Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/bygeV6xjedQUKlYUsZrmihHY0zU.roa
File: bygeV6xjedQUKlYUsZrmihHY0zU.roa (raw, json)
Hash identifier: weI0BnaWbYPueCfWNTG7GQHmxED1NEsJ2FNLb5moezo=
Subject key identifier: 6F:28:1E:57:AC:63:79:D4:14:2A:56:14:B1:9A:E6:8A:11:D8:D3:35
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0185D0B62906F949E127F6ED4C07C5C2BE36
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/bygeV6xjedQUKlYUsZrmihHY0zU.roa
Signing time: Fri 20 Jan 2023 19:44:37 +0000
ROA not before: Fri 20 Jan 2023 19:44:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205422
IP address blocks: 178.217.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:b6:29:06:f9:49:e1:27:f6:ed:4c:07:c5:c2:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jan 20 19:44:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f281e57ac6379d4142a5614b19ae68a11d8d335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:48:9a:25:fc:ab:9b:e9:d4:c7:9f:8d:97:
28:54:6a:50:6e:ee:80:93:6f:4e:6d:4e:33:18:68:
b2:79:bc:1d:13:77:88:58:af:10:b9:4f:df:3e:77:
47:37:30:8b:db:55:8d:af:24:71:d4:c2:35:4a:50:
21:3c:8c:d2:0b:28:79:bb:6b:d0:99:52:11:c8:55:
20:9b:2c:78:6f:b5:ca:90:f7:ab:64:6d:74:f1:cc:
d2:c8:05:90:35:c0:12:b3:37:0e:9c:a9:e9:e5:bd:
a1:ac:52:7a:81:0d:1c:eb:86:85:a3:fe:4b:1d:ad:
1d:ff:e7:9e:fa:58:1b:16:8a:bf:f9:9e:9f:0e:ed:
ae:83:42:00:56:77:ba:86:08:ca:9f:be:9b:bd:6d:
11:ca:e6:be:be:ed:0c:a0:25:e9:3c:2d:3a:0e:44:
03:d8:4b:63:55:d0:55:96:0f:20:24:9d:4c:46:8a:
4c:02:1e:29:ef:05:97:86:50:21:a3:67:f1:32:fd:
66:f6:d5:31:8f:f9:e6:0d:97:64:62:a4:1d:64:8b:
44:91:26:15:2f:84:e0:f8:11:6f:de:a4:5b:69:80:
5c:73:a7:0c:b4:45:1e:24:1a:ed:d8:43:b2:6e:1d:
7a:4d:cf:6d:00:c2:63:7a:e5:94:42:20:09:c9:fb:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:1E:57:AC:63:79:D4:14:2A:56:14:B1:9A:E6:8A:11:D8:D3:35
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/bygeV6xjedQUKlYUsZrmihHY0zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f6:98:05:eb:3b:91:7e:bb:25:47:e8:fb:87:f7:24:d4:ad:
ad:5b:b5:e8:1f:8c:47:fd:8e:53:72:d6:a9:1f:d3:40:d2:ec:
25:c0:0b:73:33:67:d1:20:d0:2d:e3:ef:cb:c2:cf:2e:18:74:
97:f1:23:82:17:b2:80:fb:da:00:6c:62:14:f7:e0:e5:eb:99:
da:89:cf:b5:e9:6a:5a:7d:b6:3e:0b:d2:ed:aa:64:a9:51:e8:
f3:83:c8:8d:f5:4e:e3:2a:05:d0:b2:65:c5:9a:3d:0e:09:f4:
38:02:34:5c:a2:d3:e7:e1:70:2d:37:f4:0c:b4:4c:85:56:03:
a8:4a:d0:87:03:17:53:d8:d4:d4:c0:67:f0:a5:f5:41:65:40:
9c:c5:30:4a:a2:41:9a:2f:5c:07:72:6a:d6:3c:ac:44:1a:1f:
6d:cd:38:f2:cf:04:30:89:3e:50:98:7d:f5:23:62:2a:ce:4b:
2c:21:0c:51:ae:97:d8:7e:85:41:b9:6e:2d:fe:64:17:41:67:
97:3e:41:99:dc:5c:71:30:49:0e:9e:e2:03:16:92:f4:84:2c:
19:18:a5:da:33:0a:a6:72:15:44:62:77:d6:56:0a:6c:a7:c6:
fa:12:d1:6e:2a:40:19:af:85:12:94:f3:78:aa:dd:ea:28:a1:
94:8c:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org