Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ikcKMCQzl_wng7EGOWu_JiXdffk.roa
File: ikcKMCQzl_wng7EGOWu_JiXdffk.roa (raw, json)
Hash identifier: dSHbLf9lpngfvRSsBwHFxKBjHYl1VWVVJ2IJQoxJqH8=
Subject key identifier: 8A:47:0A:30:24:33:97:FC:27:83:B1:06:39:6B:BF:26:25:DD:7D:F9
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3C7F6E59DA52D0F0EBDCCF325838
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ikcKMCQzl_wng7EGOWu_JiXdffk.roa
Signing time: Sun 01 Jan 2023 03:05:05 +0000
ROA not before: Sun 01 Jan 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201797
IP address blocks: 178.170.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3c:7f:6e:59:da:52:d0:f0:eb:dc:cf:32:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a470a30243397fc2783b106396bbf2625dd7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:ea:2e:3a:0d:42:69:6a:c4:a3:cd:bb:3a:
a2:db:4e:a1:34:00:0b:b2:c0:7b:09:de:85:9c:7b:
fc:e1:f5:3a:1f:3e:42:4f:b6:27:3a:23:36:ac:98:
c8:e4:07:8d:04:0b:4c:ab:c3:3c:9b:22:23:f1:3e:
0f:51:32:7e:cb:ee:66:56:dc:b4:2d:1c:86:66:bb:
ca:7c:7d:92:82:11:fe:c3:4c:88:23:60:e4:c5:a5:
70:ac:57:ad:a1:5e:fa:b4:eb:f9:d7:f6:74:af:37:
f1:05:3c:57:02:32:78:9e:09:88:a1:6c:43:7d:cc:
a0:43:af:15:ed:3c:46:30:66:9b:6c:ed:9f:69:11:
b1:13:c3:1f:79:85:be:64:56:22:2c:11:ae:8b:f5:
f8:0f:d7:a5:99:c1:14:89:7f:7c:ea:ae:72:ef:2c:
b0:d2:e5:53:40:e0:00:55:eb:c3:1a:9b:c1:4c:d1:
2a:f8:b9:a5:be:d7:b3:f9:52:29:ff:8c:a2:2c:b7:
19:b9:ee:88:d8:a3:4f:9d:60:5f:99:b7:2a:6a:cd:
29:e4:11:4e:11:73:1f:6c:84:ad:eb:e4:e2:43:f5:
57:2d:5a:ef:f0:07:32:68:8e:a4:ce:e5:14:94:2b:
07:4a:2e:6a:d3:87:f9:5d:ad:1d:27:4d:45:13:33:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:0A:30:24:33:97:FC:27:83:B1:06:39:6B:BF:26:25:DD:7D:F9
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ikcKMCQzl_wng7EGOWu_JiXdffk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.230.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6e:e0:6f:52:82:1c:a0:21:9d:34:9a:a3:59:b9:12:64:0e:
4e:f9:01:79:1f:9d:45:7a:2b:62:80:13:2c:01:a1:de:a6:15:
a2:05:0b:21:dc:46:84:72:fc:91:bb:9e:ae:c1:78:a1:ae:21:
44:8b:72:c9:26:99:59:67:b3:ec:91:22:b3:7e:26:c3:71:58:
d1:3e:74:62:8d:f1:b7:61:49:63:a4:53:2f:5f:de:23:d0:8d:
18:f0:35:40:0f:ed:bb:26:b5:96:bc:50:4c:63:74:da:91:41:
d9:e6:c2:09:5d:8c:b5:ed:7f:98:7e:28:56:c2:b6:1d:6e:08:
be:8e:95:61:69:70:84:00:f1:f5:b3:62:f2:67:a0:b4:47:0d:
e3:16:36:74:bc:4d:60:46:c6:6f:c7:b4:e7:ea:2a:45:db:c8:
fa:6b:89:cb:69:cd:cd:a8:2c:4b:4a:38:60:33:5a:c5:12:0d:
01:46:34:ff:f6:0d:ff:64:e2:98:aa:ed:04:96:5c:29:b5:9a:
d2:8e:ca:f2:8a:c2:c7:4a:c0:49:5d:81:d9:c4:81:2b:f8:aa:
84:cc:54:81:e1:1d:ec:f7:36:a6:c2:d0:12:02:12:8b:12:f6:
3b:c5:d5:85:47:dd:eb:65:24:60:70:0d:a9:77:08:88:e8:75:
8c:9c:26:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:29 2024 by rpki-client on console-ams.rpki-client.org