Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/OvMmPIAiCdsqPxjc9BddPQJGLRc.roa
File: OvMmPIAiCdsqPxjc9BddPQJGLRc.roa (raw, json)
Hash identifier: pi+Niiy1DdUrbmn5ZRJKYA57wEcoJBJ8kDgW/A57vMM=
Subject key identifier: 3A:F3:26:3C:80:22:09:DB:2A:3F:18:DC:F4:17:5D:3D:02:46:2D:17
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0190773287C8D100BF0837513D2B0E8A64CE
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/OvMmPIAiCdsqPxjc9BddPQJGLRc.roa
Signing time: Wed 03 Jul 2024 06:05:18 +0000
ROA not before: Wed 03 Jul 2024 06:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 178.236.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 06:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:32:87:c8:d1:00:bf:08:37:51:3d:2b:0e:8a:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jul 3 06:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3af3263c802209db2a3f18dcf4175d3d02462d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:c3:7b:c3:ab:b1:f5:df:f0:53:16:30:f4:
a3:e4:41:67:ab:ef:86:a4:71:f5:58:6e:fe:19:72:
4c:ae:ee:a9:f4:85:52:ce:2e:9c:1a:c4:43:23:0a:
3e:2c:7c:9b:a3:54:20:6b:65:9b:e6:c8:01:a4:74:
ba:57:c0:22:47:92:b5:13:4c:5c:b7:75:e7:ff:b2:
cc:1f:c7:0b:38:f9:67:31:d0:fc:3e:5e:5e:c3:36:
48:56:6e:6e:76:24:e8:6e:76:a4:36:96:99:56:6a:
d0:61:31:20:59:d2:b0:8d:73:2d:d5:df:5e:eb:ab:
31:5c:0e:35:5b:8d:c4:e3:0f:dc:e5:0d:f1:9b:44:
09:56:b1:2c:32:de:2e:e9:22:34:e9:77:48:61:64:
0c:87:27:92:1b:1d:2f:7b:76:21:df:93:5c:11:fa:
43:8c:dc:c5:5a:2d:eb:f4:07:47:28:a6:a6:2a:8b:
2f:19:66:d3:59:df:59:fb:24:7c:45:e0:86:77:7c:
86:e6:8e:3e:f0:68:30:28:d7:99:96:28:f7:68:02:
88:6a:bb:48:b1:31:e2:97:55:b9:53:8b:e6:66:44:
5d:fb:17:15:46:92:1f:16:cc:8b:a0:a9:fd:ac:9c:
8b:0f:44:0b:62:99:c3:6b:c0:b8:74:9d:a2:70:8e:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F3:26:3C:80:22:09:DB:2A:3F:18:DC:F4:17:5D:3D:02:46:2D:17
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/OvMmPIAiCdsqPxjc9BddPQJGLRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.237.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a7:bd:73:df:38:35:3e:b9:04:7a:ee:49:59:10:e0:23:d7:
b0:15:82:0b:75:ff:cc:64:f5:92:24:87:4b:d6:95:d2:5f:a6:
20:8c:9a:fc:dd:a1:25:3f:a2:d4:af:5c:57:ee:8f:c9:19:68:
1d:4f:d4:5d:8e:17:ec:6e:96:d6:46:db:4c:d0:61:67:45:03:
19:16:ba:21:3e:b9:02:81:60:42:71:53:da:5d:ab:6f:2e:b0:
3d:8e:1c:88:3d:5e:f7:33:d2:b6:26:9d:99:2c:11:ae:f6:11:
c4:d8:92:4e:59:2e:53:9f:87:22:4d:af:2f:8c:c4:93:5b:b3:
87:d6:f2:b4:92:4c:d8:47:e6:68:23:8d:91:f8:f9:d4:21:47:
3c:2c:13:ca:ca:f1:bb:74:0a:e3:01:15:94:82:39:b5:5b:4f:
26:48:b2:88:40:5e:19:a0:01:47:2b:b6:47:3b:31:4d:5e:9a:
9c:d4:83:24:62:42:96:ab:50:99:fe:79:a3:41:8b:a3:32:30:
87:c6:b8:1d:95:d9:7a:3e:16:d9:68:52:e3:e1:5e:cf:c3:b7:
62:7e:2f:de:4d:75:24:78:ef:eb:9c:6c:e6:d8:c0:e2:89:77:
96:01:e6:d7:3d:ac:9f:70:9c:d2:6f:90:ce:ee:bf:8c:c2:49:
7e:04:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:28:52 2024 by rpki-client on console-ams.rpki-client.org