Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/RdKXUKerjA5_NhzwFeNRFqEBSk4.roa
File: RdKXUKerjA5_NhzwFeNRFqEBSk4.roa (raw, json)
Hash identifier: 63HiCe582CgurNYE0ERvtbXFybRj268s/3508Y/Do0s=
Subject key identifier: 45:D2:97:50:A7:AB:8C:0E:7F:36:1C:F0:15:E3:51:16:A1:01:4A:4E
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 01863883D194924EF877A63EBA4789FB581B
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/RdKXUKerjA5_NhzwFeNRFqEBSk4.roa
Signing time: Thu 09 Feb 2023 23:30:08 +0000
ROA not before: Thu 09 Feb 2023 23:30:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56958
IP address blocks: 201.46.112.0/23 maxlen: 24
178.211.133.0/24 maxlen: 24
2a12:d280::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 Jun 2023 10:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:83:d1:94:92:4e:f8:77:a6:3e:ba:47:89:fb:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Feb 9 23:30:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d29750a7ab8c0e7f361cf015e35116a1014a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:aa:5b:27:c6:63:b0:f9:68:09:be:1b:d8:
b1:52:3d:0d:24:1f:ae:fb:33:59:14:fb:09:16:fd:
bf:d7:90:c3:d7:96:71:36:2b:62:93:06:15:bc:b5:
5a:d5:de:99:36:f8:17:2d:72:bf:0c:86:b0:37:8e:
5b:2b:22:63:12:e3:a3:c9:ec:32:97:3c:67:2c:6e:
c7:1d:02:79:6f:49:3a:2c:b1:f9:e4:31:67:b4:a0:
bd:6a:f2:bb:95:2d:49:8c:94:50:8b:68:55:8a:56:
6c:8f:f3:b5:89:53:cc:d4:e2:ae:c0:95:af:c7:60:
1a:60:d5:f2:f8:9c:76:5f:4a:7d:36:be:69:78:99:
06:55:ac:b0:1d:06:d8:26:db:0d:44:3e:17:d0:d3:
1b:2a:fc:b7:14:c4:ea:29:61:b2:b6:ad:03:ad:60:
fa:a5:67:a8:99:fe:d8:35:d7:9f:fd:ff:ae:92:55:
92:00:c7:aa:3f:96:f9:f8:53:a2:61:89:bd:b7:b6:
33:94:d8:f3:77:96:ea:c2:67:44:5e:0b:7d:39:fa:
2c:88:01:13:14:71:be:36:3d:31:71:d6:fa:ea:44:
c3:aa:bb:11:f6:92:a6:c0:7b:0c:6f:4f:6e:45:e8:
7e:48:9e:ad:26:7e:5e:1d:f8:31:65:1e:a0:88:2e:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:97:50:A7:AB:8C:0E:7F:36:1C:F0:15:E3:51:16:A1:01:4A:4E
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/RdKXUKerjA5_NhzwFeNRFqEBSk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.133.0/24
201.46.112.0/23
IPv6:
2a12:d280::/32
Signature Algorithm: sha256WithRSAEncryption
1f:96:4d:5e:85:ec:c7:24:0a:11:f5:05:4f:6d:50:19:f2:b2:
55:0f:5f:95:a6:2e:83:b1:a8:0f:0e:35:e3:9a:5a:47:78:9c:
2f:6c:46:74:a8:69:5e:66:5a:51:cb:db:e6:6a:8c:75:bc:28:
56:51:4e:8e:d6:11:77:80:a0:4f:ad:f8:1f:ad:f7:0e:d5:e3:
37:25:04:44:22:f3:2f:4c:e6:79:de:e3:31:c1:41:43:c7:a4:
af:e8:26:eb:bf:04:28:70:19:65:68:13:f2:fc:48:1a:b0:44:
87:36:a9:08:a8:1e:59:93:a9:88:16:6d:7f:93:2e:f5:93:61:
92:4b:4c:f0:6c:d4:e6:3c:ac:99:87:77:0b:1b:c1:a5:22:01:
fe:a4:f8:31:8f:c8:3c:d7:88:22:47:dd:b5:ec:73:64:cb:74:
8e:51:7c:40:14:db:fc:ef:8a:3f:39:46:ee:06:f4:3d:e3:de:
35:94:5f:3b:7a:97:9e:2d:30:5e:7e:cc:00:22:b3:c4:be:47:
b6:07:7f:5b:89:3d:46:6c:66:1a:54:8c:dd:f0:29:04:ea:8e:
64:7a:67:5c:2b:31:a7:70:99:51:55:64:94:a4:1d:84:91:ac:
dd:00:5f:bb:a4:57:a0:3a:56:97:12:20:1a:4b:c0:2d:8e:1e:
bc:ec:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org