Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/xSqQ4JfON8s3X5BcWaXOXY4Qhbo.roa
File: xSqQ4JfON8s3X5BcWaXOXY4Qhbo.roa (raw, json)
Hash identifier: 8oh9ruhbNccaZPV0vVXLX92oTyzseXOsSU6r/LK9Y7s=
Subject key identifier: C5:2A:90:E0:97:CE:37:CB:37:5F:90:5C:59:A5:CE:5D:8E:10:85:BA
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01918D3F03C434C7B7A0A086CB7EF1DAEAD5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/xSqQ4JfON8s3X5BcWaXOXY4Qhbo.roa
Signing time: Mon 26 Aug 2024 05:53:22 +0000
ROA not before: Mon 26 Aug 2024 05:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 06:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:3f:03:c4:34:c7:b7:a0:a0:86:cb:7e:f1:da:ea:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 26 05:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c52a90e097ce37cb375f905c59a5ce5d8e1085ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:34:c6:ba:bf:e9:26:26:ec:8d:64:7d:62:
50:e1:d0:d5:ab:97:41:d4:a7:3d:d7:08:fc:b1:f5:
d3:ba:c8:1e:19:d8:3c:1d:c8:6b:dc:28:f4:23:2b:
da:ad:79:23:99:af:b1:14:c9:3d:aa:ac:d4:90:e3:
c4:fe:d8:0c:a5:b0:59:ea:7f:e2:8d:32:d5:a8:0a:
1d:05:3b:8d:3e:cc:a7:8c:a5:19:16:f4:39:9a:6f:
3a:73:95:08:f9:2c:62:95:5e:6d:78:5b:f7:f2:1b:
db:0c:2f:0c:5b:b5:bf:e6:7a:39:7a:37:be:0c:db:
c2:2a:f6:d2:09:52:ea:e1:1c:e4:eb:17:fd:ec:60:
5b:6a:c3:23:54:49:14:58:36:fd:19:aa:d1:88:9a:
cd:c2:22:72:31:c9:c6:f7:27:ed:89:a5:01:8b:73:
01:f9:f1:ac:ed:33:77:fc:27:80:bf:ce:62:ee:3a:
c2:20:b2:83:23:a4:0f:38:2e:a0:d0:d8:70:61:b0:
2b:42:a8:a4:c5:df:18:d1:5a:be:da:49:c7:db:36:
52:c5:0c:17:9d:e3:7e:c4:22:13:fd:48:3e:6b:0b:
cf:16:71:ac:bc:cc:31:14:f6:c5:01:d6:8e:bc:07:
d7:c2:60:52:1f:0e:39:ea:46:73:e5:68:fa:d6:ba:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:90:E0:97:CE:37:CB:37:5F:90:5C:59:A5:CE:5D:8E:10:85:BA
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/xSqQ4JfON8s3X5BcWaXOXY4Qhbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
54:24:35:8e:26:07:70:87:a7:43:8c:72:39:e7:10:1f:52:96:
4b:61:ab:05:13:2c:4e:f8:f8:08:7a:b9:ae:db:87:b5:da:ef:
cf:58:5f:88:8a:75:8f:dd:f8:70:e1:c4:46:57:7d:70:02:4e:
e8:ef:de:81:bd:e6:15:b6:66:a5:3e:cb:2f:9e:de:06:7d:3e:
4c:5b:ff:99:49:2c:47:33:06:58:59:87:40:83:97:61:8a:cd:
00:82:0c:8b:f9:b3:a4:1f:7a:57:82:7d:1e:8b:c2:2f:12:60:
33:ee:25:a1:2f:bd:14:70:8a:d7:4c:0b:af:3b:11:0e:bd:b0:
95:4b:5a:1c:70:7c:ff:5d:a7:d2:a0:32:4f:f2:c1:d3:ab:91:
b7:25:73:0f:92:22:4c:83:35:85:f3:a0:2d:f6:48:03:13:34:
d9:1f:b5:c2:08:27:72:b7:69:5c:3d:7f:b6:89:69:d1:7b:3f:
38:4a:2f:8b:4c:fa:4e:18:87:36:8b:84:ad:89:b5:54:85:d0:
1e:43:14:85:2a:fd:88:8b:2a:ab:ca:a3:84:04:1a:aa:99:ff:
a3:dd:de:34:03:fb:60:bd:e5:2b:36:fb:0d:47:95:4f:75:74:
3b:5d:6d:91:74:c7:02:cf:14:67:46:7c:3e:48:97:d4:3a:46:
56:50:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 08:15:35 2024 by rpki-client on console-fra.rpki-client.org