Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/cgx9P9MaRN4mInxFq99di0Rz_08.roa
File: cgx9P9MaRN4mInxFq99di0Rz_08.roa (raw, json)
Hash identifier: JCZY0xYt2Hu9LU0i8cLlfx6e5X/KN3CYSuVZ3inAFcI=
Subject key identifier: 72:0C:7D:3F:D3:1A:44:DE:26:22:7C:45:AB:DF:5D:8B:44:73:FF:4F
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 01856F5DABE0EE22D62F53D8C2472B45BF15
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/cgx9P9MaRN4mInxFq99di0Rz_08.roa
Signing time: Sun 01 Jan 2023 22:04:47 +0000
ROA not before: Sun 01 Jan 2023 22:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52155
IP address blocks: 178.21.44.0/24 maxlen: 24
178.21.45.0/24 maxlen: 24
178.21.46.0/24 maxlen: 24
178.21.47.0/24 maxlen: 24
2a01:9800:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ab:e0:ee:22:d6:2f:53:d8:c2:47:2b:45:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jan 1 22:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=720c7d3fd31a44de26227c45abdf5d8b4473ff4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:36:cb:77:96:b7:a0:8b:66:72:b7:73:b0:
cf:e1:65:ae:84:80:51:ea:74:42:31:90:c8:7d:12:
c6:f3:8b:b1:75:d8:cb:1d:e8:89:e0:ae:e8:ed:a9:
20:d3:2d:b9:b1:33:85:e8:be:ad:b0:7b:cd:8d:25:
4d:3a:50:8d:ed:74:90:1d:71:5e:ea:1e:8f:d8:0f:
49:7a:94:37:8b:00:ac:ff:d8:d3:69:5e:83:14:5d:
53:7e:14:2c:2d:a8:0d:ce:83:5d:5a:6b:23:b3:bd:
25:35:32:c4:af:04:7b:42:26:d0:cf:bd:ff:5a:50:
50:85:64:c7:ca:9a:53:b8:12:a7:88:db:ce:09:22:
19:2b:ea:a0:3d:f7:5e:ee:e6:4d:11:f3:d7:5e:31:
68:de:99:46:31:cd:60:84:2c:a7:f4:5b:9a:68:aa:
ae:d3:a4:27:58:4d:ae:16:72:dc:40:f1:ee:b9:4a:
e9:c1:f5:3f:da:64:09:30:94:92:8e:08:9f:cd:2f:
31:bb:54:c7:58:45:12:08:3b:06:01:dc:d2:44:cb:
50:c1:3e:bc:93:70:15:09:6b:68:fd:84:80:ff:cb:
bb:b5:6b:8a:b6:50:31:6d:a3:c5:86:38:e5:1a:21:
03:0e:b1:51:fb:18:4f:e4:ed:9b:26:9c:7c:23:eb:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:7D:3F:D3:1A:44:DE:26:22:7C:45:AB:DF:5D:8B:44:73:FF:4F
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/cgx9P9MaRN4mInxFq99di0Rz_08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.44.0/22
IPv6:
2a01:9800:8000::/36
Signature Algorithm: sha256WithRSAEncryption
99:5a:7e:44:38:84:17:64:18:2e:83:55:ee:8b:76:1e:56:47:
6f:bd:cb:55:bb:89:25:d4:7e:f1:3f:94:33:9c:a5:54:a6:db:
69:49:d5:b1:ef:c6:5c:4f:d0:13:d5:3c:ef:0b:97:bd:7c:84:
c3:f5:06:f2:2b:56:d1:5f:e4:14:39:62:83:5d:f5:0f:24:47:
13:a3:07:e7:7f:e0:28:c1:0f:2f:65:4a:e5:44:c0:da:de:e7:
33:b6:0f:4e:3e:5e:1e:d6:16:dc:e3:2e:06:91:9b:64:d3:9e:
b4:1c:dd:16:c2:a7:6d:d2:da:21:5f:7e:e3:41:51:b1:bd:4f:
e1:c3:c4:83:f9:e8:70:5a:59:01:9e:7c:1c:4e:a5:c4:24:e2:
0c:c5:b3:04:aa:35:48:42:30:8e:bf:5e:44:b3:88:2e:f2:78:
7a:0a:cb:18:ee:da:7e:87:27:a4:e2:2b:7f:98:e1:48:99:aa:
a9:3d:8d:78:7d:32:8d:62:9d:ff:f3:00:c3:74:ab:f0:15:9e:
88:ce:ae:43:93:d6:d1:dc:7b:c8:2e:11:c2:4b:9a:a3:44:ca:
fb:14:17:7e:df:86:83:05:ec:ac:a3:ba:ec:c5:27:04:38:00:
74:4c:91:ad:4d:32:01:14:fc:2a:e0:a0:45:5e:3d:8a:7f:30:
fa:6c:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:34 2024 by rpki-client on console-ams.rpki-client.org