Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/cOtbvwoVzhoyX-Y-dROHQU9iQ44.roa
File: cOtbvwoVzhoyX-Y-dROHQU9iQ44.roa (raw, json)
Hash identifier: aXODYYVWzbQGJfr8aAGHU2b3/MkcRLlR8Qnu7q+m29Y=
Subject key identifier: 70:EB:5B:BF:0A:15:CE:1A:32:5F:E6:3E:75:13:87:41:4F:62:43:8E
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 01857227D6249B7AECA2BF00A3C19D8FA818
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/cOtbvwoVzhoyX-Y-dROHQU9iQ44.roa
Signing time: Mon 02 Jan 2023 11:04:51 +0000
ROA not before: Mon 02 Jan 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208545
IP address blocks: 178.175.180.0/23 maxlen: 23
178.175.180.0/24 maxlen: 24
178.175.181.0/24 maxlen: 24
2a12:be40:f::/48 maxlen: 48
2a12:be40:a::/48 maxlen: 48
2a12:be40:5::/48 maxlen: 48
2a12:be40::/48 maxlen: 48
2a12:be40:3::/48 maxlen: 48
2a12:be40:e::/48 maxlen: 48
2a12:be40:9::/48 maxlen: 48
2a12:be40:4::/48 maxlen: 48
2a12:be40:7::/48 maxlen: 48
2a12:be40::/29 maxlen: 29
2a12:be40:2::/48 maxlen: 48
2a12:be40:d::/48 maxlen: 48
2a12:be40:8::/48 maxlen: 48
2a12:be40:b::/48 maxlen: 48
2a12:be40:6::/48 maxlen: 48
2a12:be40:1::/48 maxlen: 48
2a12:be40:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Mar 2023 15:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:d6:24:9b:7a:ec:a2:bf:00:a3:c1:9d:8f:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Jan 2 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70eb5bbf0a15ce1a325fe63e751387414f62438e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:2c:4e:60:5c:9b:5f:ef:44:85:d7:fe:0f:
8b:36:d5:97:d0:32:93:da:a3:f6:45:39:19:76:91:
36:c6:9f:99:bd:d8:cb:cc:e6:16:88:5a:2a:99:54:
54:61:e6:be:82:cb:ce:94:cb:9b:dd:c1:2d:8d:6b:
90:fb:ef:6d:1d:5b:e1:14:96:96:99:66:0f:a4:75:
9e:75:9f:af:b8:a5:fe:77:ec:40:ee:a4:28:94:c7:
58:f4:bd:f3:17:bd:a3:c9:ce:76:eb:67:be:93:e4:
f1:5f:02:99:e4:d3:fe:fa:9a:e2:5c:53:59:76:90:
33:4a:e9:e9:74:55:fc:87:65:19:8e:df:6a:a2:72:
81:88:a0:a4:f7:be:61:0c:55:22:4b:bb:a5:13:9f:
d0:68:3e:ff:78:8e:bd:50:b4:a5:73:b9:01:71:c4:
97:d0:10:8f:b8:bf:4e:e4:0a:3e:19:fd:e8:9c:50:
6b:6b:49:9d:06:e4:a4:45:81:37:c5:18:c5:90:8e:
17:39:fb:8d:62:9f:97:49:3b:44:41:94:b5:c1:f3:
9f:35:71:46:aa:c2:87:29:3d:80:de:a6:df:f6:d8:
52:c8:1e:8b:9e:ab:42:73:0f:3d:9b:27:c8:03:6f:
0e:4a:f5:51:c3:dd:73:ae:f7:d3:ff:ec:01:a4:56:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:5B:BF:0A:15:CE:1A:32:5F:E6:3E:75:13:87:41:4F:62:43:8E
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/cOtbvwoVzhoyX-Y-dROHQU9iQ44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.180.0/23
IPv6:
2a12:be40::/29
Signature Algorithm: sha256WithRSAEncryption
58:d5:c9:d8:47:80:13:9b:55:ca:e2:fa:8f:1d:3f:26:31:a0:
a6:c4:b6:8c:01:31:06:08:9d:a6:b8:f6:d1:d7:40:3d:32:ce:
7c:e2:5a:bb:d8:60:b6:25:c5:44:88:68:50:70:98:87:e1:6e:
72:26:50:d1:26:39:8e:b5:8b:9f:b6:9f:78:7e:0e:fb:15:b6:
9a:9a:f9:61:f7:33:2a:07:fe:52:eb:dd:70:45:2a:bf:4a:4e:
7f:af:fa:53:98:8d:52:83:ec:10:40:a8:6c:f4:ef:71:fc:67:
06:90:aa:12:ae:56:ca:e2:76:00:b0:3c:95:f8:d4:a3:71:0e:
c3:f4:f0:2e:b0:e1:0c:b3:56:7d:3f:2e:c4:2a:9c:a8:a1:b8:
e5:52:30:6d:7e:e5:fb:72:da:cc:19:e5:ec:7d:9f:ec:f4:b4:
ba:6b:43:57:df:2e:9c:71:f2:9a:82:f1:b4:d5:6d:0b:a0:37:
63:a5:ed:ce:40:46:5c:02:a9:3e:da:28:f7:89:bc:fa:29:7d:
58:27:93:ff:ab:15:32:9a:72:d4:a6:2f:be:5d:bf:13:6a:81:
a7:88:1a:16:b0:6d:8d:2d:ae:02:68:a3:28:14:5a:29:7c:e1:
ed:66:5e:ec:9b:bb:d1:75:51:21:a1:84:23:e2:89:ab:36:c3:
03:91:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:25 2024 by rpki-client on console-ams.rpki-client.org