Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/g2GzpNAEgy24hLaBHFq5xI4Tryk.roa
File: g2GzpNAEgy24hLaBHFq5xI4Tryk.roa (raw, json)
Hash identifier: Sm41b0RuTDqx7a/hmAjTj3E1yWmbzJe2ElavVopdhGk=
Subject key identifier: 83:61:B3:A4:D0:04:83:2D:B8:84:B6:81:1C:5A:B9:C4:8E:13:AF:29
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 018571FA2A1BC8A6F66C5A873DBD4BD3ADCD
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/g2GzpNAEgy24hLaBHFq5xI4Tryk.roa
Signing time: Mon 02 Jan 2023 10:14:58 +0000
ROA not before: Mon 02 Jan 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50987
IP address blocks: 178.219.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:2a:1b:c8:a6:f6:6c:5a:87:3d:bd:4b:d3:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jan 2 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8361b3a4d004832db884b6811c5ab9c48e13af29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:f8:26:64:04:1b:25:8f:69:04:35:41:49:
b3:0b:6b:b7:28:db:94:f4:f4:cf:ad:30:e6:e4:6f:
71:65:06:cf:40:f9:09:ef:93:4a:cc:c1:5e:d7:71:
3d:76:e3:74:a0:e0:65:2a:4e:b1:65:8a:40:01:07:
79:1e:36:3d:85:c8:87:6a:5e:3a:c5:16:92:56:83:
ce:68:58:07:93:af:2a:75:e0:4e:a4:14:1c:00:ae:
a5:e1:0e:cd:c2:a6:9f:f4:f3:91:6a:3e:fc:7b:99:
3c:b9:a8:82:c4:c1:54:18:dd:00:4d:46:18:8b:0d:
37:4c:1c:39:e7:19:aa:2b:d7:41:53:0b:15:50:2d:
90:cd:e8:d8:8d:79:cc:07:7b:05:23:2f:76:bc:27:
28:07:c4:ce:3e:15:6a:c5:b1:9d:ef:12:3b:82:b8:
56:f1:71:db:3f:9e:7a:13:31:d0:ce:52:d3:21:37:
4e:f9:34:65:dc:15:09:86:d5:92:63:73:13:79:15:
ff:2d:7d:ab:dc:9d:b1:3e:cc:6a:6c:90:2c:e5:02:
e6:6f:24:78:7f:37:44:80:8c:f8:7d:66:59:74:4e:
eb:3e:a3:1d:c1:eb:f6:4a:05:48:e3:80:78:f1:b7:
40:75:34:36:2a:be:ef:d8:d1:4c:ad:72:bf:4f:7d:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:B3:A4:D0:04:83:2D:B8:84:B6:81:1C:5A:B9:C4:8E:13:AF:29
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/g2GzpNAEgy24hLaBHFq5xI4Tryk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9a:cb:35:4d:3d:bc:45:1a:1a:df:eb:3e:93:31:34:38:17:
82:ae:16:20:28:30:95:b2:a3:46:96:ef:44:88:bc:34:63:1f:
aa:45:5b:38:ed:12:cf:72:c6:ce:5f:2b:f1:59:b9:f1:3f:bd:
3f:2c:8a:39:74:0e:3f:e6:95:1a:df:12:5b:69:96:37:7f:6f:
95:26:63:de:85:b5:18:72:00:a9:8a:aa:68:e2:b9:c7:2a:69:
60:7d:c0:97:11:3a:b5:74:07:85:26:ea:a0:71:0d:7e:8e:41:
3c:85:32:65:86:ee:1b:25:64:8f:00:4c:51:a2:69:8c:34:42:
c5:13:dd:5a:da:50:95:da:2c:6e:a1:43:8f:e0:c2:66:b8:1b:
92:6b:01:86:b5:dc:df:34:74:24:6b:4d:a4:1d:e0:42:1a:6a:
44:5a:8b:b6:09:11:55:71:16:36:da:b7:b3:e2:15:74:68:51:
5b:c6:0a:d2:f1:7c:ec:71:ae:b1:4a:5f:5a:4e:45:66:21:fc:
76:5d:44:e6:ed:25:24:8e:12:b6:60:8a:78:d7:ad:0a:43:16:
56:c8:13:be:29:90:5f:1d:14:4a:99:60:0d:68:0f:e5:b9:eb:
c9:57:f8:01:a4:93:cb:99:93:2e:bd:68:a4:9c:0a:49:2d:c7:
7a:f8:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org