Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/4nr30wJwJ6TytuktMH0IDf86fus.roa
File: 4nr30wJwJ6TytuktMH0IDf86fus.roa (raw, json)
Hash identifier: LVdlyGH1k8l0+2PMHjkG1ablBrAUIbftjt/2KdfqPTk=
Subject key identifier: E2:7A:F7:D3:02:70:27:A4:F2:B6:E9:2D:30:7D:08:0D:FF:3A:7E:EB
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018CC8DF769C921BF0CCF9EBF52284C5ED98
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/4nr30wJwJ6TytuktMH0IDf86fus.roa
Signing time: Tue 02 Jan 2024 06:32:17 +0000
ROA not before: Tue 02 Jan 2024 06:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141167
IP address blocks: 178.236.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 03:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:76:9c:92:1b:f0:cc:f9:eb:f5:22:84:c5:ed:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e27af7d3027027a4f2b6e92d307d080dff3a7eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:cb:7e:d9:52:01:b1:5a:af:43:58:65:53:
6a:15:61:af:be:45:90:fa:28:30:ed:0f:b0:e0:82:
05:46:0c:e2:f9:4f:1a:a3:dd:ad:1d:5c:da:58:c4:
cd:26:2b:01:56:4e:94:92:b2:ba:34:4b:e3:f1:9b:
bc:b4:11:6a:ea:84:45:74:fc:53:8b:da:70:6d:a4:
d7:5b:6c:9c:bc:6f:49:0c:ca:ff:70:67:d6:ba:e2:
cd:c4:1e:3a:9a:03:07:9f:be:54:bb:49:19:6c:57:
9b:a4:35:64:0e:11:c0:43:8f:27:a4:18:85:61:50:
b0:e9:50:1d:ff:97:07:4a:92:30:60:8e:e1:34:32:
79:c9:a7:e3:26:10:01:60:25:48:55:39:9e:22:2d:
fa:db:ec:f9:cb:8f:f9:ee:f6:3f:1c:24:68:91:ee:
01:c1:c7:4d:8f:1f:9c:5e:64:91:97:22:6c:1e:b2:
78:93:af:71:55:6b:84:67:3f:f8:6d:99:e7:c1:7f:
80:6c:33:1e:61:dc:63:bf:1c:61:14:02:93:cc:27:
06:a0:8c:13:df:95:45:d5:52:cf:5a:41:60:25:36:
34:c9:d2:d4:9d:07:68:f6:50:e7:c7:3a:b1:c3:c6:
99:6c:8b:29:15:b4:e4:1e:e5:00:16:2b:c6:a9:ec:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:F7:D3:02:70:27:A4:F2:B6:E9:2D:30:7D:08:0D:FF:3A:7E:EB
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/4nr30wJwJ6TytuktMH0IDf86fus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.233.0/24
Signature Algorithm: sha256WithRSAEncryption
24:85:ac:27:f6:ec:43:29:dd:d3:71:d0:ba:69:eb:f6:d7:50:
13:41:eb:b7:4a:b1:a2:92:35:94:e3:1f:f2:d2:40:9b:a3:8b:
0b:21:ff:f8:11:b5:b0:79:74:fc:96:34:35:a3:0b:65:2e:6a:
66:4b:5b:fd:ef:7e:41:1f:b4:b5:8d:e6:ce:82:e2:3b:41:2b:
ed:54:91:0d:8d:29:e1:31:30:4a:77:ec:13:a3:0b:6b:b6:66:
9b:34:3f:4b:e9:a1:49:68:ca:b0:c1:e3:6e:dd:66:c1:eb:df:
b0:49:ee:a7:e1:14:15:6b:79:6c:43:89:9a:9b:a1:fb:0b:c0:
52:b5:ad:b0:62:7a:88:64:ab:9c:91:b1:50:8d:ac:aa:09:52:
91:ed:03:0f:ca:cf:cb:03:a2:98:f8:00:1a:e8:3d:e6:40:b1:
c0:2e:1f:c9:dc:25:4c:58:d6:31:8b:68:e4:b9:50:56:1d:65:
aa:bb:74:ad:82:ac:9f:e6:7c:1e:d0:cd:64:f3:bd:9d:89:f8:
67:5d:db:14:92:75:ab:da:88:aa:37:2b:28:3c:c0:8b:03:ff:
6b:38:23:4f:93:ff:4c:87:1b:57:94:43:3e:7d:a8:15:a4:d4:
9a:94:3a:5b:21:d4:db:c9:81:ce:be:d6:1d:91:6a:c1:72:40:
64:5d:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org