Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa
File: 7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa (raw, json)
Hash identifier: mwZ0O7pVFSyLqmt2Kkpka3lKH8C0JyRM2GCBpxYkgUA=
Subject key identifier: ED:0E:8D:AE:84:47:91:51:01:6F:1A:D0:67:B5:F8:7D:17:9E:2F:C2
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018866929D6BFC9C5CE3F25D1CE21C184D2A
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa
Signing time: Mon 29 May 2023 08:14:24 +0000
ROA not before: Mon 29 May 2023 08:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 178.236.226.0/24 maxlen: 24
178.236.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 16:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:92:9d:6b:fc:9c:5c:e3:f2:5d:1c:e2:1c:18:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: May 29 08:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0e8dae84479151016f1ad067b5f87d179e2fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:9d:cc:9f:4b:c2:02:b0:99:60:b6:5a:05:
6d:a8:3c:d6:62:37:e8:36:36:89:31:59:b7:95:23:
c6:b1:57:6d:f5:67:6b:a4:1f:ef:86:05:33:bb:ea:
68:53:b0:36:9d:ea:55:e8:50:82:99:57:9d:7f:7c:
3c:40:ef:a3:fc:8e:43:9a:48:38:41:d9:3b:b8:40:
fc:f5:70:94:83:d8:cc:e2:22:08:bb:c2:28:3f:6e:
d0:75:ad:06:44:85:82:ab:38:f1:95:27:67:c4:b2:
2e:f4:19:29:0f:35:d1:0e:be:aa:a8:f1:75:44:e1:
98:d0:fd:17:1e:d9:93:08:46:a5:54:c1:9f:59:d4:
db:73:f8:1d:a7:3a:e2:0e:27:ff:29:24:a7:e2:0b:
2f:9e:9f:56:70:70:e3:04:52:b8:9e:20:4c:83:97:
04:46:a6:f7:24:bc:97:0e:a0:45:eb:2d:9a:6b:1e:
da:76:cf:4a:e0:68:c0:ac:7f:63:0a:07:cf:d7:bf:
6e:3f:1f:19:a4:e8:ba:69:18:ef:7b:06:c2:cc:87:
0d:b4:dd:84:80:35:6f:62:e1:dc:99:ec:a0:03:53:
dd:56:79:b9:c5:86:8c:4c:0e:f2:d3:de:f6:c1:cd:
ff:05:9a:87:62:3a:48:18:7c:30:d6:0c:30:11:f6:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:8D:AE:84:47:91:51:01:6F:1A:D0:67:B5:F8:7D:17:9E:2F:C2
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/24
178.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
16:79:34:e5:a7:b3:6c:c4:7a:18:11:fa:ee:26:21:3e:5a:86:
13:24:fe:5f:4e:a2:c2:6a:5d:bb:d3:cf:6a:c0:52:8e:a2:2f:
c0:86:4f:80:ab:36:cb:e6:98:18:04:3f:15:c2:ea:3f:91:1d:
75:e5:5a:ca:e0:6a:b5:5b:8b:0a:8c:75:04:85:12:4c:d6:67:
98:af:0e:21:31:2b:33:82:32:53:9f:89:7f:f2:dc:96:7e:a7:
38:c1:c7:c5:12:e0:53:e2:08:6a:06:37:60:cf:69:a0:f7:a4:
2c:68:49:c0:c0:c0:23:63:dd:53:ca:42:80:7f:bd:3d:05:e9:
ab:67:33:3b:d6:3a:65:54:45:46:53:23:1b:56:07:ba:2e:47:
2a:f9:50:4e:67:f0:d1:b9:49:10:2b:01:8c:85:48:c4:6b:d3:
0e:18:4c:0e:c8:1b:4d:7b:06:d5:13:a8:d2:47:e0:d9:18:0f:
d7:de:2c:29:cf:57:71:07:02:72:c3:06:c9:25:0c:77:ad:01:
e6:fd:27:68:39:aa:b0:52:ad:96:b6:65:4f:93:7b:a2:81:ce:
b2:92:e5:7f:73:ab:09:3a:d5:31:7f:6d:6e:4a:38:34:1e:24:
55:54:dc:4a:db:00:64:89:29:d3:32:59:47:4c:0a:e0:9b:88:
59:dc:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org