ee:9b:cb:b6:7f:b8:b6:cb:90:41:8c:
f4:ad:b5:72:ff:8f:82:56:26:16:41:8c:76:e9:75:
84:6e:71:cc:02:c9:e4:ca:a9:46:0b:27:fc:90:7b:
72:1d:d2:da:66:09:fe:c1:6c:21:60:bb:a1:0e:97:
b8:a6:26:fc:79:67:3c:70:93:3e:f2:c6:df:64:61:
dc:89:fa:f5:92:03:e8:04:c3:56:a2:1a:0f:ef:b1:
7f:2f:f0:ef:c2:57:3b:dc:af:8a:17:f8:59:47:52:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:9D:BE:A0:88:B7:08:F5:52:D7:00:EF:11:80:7C:03:34:FD:CB
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/LtKdvqCItwj1UtcA7xGAfAM0_cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.184.0/21
Signature Algorithm: sha256WithRSAEncryption
54:e4:73:a1:21:b9:f1:fe:e4:6e:8a:f3:8f:29:fd:d8:42:86:
1c:fc:c5:bc:4a:27:62:11:fb:e8:e0:66:6a:7b:84:98:02:5e:
84:d1:76:04:91:81:75:57:73:a4:01:fe:e9:f6:c9:0e:05:4e:
e5:b6:25:f9:fc:93:9e:fd:98:31:fe:f9:c6:23:16:09:69:cd:
ea:c1:24:20:20:eb:5e:78:f2:aa:ea:43:d0:6d:12:c6:be:4a:
a6:9d:6c:94:29:02:75:e5:78:f2:54:17:65:77:f9:b8:c1:05:
9b:10:21:ad:b6:ef:d3:3e:fe:89:0f:31:f6:49:f4:96:e0:bf:
a2:a8:d6:87:69:a2:66:c5:96:e3:ed:1f:e7:dc:1a:83:8d:91:
42:5e:79:4e:e4:05:24:fd:43:1f:7b:83:e2:86:a3:42:eb:bb:
b0:7d:01:4e:66:04:f6:4f:20:c5:72:4f:23:2c:f6:9e:68:a2:
4f:82:f0:95:10:ec:bb:ee:52:34:b8:81:f3:48:ff:05:7b:17:
5d:76:76:8c:1e:85:ba:53:77:5e:e5:17:09:a9:02:ec:53:fc:
12:a1:15:99:03:2f:d7:71:73:0b:46:f0:a0:ff:4d:ee:61:18:
5a:51:46:a1:34:4b:26:06:73:6c:86:30:25:65:bd:b3:24:02:
00:2f:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:43 2024 by rpki-client on console-fra.rpki-client.org