Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/CnZpCmdTHrtUO3hRqCdjjzjV4Ow.roa
File: CnZpCmdTHrtUO3hRqCdjjzjV4Ow.roa (raw, json)
Hash identifier: Mnom8xY1DTfk7NVSa8t1Z3WhyNAg9hzx59TRpfhzpG4=
Subject key identifier: 0A:76:69:0A:67:53:1E:BB:54:3B:78:51:A8:27:63:8F:38:D5:E0:EC
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01856DC19B5736636847B2937B84A5469BC1
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/CnZpCmdTHrtUO3hRqCdjjzjV4Ow.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 178.239.151.0/24 maxlen: 24
178.239.152.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
178.239.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9b:57:36:63:68:47:b2:93:7b:84:a5:46:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a76690a67531ebb543b7851a827638f38d5e0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:1f:72:d1:ba:e4:41:97:ba:67:9c:52:d2:
81:d6:39:7a:db:0f:a9:f0:df:c3:7d:26:f8:ed:dd:
29:5f:8e:b9:80:14:a9:06:39:a5:ad:ca:d0:63:74:
59:d6:00:f6:0c:b8:52:bc:bf:e2:8d:5f:ed:c9:a6:
91:eb:54:76:d8:a9:90:82:45:f5:cc:8c:fd:1d:0e:
97:57:e4:42:d7:57:e5:da:61:ab:15:26:0a:bb:5b:
8c:56:f7:c3:e1:77:e6:65:c2:ba:c0:79:73:74:b6:
39:b2:e1:09:bf:1f:dd:55:db:87:76:4d:36:6d:6b:
38:b4:ef:9e:b2:d2:8a:95:26:2c:ea:cc:6e:13:ef:
88:1c:d5:04:53:0e:05:fc:a3:ab:03:9f:55:5d:eb:
a4:94:ec:89:32:61:e5:8a:ce:58:89:84:d7:f5:24:
6f:f0:0b:58:f9:a5:6b:db:0d:a5:d7:1c:16:38:1f:
ac:64:0b:df:b4:52:f0:cc:86:bd:9b:33:4a:4c:e7:
87:4d:4d:70:01:9b:51:de:b3:40:e0:82:fd:9c:b8:
e6:2a:de:90:77:a7:da:2b:2b:10:91:15:90:69:2c:
17:68:a0:2c:53:56:b0:80:a4:71:7f:2a:23:32:16:
d3:4c:be:64:36:74:7f:aa:34:39:7c:60:32:3d:a8:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:69:0A:67:53:1E:BB:54:3B:78:51:A8:27:63:8F:38:D5:E0:EC
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/CnZpCmdTHrtUO3hRqCdjjzjV4Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.151.0-178.239.153.255
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:67:0f:b4:16:1c:26:25:ab:4b:48:29:96:ae:e5:0b:2f:ba:
11:42:cd:f9:6b:e1:77:24:1e:ea:ec:01:57:a7:1e:f3:24:35:
95:57:db:6b:1f:83:44:16:c1:12:8f:70:f9:0e:d4:70:dd:65:
72:a1:1a:a4:1d:9e:e1:4a:f2:fc:77:9f:eb:cc:07:82:20:77:
1f:54:ea:03:21:8d:dc:b3:cd:9d:53:c8:a5:47:33:be:16:66:
6d:9b:4d:40:8b:98:b7:e8:d2:46:e7:1d:52:00:f1:38:7d:26:
54:66:53:0c:80:cf:95:2c:83:d1:a0:66:ae:05:e4:ee:94:2f:
89:64:7a:3f:fd:9b:17:ab:b7:6c:ff:ec:7c:39:66:a6:fc:ff:
c9:87:0e:f3:c0:fe:ec:49:85:6c:8b:cc:0c:60:1d:d5:b8:eb:
34:03:41:e2:d1:6e:76:25:88:78:b8:23:68:2b:7b:68:ae:ee:
6b:6c:d7:5d:d4:24:9b:c0:3a:c3:de:c1:05:0c:49:71:c4:8c:
b2:49:fc:06:31:05:d9:0d:e8:27:76:d6:90:bb:29:f5:75:cb:
05:81:4e:0e:a5:17:4a:cf:b7:c2:d2:df:d3:a2:2e:dc:c9:ea:
6b:a9:ca:90:02:ac:2a:19:e2:1a:c7:35:e8:75:f8:5a:78:6a:
94:3c:29:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org