Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/KgHuIb_dEGMR88-CJrn-JVZdJqU.roa
File: KgHuIb_dEGMR88-CJrn-JVZdJqU.roa (raw, json)
Hash identifier: OSQSRaAHb6vTQ4BngF4R47PMfWsJ1/yuycLWOi61qaQ=
Subject key identifier: 2A:01:EE:21:BF:DD:10:63:11:F3:CF:82:26:B9:FE:25:56:5D:26:A5
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0185BE2FD9CE90F5F6C537983A3DA4AAC8F9
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/KgHuIb_dEGMR88-CJrn-JVZdJqU.roa
Signing time: Tue 17 Jan 2023 05:24:45 +0000
ROA not before: Tue 17 Jan 2023 05:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12406
IP address blocks: 178.172.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:2f:d9:ce:90:f5:f6:c5:37:98:3a:3d:a4:aa:c8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 17 05:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a01ee21bfdd106311f3cf8226b9fe25565d26a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:f6:f8:9d:87:00:d8:3f:dd:aa:8f:f9:80:
fd:c6:63:f9:a4:1b:8a:82:33:e8:4c:d3:55:c7:7a:
de:84:e5:1a:5e:8d:6e:2f:6d:61:17:b3:8a:3a:dd:
20:b0:d3:99:62:ae:81:da:de:d3:ae:a4:e1:da:82:
34:62:fa:fb:36:1b:12:d0:1c:ec:56:e8:42:a2:2f:
6a:67:60:0e:9e:71:53:de:c3:99:da:ab:56:d6:5e:
9a:23:f9:bb:9c:20:ed:14:06:10:0a:db:93:49:35:
14:5a:8c:db:6a:90:47:9e:93:9e:02:66:81:47:0c:
1d:c0:02:4c:69:a1:64:d7:9e:05:a5:69:57:70:ac:
c2:d3:ae:96:d5:d0:4d:4e:89:67:57:41:5d:d0:84:
8e:31:99:d7:ed:8f:a8:1e:23:e4:76:11:a0:fd:b3:
2d:c7:31:c3:39:ae:93:78:d9:93:fd:c6:06:33:ab:
2e:d5:0d:c9:4a:1a:75:c6:05:47:92:2c:3c:1a:93:
0e:1f:51:86:cb:d1:07:c1:ee:7c:4e:66:82:2f:61:
e4:c1:84:e9:34:ac:e5:60:f6:6d:93:ed:1e:33:72:
81:38:44:cb:c6:2e:d2:31:5d:78:76:6d:56:75:3f:
95:5e:48:29:38:0d:09:45:99:27:6e:3d:8b:0b:a9:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:EE:21:BF:DD:10:63:11:F3:CF:82:26:B9:FE:25:56:5D:26:A5
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/KgHuIb_dEGMR88-CJrn-JVZdJqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.172.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:54:9b:be:cf:11:6d:f5:3b:82:a2:bb:df:bb:a9:d4:e4:3c:
a9:97:7c:00:aa:49:45:8a:af:99:80:41:16:ee:b1:38:2a:79:
ae:a0:1b:49:ee:c4:36:93:f9:0f:28:e7:0b:34:19:33:c2:6c:
ed:8c:84:4d:f8:40:63:d8:07:21:eb:3b:9b:0a:71:fe:b6:ca:
34:0c:04:77:d9:a6:4b:e3:0e:c6:4e:ef:de:94:21:c7:6d:5e:
f8:c6:7d:55:f1:0b:95:87:14:eb:63:06:13:45:a6:5f:4f:f5:
b0:07:47:06:d0:49:20:75:ac:69:a6:5c:b0:14:c7:0d:16:03:
7d:73:86:85:fb:21:b5:25:57:e6:f8:a6:c6:df:9b:a4:e8:45:
c7:ed:d0:5d:e5:a5:29:c0:ef:e4:e2:5d:49:6d:f4:1a:5e:42:
f1:c7:30:f5:92:74:a8:60:9c:5e:8e:12:60:1e:0d:c4:d1:b2:
43:2b:a3:8d:da:56:09:ad:3e:16:ef:46:60:01:ce:ae:8a:d1:
03:a4:4a:b2:e8:1d:31:71:0f:3d:0d:ed:da:02:d4:a9:b1:78:
c0:17:b3:c2:1d:c6:e1:ab:f7:ac:4d:31:05:c6:c4:71:f1:b8:
b4:ad:06:ec:29:81:f1:67:fc:d2:8f:b6:0d:b5:e9:df:b2:4f:
a0:c7:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:22 2024 by rpki-client on console-fra.rpki-client.org