Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zzZ_KqyRGma9JRmdRPQGRtEwlKU.roa
File: zzZ_KqyRGma9JRmdRPQGRtEwlKU.roa (raw, json)
Hash identifier: 5xlebQSy9f8mi5JkFLCXzLHOPegRqtF0LFp7mnALKwQ=
Subject key identifier: CF:36:7F:2A:AC:91:1A:66:BD:25:19:9D:44:F4:06:46:D1:30:94:A5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018E466E6A23E6FB3BBEB3A8F554BEFA4583
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zzZ_KqyRGma9JRmdRPQGRtEwlKU.roa
Signing time: Sat 16 Mar 2024 08:43:44 +0000
ROA not before: Sat 16 Mar 2024 08:43:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 178.239.154.0/24 maxlen: 24
178.239.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 07:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:6e:6a:23:e6:fb:3b:be:b3:a8:f5:54:be:fa:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 16 08:43:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf367f2aac911a66bd25199d44f40646d13094a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:ab:7a:0c:08:d7:18:5f:1c:84:09:2f:8e:
d4:a6:75:83:24:cb:66:c1:f6:b4:af:d2:78:e0:93:
70:73:41:8d:1a:be:c3:43:01:a9:90:29:01:3b:06:
9d:7c:42:c3:26:3d:91:f3:f4:a4:e7:c7:8f:ac:63:
77:f6:71:2d:6e:06:38:8e:0a:a7:9c:2f:3b:c9:0d:
fb:5d:2f:41:9f:35:0c:f3:eb:23:a1:d4:d7:bd:32:
d0:8e:d6:8f:ba:46:4d:d7:97:bc:90:08:09:2b:87:
2a:4d:41:55:c6:c9:e3:08:d3:e0:fc:36:bf:bb:94:
17:2a:23:a4:c8:2a:8f:85:19:25:29:8f:1f:60:be:
26:b3:90:91:9e:77:23:00:5f:14:cb:29:68:42:96:
e1:dc:56:da:64:2d:2b:dd:95:4b:d6:ef:59:d9:ba:
5f:0b:df:eb:99:fd:b7:1a:6b:c5:c4:56:44:25:9a:
6a:49:ff:32:b2:47:50:a5:54:3a:a1:8d:d1:08:ac:
7f:cc:9a:6c:07:e7:4f:0e:2b:f2:c9:a9:3b:07:54:
cf:f6:5e:e3:e6:be:ea:9c:dd:c4:fb:4f:7b:0d:cb:
b2:93:24:13:7e:03:e3:5b:ba:d2:fb:36:d4:bb:2b:
50:20:d0:4f:db:1f:38:5d:61:aa:a2:da:9a:ac:d4:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:7F:2A:AC:91:1A:66:BD:25:19:9D:44:F4:06:46:D1:30:94:A5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zzZ_KqyRGma9JRmdRPQGRtEwlKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/23
Signature Algorithm: sha256WithRSAEncryption
85:47:68:c5:a6:2b:94:8c:d3:63:99:b5:c3:9c:b4:e4:d9:08:
ad:cb:9d:ab:50:37:31:b6:22:f8:93:50:36:53:d5:e7:85:e1:
82:d6:bc:ba:1e:73:e3:6e:09:69:07:e3:a4:68:3b:d3:85:69:
9d:5a:a4:18:e0:c8:03:14:03:4b:5a:6d:4e:7b:b1:42:aa:df:
56:14:de:e4:e5:de:d8:a2:51:a6:39:ee:9d:49:f7:9d:c5:dd:
5b:91:17:b6:3c:8b:68:a5:d2:41:ea:49:15:e4:49:9b:0c:42:
38:0d:2f:a3:0a:d7:08:14:a3:f8:39:99:01:6f:a7:6e:cf:86:
7c:e7:dd:7c:5a:59:e8:d9:72:b0:dc:c1:10:f2:25:aa:06:60:
b4:52:08:d1:cc:0d:dd:eb:05:9a:de:44:da:b1:76:8c:7a:f1:
8c:2a:9e:42:a4:25:8e:9b:61:1a:a7:a8:e1:94:eb:1c:f5:b6:
10:ff:11:78:5d:42:9f:42:07:5f:fc:8e:03:bc:ab:9c:f4:09:
18:e4:13:3f:a3:7f:1f:dd:a8:cf:98:64:67:5e:9f:e3:86:eb:
29:64:e8:8b:4c:59:1e:c9:9a:a7:5b:89:f4:f3:fd:ef:ca:5b:
1f:c0:a2:2a:54:37:08:6b:55:2a:f4:72:08:09:12:cd:6a:a8:
d9:cd:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 11:50:12 2024 by rpki-client on console-ams.rpki-client.org