Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/wFOF2GZRb5jAykq2jbFQ8hAmZns.roa
File: wFOF2GZRb5jAykq2jbFQ8hAmZns.roa (raw, json)
Hash identifier: oOx1UU8/PqF/9nlKLcXD2kpCase2JTtizQ00/IpBNmU=
Subject key identifier: C0:53:85:D8:66:51:6F:98:C0:CA:4A:B6:8D:B1:50:F2:10:26:66:7B
Certificate issuer: /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial: 01856CB83779B0E034888896987B0D4C9F65
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/wFOF2GZRb5jAykq2jbFQ8hAmZns.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50815
IP address blocks: 178.216.56.0/21 maxlen: 21
194.0.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:37:79:b0:e0:34:88:88:96:98:7b:0d:4c:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c05385d866516f98c0ca4ab68db150f21026667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:36:aa:1d:88:f8:78:6d:12:c2:dd:af:f8:
71:a5:e9:e0:b5:d4:8a:5c:14:83:54:82:3e:69:87:
d5:a8:73:da:aa:a6:41:a9:86:48:60:f8:b5:d9:3d:
ef:40:6b:54:79:fe:6a:98:c6:77:45:cb:14:c4:d9:
50:86:be:5b:7b:b3:32:27:55:f7:61:a1:a0:bf:1a:
51:12:8d:90:e4:e2:3f:51:13:05:19:29:e1:fb:b7:
57:56:42:63:a1:d3:a5:3f:c1:ae:76:17:a6:5d:ad:
6c:b8:41:43:d1:3f:cb:2a:63:f7:8a:5b:96:fc:4a:
0b:7b:a3:aa:de:73:a2:55:e2:b8:46:53:35:e6:44:
1f:77:12:31:2e:49:db:45:eb:c6:d8:7e:10:2d:01:
50:0b:34:93:1e:c1:a4:85:6f:83:97:13:11:f9:30:
83:da:b4:8b:0a:ff:22:e0:bd:22:7f:d2:1b:62:af:
31:73:16:81:b2:99:43:53:d6:6d:5b:7f:88:32:8b:
f9:ef:17:53:ef:60:1b:e2:91:f9:c4:24:79:e0:0b:
cc:aa:42:d0:8c:09:d7:c6:01:21:40:2b:2f:ae:4b:
f3:b5:75:af:f6:54:fd:ba:e9:ff:12:e4:cb:ef:8a:
e5:5c:b6:18:9b:6d:20:7d:d1:b9:89:ba:66:3a:82:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:85:D8:66:51:6F:98:C0:CA:4A:B6:8D:B1:50:F2:10:26:66:7B
X509v3 Authority Key Identifier:
keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/wFOF2GZRb5jAykq2jbFQ8hAmZns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.56.0/21
194.0.174.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:6f:74:66:e7:65:97:1f:27:20:bc:21:d7:69:23:ad:92:e6:
f6:1b:43:b1:0e:49:f3:15:e6:19:28:da:ff:96:ea:aa:19:33:
88:69:bd:19:0f:10:08:9d:de:3a:a1:e5:df:89:9e:ec:56:2c:
4f:db:fe:74:c1:17:74:8c:c0:30:7f:d5:a7:bb:3d:2d:79:8e:
3d:c2:54:2f:04:b9:f8:9b:ca:a4:d8:5a:ba:34:cb:f5:49:03:
09:3b:77:f7:99:9f:71:62:9b:4c:ed:bb:a4:fe:40:b2:9c:49:
5f:9a:d2:7a:57:68:4e:01:89:28:59:ce:9b:c8:90:89:1e:c6:
0b:f4:10:67:5a:1b:16:78:7d:3a:40:6e:7c:5f:fd:2a:64:14:
26:b0:36:a9:2a:9c:c7:d5:02:1a:da:a3:06:f3:b6:8c:9f:68:
da:b2:2c:9f:aa:49:bf:1f:ca:52:0c:d9:a9:18:37:ff:54:0c:
4a:36:aa:cc:81:0b:2d:57:cd:0c:69:a1:30:c7:41:77:e8:5e:
97:b4:7f:ff:58:9f:34:18:91:fe:82:b4:53:85:23:f5:de:0d:
ee:47:2e:00:df:9e:b1:a6:b7:96:23:49:39:47:1f:ef:3f:42:
07:f9:45:75:bd:13:b7:ef:e9:07:b1:3b:c7:b4:8d:ce:d7:3f:
b9:11:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:23 2024 by rpki-client on console-ams.rpki-client.org