Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zqJYOFhJ_g6N5gBHOdLkazSw0Fg.roa
File: zqJYOFhJ_g6N5gBHOdLkazSw0Fg.roa (raw, json)
Hash identifier: wEClrnyUONxppYEea8Lcv9v7mrqH8QxPmDoU1fAE/E0=
Subject key identifier: CE:A2:58:38:58:49:FE:0E:8D:E6:00:47:39:D2:E4:6B:34:B0:D0:58
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018C5248EF01C40A35EC6AB407B7EA39929A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zqJYOFhJ_g6N5gBHOdLkazSw0Fg.roa
Signing time: Sun 10 Dec 2023 05:52:40 +0000
ROA not before: Sun 10 Dec 2023 05:52:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 178.239.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:48:ef:01:c4:0a:35:ec:6a:b4:07:b7:ea:39:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 10 05:52:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea258385849fe0e8de6004739d2e46b34b0d058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:52:cf:9b:bf:29:16:73:b4:47:7d:f3:9b:
03:e1:0a:0b:bc:1c:72:72:79:54:74:6a:bf:e0:6c:
8c:7d:fe:97:6d:e5:a5:08:51:2c:3f:57:a6:1d:d7:
35:9d:a8:cd:73:96:92:f4:e7:d5:35:dc:83:91:4e:
01:fe:b6:1c:8c:5e:54:e9:14:67:7f:23:f4:85:0d:
7c:83:aa:2b:39:e2:f1:a2:54:62:5a:0b:22:bb:23:
74:1b:2c:e3:4e:49:18:4f:e1:35:cc:79:a7:c6:8d:
b4:02:9f:73:bf:92:4b:ad:dd:2b:c7:68:18:cb:92:
67:2d:03:03:a5:3b:3d:57:f4:d7:c7:e2:87:03:7b:
ab:8b:b2:6f:a5:24:15:cc:5a:8f:84:a2:00:39:a8:
a5:d8:72:8c:d6:08:69:15:d3:96:e3:48:fc:36:8f:
6f:13:01:24:46:dd:6e:32:c5:fb:22:0a:14:f2:54:
c6:e4:e8:71:54:76:8e:31:c7:ec:99:4e:6a:4a:87:
fc:ec:3b:52:f8:65:a3:2e:e0:dd:5a:73:c0:aa:7e:
3f:bc:e5:ca:12:13:8d:cf:e7:7c:1f:a6:48:b4:57:
d5:c8:60:80:3f:e7:d6:cf:00:b6:e7:0a:18:30:91:
ea:12:09:c5:7d:51:ec:05:f3:1c:f0:b2:e7:9e:8b:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:58:38:58:49:FE:0E:8D:E6:00:47:39:D2:E4:6B:34:B0:D0:58
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zqJYOFhJ_g6N5gBHOdLkazSw0Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:83:90:80:e4:4b:11:1b:5b:6a:7c:a7:b4:84:ff:c0:4c:db:
6f:92:2f:3b:0a:e9:53:58:cb:03:6e:f0:ef:04:c4:02:c3:a3:
0a:2c:f2:b0:17:e9:15:6c:c0:28:2a:80:3b:b1:2d:a1:32:4b:
02:a7:c5:87:4b:61:4a:92:28:75:db:30:01:7a:09:83:6b:9f:
73:aa:f2:d9:b4:3b:ed:95:0a:65:a0:e4:f6:bd:4e:d8:ba:ea:
d6:cc:a5:89:61:d5:4d:eb:88:b5:b6:2d:76:96:4a:e0:2f:9a:
36:88:7a:df:60:82:ca:a1:02:c8:d8:e5:5f:fb:d6:31:eb:2f:
6e:98:e6:48:4c:df:22:32:f4:ea:94:a5:da:e7:b1:a7:e3:3e:
7e:70:98:af:68:ab:f3:cc:0b:c6:01:cb:ad:cb:c5:1b:c8:34:
a2:12:99:13:a4:ff:4e:96:80:33:fe:1d:8a:7e:2c:82:23:24:
08:bc:37:08:0a:b7:ae:e4:4f:58:93:fc:93:87:c8:13:86:2d:
49:7c:90:d0:fd:7e:b7:a6:7c:01:a3:3f:73:59:2c:00:8a:e1:
76:6d:7e:41:6d:e2:97:90:c9:54:fd:af:48:0a:d8:f5:5f:05:
76:5c:17:30:7e:32:f4:4e:28:79:93:d9:ec:26:3f:b1:74:ed:
59:9c:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 15:41:37 2023 by rpki-client on console-fra.rpki-client.org