Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/AMPKYUA-YFT0-a8lAjmSt1aNfOc.roa
File: AMPKYUA-YFT0-a8lAjmSt1aNfOc.roa (raw, json)
Hash identifier: tOS0CNZZXdymZmadmo2S4BfL/RCrXkbIhKbZxR72z44=
Subject key identifier: 00:C3:CA:61:40:3E:60:54:F4:F9:AF:25:02:39:92:B7:56:8D:7C:E7
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018C66F2536EABAF8C85681B287FDF3FA600
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/AMPKYUA-YFT0-a8lAjmSt1aNfOc.roa
Signing time: Thu 14 Dec 2023 06:10:06 +0000
ROA not before: Thu 14 Dec 2023 06:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212042
IP address blocks: 178.236.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:f2:53:6e:ab:af:8c:85:68:1b:28:7f:df:3f:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Dec 14 06:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00c3ca61403e6054f4f9af25023992b7568d7ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:c9:9a:0b:aa:8b:66:e0:bf:ed:81:7c:14:
e5:fb:bb:0f:bc:ce:7a:0b:c4:55:42:d8:0c:7a:11:
83:38:d1:2c:e3:b6:df:9b:fa:54:80:ac:0d:70:e3:
91:2c:09:6d:e3:6b:fb:73:6f:0d:bc:a9:3c:fe:e8:
5a:ca:ef:5a:81:ab:a1:1d:5c:7a:9a:1f:41:a0:bb:
6a:1b:91:55:16:00:68:f2:b8:1f:75:2e:90:fa:fe:
9b:fc:25:7f:3e:4c:62:b3:f8:3a:cf:2c:0e:af:fb:
20:0f:66:3f:33:b7:6e:1c:26:40:64:bb:57:2d:73:
8e:f5:c0:2f:fa:8b:d5:3f:aa:e5:43:ab:5f:80:ee:
7a:63:55:bb:3a:b5:cc:44:b4:99:1c:f1:29:f8:c5:
11:aa:d3:14:80:40:95:5e:ec:99:64:ac:3d:00:32:
09:3d:24:df:61:2b:88:bf:d7:3c:fe:55:3b:0b:a2:
22:eb:81:02:94:a2:26:44:bd:f3:54:c3:c7:b3:ea:
ea:1f:8c:66:0c:84:5e:59:6b:2b:fa:12:82:0e:8a:
1f:b6:f5:0f:f4:c8:72:27:40:76:58:67:ce:e6:f2:
34:ee:bb:cc:65:26:a3:a0:ca:44:d3:34:21:7e:a5:
be:3f:4c:a2:54:ef:4c:b1:fc:e5:eb:99:82:d4:c1:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:CA:61:40:3E:60:54:F4:F9:AF:25:02:39:92:B7:56:8D:7C:E7
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/AMPKYUA-YFT0-a8lAjmSt1aNfOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:eb:95:19:8b:ae:1e:78:a0:84:cd:75:aa:32:6b:90:94:1b:
b9:f2:13:57:42:d8:02:fc:81:0f:0c:21:0a:8c:e0:e4:36:06:
37:0d:17:37:52:65:5a:28:25:04:d0:b3:40:7e:64:d6:bf:f6:
93:83:8d:4f:f4:4e:7e:8f:a2:2f:81:f4:dc:df:0b:7b:c3:8f:
9b:de:29:50:ef:4b:9a:48:44:c0:fd:7f:51:57:1e:1f:fa:5c:
c4:af:bd:99:29:29:90:d6:47:4d:f9:c6:6d:cb:b2:68:bd:e8:
5c:e6:66:50:8b:a7:23:83:c9:5f:d8:78:d5:a3:d5:59:a7:5f:
70:2f:7d:f3:90:97:45:6f:00:08:21:4b:ac:4d:53:c5:82:92:
78:7b:b0:af:26:60:d7:6b:41:8c:ef:7f:89:a1:bd:4b:fb:8d:
3e:18:29:29:4a:37:c6:5d:01:80:1f:20:c9:a1:d9:a1:98:00:
3b:ff:ee:33:c8:2d:d7:57:e9:6f:ea:54:ac:ad:8c:e3:86:60:
0b:1f:65:f5:68:37:4c:cc:c4:60:e9:8a:6f:d2:99:80:a6:33:
11:99:f0:a2:84:7f:ca:1a:53:de:92:31:38:4f:b6:4b:90:16:
95:6a:da:7f:60:48:6f:f4:a6:5a:75:9b:ef:3e:1a:19:a5:55:
43:11:be:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxm8lNuq6+MhWgbKH/fP6YAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjMxMjE0MDYxMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGMzY2E2MTQwM2U2MDU0ZjRmOWFmMjUwMjM5OTJiNzU2OGQ3Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D/Jmguqi2bgv+2BfBTl+7sPvM56
C8RVQtgMehGDONEs47bfm/pUgKwNcOORLAlt42v7c28NvKk8/uhayu9agauhHVx6
mh9BoLtqG5FVFgBo8rgfdS6Q+v6b/CV/Pkxis/g6zywOr/sgD2Y/M7duHCZAZLtX
LXOO9cAv+ovVP6rlQ6tfgO56Y1W7OrXMRLSZHPEp+MURqtMUgECVXuyZZKw9ADIJ
PSTfYSuIv9c8/lU7C6Ii64EClKImRL3zVMPHs+rqH4xmDIReWWsr+hKCDooftvUP
9MhyJ0B2WGfO5vI07rvMZSajoMpE0zQhfqW+P0yiVO9Msfzl65mC1MGn3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADDymFAPmBU9PmvJQI5krdWjXznMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvQU1QS1lVQS1ZRlQwLWE4bEFqbVN0MWFOZk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzsMA0G
CSqGSIb3DQEBCwUAA4IBAQBO65UZi64eeKCEzXWqMmuQlBu58hNXQtgC/IEPDCEK
jODkNgY3DRc3UmVaKCUE0LNAfmTWv/aTg41P9E5+j6IvgfTc3wt7w4+b3ilQ70ua
SETA/X9RVx4f+lzEr72ZKSmQ1kdN+cZty7Jovehc5mZQi6cjg8lf2HjVo9VZp19w
L33zkJdFbwAIIUusTVPFgpJ4e7CvJmDXa0GM73+Job1L+40+GCkpSjfGXQGAHyDJ
odmhmAA7/+4zyC3XV+lv6lSsrYzjhmALH2X1aDdMzMRg6Ypv0pmApjMRmfCihH/K
GlPekjE4T7ZLkBaVatp/YEhv9KZadZvvPhoZpVVDEb4W
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org