Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/an8JlvSfIrJgmtnCdu3APZJXi8s.roa
File: an8JlvSfIrJgmtnCdu3APZJXi8s.roa (raw, json)
Hash identifier: 7xz2QAArRawfj3Iq1oLrV7YWjQ2dP6qRgMmKlzlsoUI=
Subject key identifier: 6A:7F:09:96:F4:9F:22:B2:60:9A:D9:C2:76:ED:C0:3D:92:57:8B:CB
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 018571152C9FE57D06C7F2741B73CBB90250
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/an8JlvSfIrJgmtnCdu3APZJXi8s.roa
Signing time: Mon 02 Jan 2023 06:04:51 +0000
ROA not before: Mon 02 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 178.249.140.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:2c:9f:e5:7d:06:c7:f2:74:1b:73:cb:b9:02:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Jan 2 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a7f0996f49f22b2609ad9c276edc03d92578bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:7a:e8:5b:a5:15:41:4f:59:4a:e0:34:6f:
e8:48:06:8d:f3:56:38:60:67:5d:3f:5e:3e:d4:b3:
91:54:f4:5b:70:df:84:91:6f:8f:03:2f:6a:a8:da:
97:4c:3d:2e:19:50:c1:5b:43:81:d1:2b:13:a8:a7:
d8:42:65:c8:6e:37:72:cf:61:f6:33:e0:0a:0e:a5:
a9:20:3c:50:30:75:31:05:9f:5b:c4:6c:9d:ec:90:
d6:be:21:18:48:22:fc:d1:99:d9:89:72:8e:fe:fe:
a2:9d:aa:48:43:58:e6:d5:21:a3:3f:64:16:3e:06:
e4:7e:df:7d:98:f4:b5:3b:52:d5:92:57:b5:46:2d:
5e:4c:d0:ae:95:a1:95:37:28:e6:c7:27:d9:b4:af:
78:5d:91:2a:b1:79:78:a1:e8:58:26:13:e6:10:93:
30:ba:cc:ac:6b:7d:20:97:28:fc:e2:8b:74:2c:fb:
07:88:68:e0:ad:c6:d5:89:09:df:13:a2:c0:d8:f3:
c0:2f:59:6c:fd:aa:af:0f:4a:bf:d9:66:b3:23:28:
93:8a:92:d1:41:ea:b3:89:fd:77:ec:1d:92:e7:2a:
af:29:60:0d:10:8e:b0:04:78:82:db:75:79:e2:4f:
69:78:ef:81:7b:b0:cd:ba:b8:f9:d1:5f:3b:20:45:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:09:96:F4:9F:22:B2:60:9A:D9:C2:76:ED:C0:3D:92:57:8B:CB
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/an8JlvSfIrJgmtnCdu3APZJXi8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.140.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:c1:01:03:0f:a6:3d:24:cd:b2:d9:d4:a7:43:cd:8e:84:7c:
f5:60:20:1f:2e:68:ab:b4:5c:91:25:66:00:b9:fd:b0:84:5f:
5d:4b:71:08:8e:ba:a7:65:34:dd:5a:b4:8f:50:04:26:a7:95:
76:43:ff:83:fa:06:2e:64:e7:51:83:d1:b8:3b:32:12:e8:3e:
9c:8b:bb:e5:e9:4d:23:3e:50:0b:ef:52:07:00:2f:09:bf:f6:
d9:19:36:61:58:4b:a0:7d:27:d8:a7:89:86:71:1a:1b:f6:07:
bb:30:dc:07:5e:c0:b8:63:f9:41:66:42:92:b3:0b:16:56:61:
c9:03:28:e9:98:4e:f3:ff:3e:12:df:ce:ac:02:a2:fb:76:27:
95:ae:c0:88:fe:93:ec:c0:e9:29:b4:1a:e5:b9:e2:ff:7e:99:
4b:b4:cb:09:f1:31:d4:b1:fa:2d:3f:8c:5d:b4:2e:d5:ec:71:
98:e7:0c:40:77:a2:c3:9c:34:5e:17:c4:d5:1e:76:10:21:5b:
de:74:97:e1:37:6d:e1:a6:e5:38:cd:2d:71:e8:7a:a1:18:07:
02:a2:c4:21:33:82:aa:12:97:4f:e8:8a:84:a5:3e:cd:0c:54:
c4:54:6e:cb:d3:82:79:45:0f:32:b1:85:6f:b0:ee:3c:b6:e0:
59:bc:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:04 2024 by rpki-client on console-fra.rpki-client.org