Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/a4lUrCP1OIwRbv1KLLje3-Wzwz4.roa
File: a4lUrCP1OIwRbv1KLLje3-Wzwz4.roa (raw, json)
Hash identifier: U0EL2E4Gng8wYw/wIo9aSkJr+v1a1niuyXFxjuTfxIs=
Subject key identifier: 6B:89:54:AC:23:F5:38:8C:11:6E:FD:4A:2C:B8:DE:DF:E5:B3:C3:3E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01867D9A1C0BE9A079D73BC03C1BC737C955
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/a4lUrCP1OIwRbv1KLLje3-Wzwz4.roa
Signing time: Thu 23 Feb 2023 09:28:17 +0000
ROA not before: Thu 23 Feb 2023 09:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 178.239.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:9a:1c:0b:e9:a0:79:d7:3b:c0:3c:1b:c7:37:c9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 23 09:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8954ac23f5388c116efd4a2cb8dedfe5b3c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:f3:98:d5:56:e0:99:ad:b9:84:e5:65:0d:
e3:18:25:f8:68:c3:77:04:bb:af:3a:c8:aa:75:d7:
54:88:8d:23:60:e4:61:e5:d2:4c:45:59:1a:c4:1c:
db:69:9a:7e:56:8c:30:e8:e0:22:30:84:0e:53:11:
10:79:a5:2f:b7:28:18:87:86:28:7e:7f:0e:da:aa:
31:51:80:96:9b:78:9e:8e:a6:22:ca:79:f7:6b:34:
ac:ec:9e:bf:eb:da:d4:86:4a:23:81:8f:ec:3a:4c:
88:9f:b1:c2:9c:a9:2c:ec:ab:6f:c0:56:40:03:57:
eb:af:3f:52:10:c4:87:65:b7:8d:70:bb:4f:be:e1:
51:c4:bd:8d:1c:23:16:d4:ed:7f:9c:50:37:85:fc:
42:cd:14:02:60:c1:84:d2:e6:75:7c:20:70:4f:c3:
22:9c:e9:4a:c9:76:e2:a3:9a:de:3f:68:49:b1:12:
28:a6:05:db:c9:4c:9c:46:38:6a:a4:c1:6a:67:30:
bb:f2:22:03:b1:8f:71:a8:56:ea:75:7e:ec:25:cf:
fb:1e:e5:0e:83:11:b1:60:f7:c6:37:e2:62:a8:33:
5a:59:67:d5:1a:36:49:bd:ba:3c:16:c7:55:20:d3:
6e:af:94:75:de:83:97:91:2a:b9:71:55:d7:f0:24:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:54:AC:23:F5:38:8C:11:6E:FD:4A:2C:B8:DE:DF:E5:B3:C3:3E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/a4lUrCP1OIwRbv1KLLje3-Wzwz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b6:03:c7:bd:07:d6:26:24:4a:e4:4c:c5:bd:9d:65:53:fa:
a8:7d:23:be:d8:76:4e:90:9e:07:fe:ef:2e:7c:8b:c4:8e:0c:
5d:9c:6d:56:db:27:15:24:e6:53:d9:52:67:47:a0:f4:19:b6:
15:64:6d:85:d4:e8:39:38:57:7f:46:3b:fd:6a:25:9c:2d:7a:
78:7c:65:81:ae:01:69:f1:03:6b:39:61:86:ea:c8:63:91:ba:
5f:88:03:7e:b3:48:00:67:e2:45:71:2f:1f:c4:d8:cd:ed:2d:
91:bd:cc:82:4b:d4:f5:bb:95:23:e4:84:92:7c:de:47:e6:68:
15:b5:8a:ba:7c:ed:a1:58:34:a5:73:9d:29:ac:34:67:99:5c:
5c:06:7a:80:7a:23:81:98:c8:7a:59:8f:6e:af:b1:0c:04:83:
bc:c8:67:ab:1a:73:b4:a4:d6:f8:1d:24:3b:7b:59:cb:e0:38:
55:ee:e6:97:f7:d8:bd:97:83:cb:87:ca:97:95:70:4e:5a:d9:
0f:9a:fc:46:ac:23:e6:c2:7a:5d:96:19:2c:f9:f0:99:51:56:
ce:d5:ff:af:28:f2:ab:38:b0:a7:28:07:c2:15:b9:c2:05:44:
d7:2b:db:12:6f:5c:19:1f:9f:bf:2a:11:36:37:e3:14:5c:74:
45:d0:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 21:12:57 2023 by rpki-client on console-fra.rpki-client.org