Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/d5U5O7TwkfWLmjQFD91OI42vcis.roa
File: d5U5O7TwkfWLmjQFD91OI42vcis.roa (raw, json)
Hash identifier: I9+A+kYZdPl8A1E3MFzRHmd+TKOhy5Ft1ivwSA2gzwo=
Subject key identifier: 77:95:39:3B:B4:F0:91:F5:8B:9A:34:05:0F:DD:4E:23:8D:AF:72:2B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CACB824BB1DD7819618AAE075D7440BEB
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/d5U5O7TwkfWLmjQFD91OI42vcis.roa
Signing time: Wed 27 Dec 2023 19:19:58 +0000
ROA not before: Wed 27 Dec 2023 19:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:b8:24:bb:1d:d7:81:96:18:aa:e0:75:d7:44:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 27 19:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7795393bb4f091f58b9a34050fdd4e238daf722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:13:12:ab:66:24:ed:6a:36:84:e2:82:1b:
f5:8b:79:e6:ad:c0:5b:68:20:bc:ae:fa:57:d5:d3:
dc:5e:e4:e0:3c:97:50:f3:d0:89:58:cf:29:1b:f7:
2a:99:53:e9:28:7f:c9:96:70:30:b7:b9:e2:11:3d:
a2:55:c2:8f:2d:2d:1e:ab:12:c2:ec:35:cd:1c:0e:
15:f2:c7:70:da:d3:a9:af:56:e0:5b:65:8c:fe:27:
89:4b:a4:f6:1a:e6:40:96:19:9a:d4:25:a5:b8:d7:
3a:0f:21:4e:cd:5c:dc:1c:08:fc:47:7c:4f:80:f3:
0c:cc:5c:60:9a:1e:89:0a:44:3f:97:b4:9c:87:22:
b7:40:37:02:e1:a6:b3:e3:29:d2:e1:5a:7d:fe:3e:
17:3f:73:4b:b1:42:2c:7f:e6:b3:e5:fc:55:2c:3f:
71:97:f9:aa:16:1a:ba:9c:40:26:aa:99:49:9e:e9:
33:53:2e:42:ee:8b:38:07:67:55:f2:16:43:cb:8f:
88:b7:d8:d2:58:d4:34:73:0a:fa:b6:81:84:d0:9e:
62:1a:da:9b:d5:c1:c9:c0:83:41:72:05:30:b4:f6:
da:9b:88:26:46:53:cf:cb:29:89:c5:6d:8c:f3:a0:
00:2f:19:e7:8f:93:88:77:a3:8e:d7:57:9a:0e:70:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:39:3B:B4:F0:91:F5:8B:9A:34:05:0F:DD:4E:23:8D:AF:72:2B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/d5U5O7TwkfWLmjQFD91OI42vcis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:22:6a:80:ba:38:06:1f:95:d0:e5:6a:27:7f:92:a1:dd:d6:
b1:e3:a1:15:89:91:39:02:42:fb:f2:3e:d5:eb:42:27:e0:a3:
c4:d3:78:0a:1f:72:2c:3c:4e:b2:48:42:f7:38:81:6f:88:7a:
84:ed:24:86:e4:3d:34:4a:65:e1:25:bb:b8:73:a7:0e:17:74:
91:d8:f8:c2:b3:53:ff:76:91:a6:90:32:05:54:a6:91:5f:33:
a6:9c:02:f7:18:41:d1:3c:ab:88:60:93:01:f1:b4:42:ce:f2:
14:c0:1b:40:de:a0:be:57:40:98:fc:86:49:2c:91:b4:86:c5:
74:6f:54:59:b7:24:5b:7c:f2:a4:33:57:0c:05:e1:78:6d:0e:
05:89:5c:a7:58:b7:55:b4:16:d6:73:ce:60:27:b3:c2:88:ab:
dd:73:e9:3e:50:b7:35:ef:0a:97:dc:fb:89:72:6a:65:de:2d:
46:34:a9:2e:d8:92:40:4c:c2:93:76:38:89:e9:7f:99:23:85:
19:86:2d:ca:21:f7:cb:6b:44:33:aa:1c:0f:10:2a:c1:2a:96:
7f:59:49:ad:91:1a:4d:18:1b:9f:41:15:02:3d:13:1f:d4:88:
9f:f9:cd:55:2a:42:15:16:bb:9f:1e:bd:ee:eb:93:10:a3:9f:
86:aa:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:56 2024 by rpki-client on console-ams.rpki-client.org