Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/RFKjl8vFLkAB66KyTUo34eLKqDQ.roa
File: RFKjl8vFLkAB66KyTUo34eLKqDQ.roa (raw, json)
Hash identifier: Xrwc6Rt3PtLGuByZwgrEKz4UbpE7vJRG2LW5EMv5pIw=
Subject key identifier: 44:52:A3:97:CB:C5:2E:40:01:EB:A2:B2:4D:4A:37:E1:E2:CA:A8:34
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01856E01FA2D68BEC95430492235B3B179C1
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/RFKjl8vFLkAB66KyTUo34eLKqDQ.roa
Signing time: Sun 01 Jan 2023 15:45:01 +0000
ROA not before: Sun 01 Jan 2023 15:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141167
IP address blocks: 178.236.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:fa:2d:68:be:c9:54:30:49:22:35:b3:b1:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 15:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4452a397cbc52e4001eba2b24d4a37e1e2caa834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:15:37:8e:33:4f:cb:d7:c2:1d:06:65:48:
16:ba:10:97:37:a2:87:ac:ca:f3:c7:e4:8c:b7:d8:
76:a3:2c:38:bb:dd:bc:02:67:54:d5:68:3e:47:cb:
a7:4b:68:4a:76:2f:d1:93:b4:fa:64:9a:04:d0:4e:
61:52:13:bb:57:d4:1b:17:9d:5a:ae:77:a3:86:99:
fa:9c:bb:66:4c:64:95:ef:e0:56:39:0a:37:0f:8d:
c9:2e:ae:d9:92:8c:17:01:37:e8:73:4a:09:d4:1e:
36:2c:b3:1e:20:aa:f9:33:28:f5:9b:96:1d:c7:70:
c4:e0:0e:ab:5a:fd:10:34:27:4e:06:95:98:ac:ee:
48:3f:1f:e8:f7:9e:9f:48:b7:6b:20:c2:cb:3d:a4:
f0:3c:63:32:d9:61:92:09:7c:22:e9:44:c2:3b:22:
43:e5:b2:2d:86:05:49:c7:0e:bd:52:b6:93:b4:4b:
78:74:0c:43:16:5c:65:1d:7f:7e:34:a7:93:00:8b:
3f:27:c6:4e:e1:49:6f:36:ac:24:81:e5:07:85:66:
ec:62:8e:7e:dd:a1:57:67:bf:15:8f:27:94:9c:1c:
d9:8b:90:1d:86:f6:ff:24:52:4f:a3:3e:02:1c:72:
72:9a:45:71:31:00:a1:d1:77:6f:7b:61:7c:8d:c3:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:A3:97:CB:C5:2E:40:01:EB:A2:B2:4D:4A:37:E1:E2:CA:A8:34
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/RFKjl8vFLkAB66KyTUo34eLKqDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.233.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8b:37:a4:87:3b:35:fa:d0:16:90:b3:d0:4c:ea:bc:50:b2:
59:e7:da:f6:ec:f1:26:29:97:87:7e:1d:1f:e8:7f:32:58:0e:
5b:03:02:c8:9b:4c:a9:11:e5:92:f2:e4:56:1e:43:01:63:90:
b5:b2:89:b9:15:90:d9:62:fe:f8:89:89:97:7f:9b:d4:bb:9d:
2d:76:a6:7d:95:b0:f1:c2:e6:5f:66:46:d6:ca:f0:73:2b:62:
a6:74:61:b8:84:0d:c0:58:0b:91:d3:4d:2d:f8:83:ec:d8:79:
45:99:80:7c:f1:3d:57:1d:3c:0e:3c:c4:14:97:64:38:c6:73:
ce:dd:00:f5:3e:16:6f:69:b8:c1:a8:c0:6c:59:fe:a7:f9:b8:
c5:63:9c:e0:4b:f6:7c:b5:22:7c:b4:0c:7f:65:39:66:83:ba:
73:36:15:fc:50:56:4f:c3:ea:23:2e:cf:54:87:89:40:24:c7:
0d:79:7b:21:e5:ec:c4:27:65:1e:6f:07:3d:50:a0:7e:6d:e2:
57:79:d2:56:30:b0:e8:b5:bc:d7:66:7b:96:69:02:88:89:c8:
d8:f1:dc:f8:1c:2d:27:d6:eb:61:4e:f5:8c:66:bb:4d:e3:55:
48:44:af:a3:0d:d5:39:81:dd:ad:7a:71:e3:f9:35:50:50:f6:
5c:ef:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:02 2024 by rpki-client on console-ams.rpki-client.org