Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/yQHa7dUegGTxAfRGegRWqyR700c.roa
File: yQHa7dUegGTxAfRGegRWqyR700c.roa (raw, json)
Hash identifier: umF2E1of5Dk+KLHeNRZy9bxm2pBcm6fA38xAKlVB9zk=
Subject key identifier: C9:01:DA:ED:D5:1E:80:64:F1:01:F4:46:7A:04:56:AB:24:7B:D3:47
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0185EDC8A5AA0FB7F43F373A948E047E8E20
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/yQHa7dUegGTxAfRGegRWqyR700c.roa
Signing time: Thu 26 Jan 2023 11:13:47 +0000
ROA not before: Thu 26 Jan 2023 11:13:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 178.21.144.0/24 maxlen: 24
178.21.145.0/24 maxlen: 24
178.21.147.0/24 maxlen: 24
178.21.148.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
2a02:2c0:3::/48 maxlen: 48
2a02:2c0:1::/48 maxlen: 48
2a02:2c0:2::/48 maxlen: 48
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:c8:a5:aa:0f:b7:f4:3f:37:3a:94:8e:04:7e:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jan 26 11:13:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c901daedd51e8064f101f4467a0456ab247bd347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:d2:47:80:81:7c:3f:d4:df:b6:cb:3d:d9:
2a:fc:c8:eb:04:ec:69:a2:92:57:5c:13:28:62:80:
78:8e:4a:39:93:91:2f:0c:38:ee:55:c0:c0:49:eb:
06:85:1c:e0:a5:68:db:f9:80:e7:67:0d:7c:d5:5c:
e7:95:ef:10:34:21:00:cc:90:ec:83:62:78:d2:9f:
0f:c9:1b:e0:c3:e9:55:d9:ac:e0:21:9e:0f:13:ef:
22:cd:a8:13:71:b0:97:73:ae:69:b8:3a:77:d2:d1:
f2:40:fd:57:95:51:40:32:1b:1f:cc:a8:2a:1c:b6:
0a:6d:7e:f8:39:ff:d8:03:bd:a6:1c:92:d0:89:eb:
db:48:24:9d:c9:36:a5:27:5a:5e:cf:ad:e7:68:02:
16:25:5a:7f:24:73:c2:a8:da:f6:bb:42:fb:b5:26:
51:6d:7a:96:16:a8:8f:f9:16:2a:1b:a7:8a:29:fc:
59:cd:81:81:db:cd:d5:08:d7:dd:05:10:5d:41:46:
ed:d4:79:4c:30:79:86:0b:87:14:f9:0b:b5:92:b7:
8c:d1:07:91:77:df:bd:9e:91:3e:c6:79:aa:51:9d:
e8:3c:71:da:04:20:ee:2f:1b:c0:51:94:f8:2d:27:
87:54:21:d8:02:75:70:00:bc:97:86:e1:bd:08:72:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:DA:ED:D5:1E:80:64:F1:01:F4:46:7A:04:56:AB:24:7B:D3:47
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/yQHa7dUegGTxAfRGegRWqyR700c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0-178.21.148.255
IPv6:
2a02:2c0::/46
Signature Algorithm: sha256WithRSAEncryption
4d:3d:4b:9a:9c:1e:e5:59:15:7b:83:f5:c0:c2:62:7d:10:98:
fb:b4:68:90:0e:bc:14:48:98:ae:4b:6a:7b:04:4d:85:11:0e:
18:6d:41:f3:63:23:0a:c0:ff:17:51:35:6d:4e:14:6d:a8:32:
ab:8d:22:f5:39:0b:9e:b7:5c:ee:39:f9:09:3b:c0:ec:81:d7:
46:2e:6e:8d:db:fb:6b:a9:ad:43:b0:0a:23:d6:28:9f:61:d1:
3a:51:2d:34:8e:e1:50:2d:75:23:93:e7:51:a8:43:1d:0e:17:
b6:78:d5:e6:e6:a8:07:03:78:b6:53:b0:b0:3b:bd:15:f3:2f:
ab:31:ce:39:ad:14:8c:a8:f0:ed:02:8f:d6:e6:90:22:e6:70:
23:df:fe:4d:48:9f:36:fd:e5:12:cb:01:ba:a4:a4:85:80:14:
60:ce:f3:4b:9a:c5:11:d0:55:76:e1:d1:35:26:bb:04:8e:9a:
79:4a:b5:64:d4:db:c2:06:42:2d:92:0f:0e:de:db:b9:f7:b2:
7f:f9:05:e3:0a:56:c1:20:7c:2d:be:f7:cd:fe:77:a3:65:6d:
82:16:ad:b1:00:6c:a0:3e:c9:2c:45:87:69:b0:66:14:0c:bf:
69:ab:3d:e6:a3:04:13:9c:c4:da:b0:25:5f:50:05:a5:7f:84:
6d:91:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org