Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/12fUW1sObKYcHgeJt_JW2rY_0NY.roa
File: 12fUW1sObKYcHgeJt_JW2rY_0NY.roa (raw, json)
Hash identifier: BQHTMcC87vfUSG7jMf3b5cMNaZ24mK5D4+E8FTfMPbk=
Subject key identifier: D7:67:D4:5B:5B:0E:6C:A6:1C:1E:07:89:B7:F2:56:DA:B6:3F:D0:D6
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01856E01F63BCEB6ED1864190D38D6B8805E
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/12fUW1sObKYcHgeJt_JW2rY_0NY.roa
Signing time: Sun 01 Jan 2023 15:45:00 +0000
ROA not before: Sun 01 Jan 2023 15:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3491
IP address blocks: 178.236.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f6:3b:ce:b6:ed:18:64:19:0d:38:d6:b8:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 15:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d767d45b5b0e6ca61c1e0789b7f256dab63fd0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:d6:01:72:4b:48:61:4f:ea:b5:b2:2d:32:
6e:4f:0c:f2:38:38:d2:4e:65:2b:02:e7:06:32:f5:
e0:d2:b7:32:95:9e:62:78:a0:b0:da:c8:25:1d:4e:
04:49:22:4d:c2:cb:c3:d9:37:df:a6:9b:9f:c7:ab:
04:60:13:40:f4:33:03:82:37:5a:a6:c0:35:18:4a:
11:62:98:9e:a9:30:09:db:c6:cb:fb:13:23:4a:05:
68:24:e4:18:a1:e6:9b:ba:ec:c4:84:78:ae:6d:c3:
18:dd:c0:c0:e9:3c:2b:e8:8a:9f:5f:46:51:9b:ca:
15:e0:88:0e:5c:f2:83:ee:cb:2b:34:fa:12:d1:fb:
f8:37:51:57:ad:cd:e9:f0:8e:28:ff:bc:cf:c3:d3:
19:1e:24:62:d6:5e:71:d7:80:10:65:6b:d5:27:1e:
70:a0:1a:81:10:a4:18:96:e0:00:a9:bb:a6:1f:1a:
59:35:8f:c0:cf:29:bf:a8:f1:af:62:25:bb:65:d6:
77:5d:48:a1:11:1f:aa:a7:c7:9b:84:76:a0:b0:85:
01:ae:bc:24:0d:40:d9:f3:e4:a1:8c:67:61:a1:06:
a7:2b:8e:89:10:8d:f1:d5:07:2c:7c:17:19:44:57:
60:20:ff:15:e3:f9:ac:b2:35:85:f0:92:20:41:b5:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:D4:5B:5B:0E:6C:A6:1C:1E:07:89:B7:F2:56:DA:B6:3F:D0:D6
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/12fUW1sObKYcHgeJt_JW2rY_0NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.224.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2c:dc:91:44:21:8e:5a:f7:a7:65:57:20:bb:ae:46:5d:82:
2f:51:88:e0:ce:23:cd:f7:21:03:49:ba:ac:a7:99:93:63:6f:
c0:1e:ab:2e:07:56:5f:cf:63:26:a6:38:6f:c6:ea:2a:dd:bd:
b1:b8:ef:b7:03:e0:68:b1:b5:5c:2e:e6:76:42:f3:69:f9:54:
bf:e0:61:a2:af:05:38:cd:28:c4:da:df:2f:a3:5a:c7:77:50:
89:f3:7e:bc:cb:7a:e0:95:09:da:ee:31:72:28:35:99:b8:02:
4e:f2:2c:ea:77:2b:35:b7:da:47:95:cf:b2:90:11:41:68:4f:
2a:24:c4:65:a3:b4:e8:bf:05:77:f8:f1:ee:d1:c2:2c:a9:0d:
35:0f:19:94:8b:89:29:4d:be:89:a4:ec:76:fe:49:4f:7c:dd:
a2:da:6f:60:b3:1e:73:c5:b5:67:7b:7f:5a:66:e5:22:15:c7:
f2:a3:ab:2c:eb:04:c1:b5:70:5c:08:9f:45:a7:a0:ae:33:56:
e0:4c:5e:71:e3:60:e0:57:48:87:71:30:98:aa:bc:b6:23:6f:
9c:1d:2d:bd:f6:1a:c0:87:a8:4f:fe:b6:c5:04:ce:3c:b7:00:
e5:d2:f7:78:7b:27:33:81:2b:60:70:86:be:68:3d:9b:4f:50:
d5:55:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 11:11:04 2023 by rpki-client on console-ams.rpki-client.org