Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5zAVHPlzXVqaawb5dJr7sWBWooI.roa
File: 5zAVHPlzXVqaawb5dJr7sWBWooI.roa (raw, json)
Hash identifier: h4HINgUgfPekJhTQh7Z/uImJZNdUHKXOm1+/40jVp5c=
Subject key identifier: E7:30:15:1C:F9:73:5D:5A:9A:6B:06:F9:74:9A:FB:B1:60:56:A2:82
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018DCC9847A823EE9E5BDA21838F58A9726A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5zAVHPlzXVqaawb5dJr7sWBWooI.roa
Signing time: Wed 21 Feb 2024 16:55:48 +0000
ROA not before: Wed 21 Feb 2024 16:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 178.130.132.0/24 maxlen: 24
178.130.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 09:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:98:47:a8:23:ee:9e:5b:da:21:83:8f:58:a9:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 21 16:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e730151cf9735d5a9a6b06f9749afbb16056a282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:4f:22:06:c0:49:20:27:af:25:d7:7d:fd:
69:33:43:00:22:93:7c:9f:70:3a:0c:96:3c:88:87:
e9:25:35:7e:d5:ed:42:c9:82:27:df:4e:6a:24:b9:
d9:25:f0:68:9e:c9:44:1a:d3:fb:7e:9d:a9:1a:09:
71:c1:cf:e0:aa:09:51:71:d5:c0:24:32:43:a8:f4:
00:5f:86:e0:81:83:ad:07:51:4b:d2:41:a0:d3:c9:
7c:2d:a7:d6:d0:a6:8a:a1:b2:83:88:ca:a9:65:e2:
d3:e5:e3:cc:08:65:45:34:c8:53:4e:7b:d3:4f:7b:
9f:ea:c5:42:4b:44:ff:87:81:98:f2:b8:91:4d:2a:
e0:e4:9b:e6:a6:94:3d:d0:e8:e7:2f:90:c8:8d:c5:
df:44:b0:52:4c:0e:69:08:c0:bf:c5:48:71:fb:c9:
5a:15:99:be:c2:7d:77:87:70:6a:72:45:20:23:ea:
b1:02:7a:20:38:14:24:ba:6f:59:12:20:0d:c6:3d:
9d:ca:81:23:61:dc:95:09:b1:c6:1c:26:fb:d9:bc:
c4:cd:6a:65:b8:15:67:06:fc:8c:13:f8:e7:07:1e:
0a:89:55:f9:47:50:c5:6e:4a:43:ce:60:aa:4c:75:
cd:43:da:c1:6b:2e:77:e7:53:6c:79:f7:4c:13:45:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:15:1C:F9:73:5D:5A:9A:6B:06:F9:74:9A:FB:B1:60:56:A2:82
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5zAVHPlzXVqaawb5dJr7sWBWooI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.130.132.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:e7:05:1f:94:ab:45:ba:88:6d:54:54:5a:2f:bd:7b:e9:1e:
3a:31:57:f8:25:98:30:a3:16:aa:1a:a3:8e:d0:23:33:12:53:
d6:36:8a:65:f2:32:3b:8b:3a:56:68:8d:e1:76:ef:ac:82:2b:
3f:d4:4d:ef:77:78:1c:cb:62:6c:2c:5d:71:be:b9:9c:46:26:
7f:26:50:b6:09:3f:3c:47:5c:35:a0:65:c8:d2:da:6e:6d:0f:
f3:98:c1:9c:43:34:28:5c:71:41:fa:64:3e:08:f8:28:2b:3b:
50:94:8f:81:8d:8d:20:c3:b9:cf:44:94:ea:98:93:92:90:42:
91:9a:ba:f2:d3:6c:30:57:21:f0:21:b3:b2:fc:39:44:64:89:
7a:b7:ec:28:39:c6:31:f4:9d:90:72:10:37:a3:ad:64:6e:a7:
8b:88:21:81:32:f5:e8:62:cc:6d:dc:1d:ca:95:02:ef:28:7f:
45:60:7b:47:2a:2a:a1:17:fe:3a:12:0b:c2:94:b6:ca:c6:8c:
c0:d3:d4:8e:f4:71:74:a9:24:86:a5:f5:e0:59:ec:d7:9f:de:
47:5e:a7:2f:89:75:fb:44:9c:5a:d3:df:fc:b4:28:c3:d9:4d:
e6:20:ba:02:46:a2:18:74:93:f8:af:77:8e:c1:8a:fa:25:96:
8f:4c:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org