Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/iCgJOE1n1kLVS_ZiTW6B6OgfEuQ.roa
File: iCgJOE1n1kLVS_ZiTW6B6OgfEuQ.roa (raw, json)
Hash identifier: gsaNy125dlDW61iDjEDYfKuKabyONvc5wHoME4DY1PI=
Subject key identifier: 88:28:09:38:4D:67:D6:42:D5:4B:F6:62:4D:6E:81:E8:E8:1F:12:E4
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018D7D5B5BB151D4E2F819D6078843138FFF
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/iCgJOE1n1kLVS_ZiTW6B6OgfEuQ.roa
Signing time: Tue 06 Feb 2024 07:39:15 +0000
ROA not before: Tue 06 Feb 2024 07:39:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 178.157.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:5b:5b:b1:51:d4:e2:f8:19:d6:07:88:43:13:8f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Feb 6 07:39:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=882809384d67d642d54bf6624d6e81e8e81f12e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:eb:40:cb:18:cd:56:6e:8c:21:24:a8:ad:
1e:16:f8:da:da:4b:36:96:2a:c8:5f:31:8c:85:3b:
3c:5f:8c:59:43:03:53:e6:de:5b:f5:33:55:6b:1d:
ad:66:fa:98:9d:de:f3:05:a9:1d:93:80:a9:63:00:
1e:e3:3c:b0:a7:b3:91:b6:e4:ae:18:2c:06:95:f9:
33:88:f3:3d:c1:6b:84:f4:99:38:f4:9a:00:d5:9a:
0d:1c:2a:4e:fa:5a:26:e5:18:a0:c5:01:75:d1:28:
60:9e:8b:2e:b9:32:fb:0f:60:36:14:12:e2:71:b1:
7e:52:e9:0f:eb:22:99:6b:5f:e3:2d:67:e9:f4:77:
fb:35:15:0f:73:5e:0c:1b:bc:a8:d4:98:0a:bc:e2:
c4:4a:b1:e8:b5:d5:9c:0e:0f:51:33:ae:67:7e:08:
25:49:e1:1e:8c:75:49:7e:d0:c2:67:5f:71:da:47:
d0:17:08:bb:41:04:34:4f:1e:35:1a:36:34:9e:ab:
e6:24:66:37:49:aa:56:4c:cd:4d:95:48:7d:3f:d7:
1e:a9:6d:0b:83:a6:dd:d6:c7:e0:5c:a2:17:7e:d6:
f0:ff:c9:9a:6a:31:4b:26:04:1e:e5:2c:ed:67:00:
2f:02:b0:68:68:3f:7a:4a:de:86:f9:7f:9c:ef:31:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:09:38:4D:67:D6:42:D5:4B:F6:62:4D:6E:81:E8:E8:1F:12:E4
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/iCgJOE1n1kLVS_ZiTW6B6OgfEuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.110.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ae:b1:23:a3:a5:d7:cd:f4:15:8d:a1:92:4e:a8:75:13:17:
22:e6:00:e4:7a:64:49:02:54:cd:f1:2b:7f:95:ee:3b:bf:c4:
18:01:ab:38:46:4c:bd:c7:32:f5:5b:60:40:95:6e:3b:63:0a:
0b:47:69:72:d0:16:ac:ef:25:ec:b8:4f:e2:2d:89:3a:74:52:
fa:a1:4e:78:2e:f4:eb:cc:da:5a:7e:d1:19:33:cf:62:17:bf:
be:2d:bb:7b:22:ad:9b:91:a4:ea:78:e6:46:0e:f7:12:db:59:
84:a0:13:63:90:1c:e4:31:75:74:94:4c:71:4f:f3:4e:2f:c7:
62:9a:7e:0b:71:13:c8:a5:a3:c2:54:d4:af:1e:98:b5:01:0c:
7f:85:0b:76:12:81:ab:9c:69:24:1c:49:cc:5d:06:14:08:74:
32:f5:81:5e:72:49:45:c1:17:6a:ae:a1:0e:29:63:35:51:cd:
60:9a:9c:0e:8a:d4:49:df:25:3d:2e:79:da:2f:db:d7:21:5c:
93:81:a9:17:e8:3b:bc:25:d0:2c:a2:cb:87:03:b8:4c:8d:2b:
83:ea:4d:0c:43:5a:98:59:fd:da:9a:de:8f:4f:c9:74:c6:11:
4e:b1:ea:f1:88:00:4c:a4:52:40:12:f4:73:49:c3:3d:ac:41:
f3:2b:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org