Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/TD0wvZtVgLmDbFe0bTaQnBZUQCI.roa
File: TD0wvZtVgLmDbFe0bTaQnBZUQCI.roa (raw, json)
Hash identifier: ubOFMb8E2yAge+ka7VVOCBMU+S+zaWhAP1BN+j45kyE=
Subject key identifier: 4C:3D:30:BD:9B:55:80:B9:83:6C:57:B4:6D:36:90:9C:16:54:40:22
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018B6B7B2AE88FCD1049ECDBE2B7FDD1BE69
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/TD0wvZtVgLmDbFe0bTaQnBZUQCI.roa
Signing time: Thu 26 Oct 2023 10:15:15 +0000
ROA not before: Thu 26 Oct 2023 10:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328608
IP address blocks: 178.236.224.0/24 maxlen: 24
178.236.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 06:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:7b:2a:e8:8f:cd:10:49:ec:db:e2:b7:fd:d1:be:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Oct 26 10:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3d30bd9b5580b9836c57b46d36909c16544022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:ac:1a:63:78:de:c8:a6:0a:71:fe:56:cf:
3d:c6:4b:17:09:a7:78:18:ee:92:e9:4e:7f:bb:43:
fc:7b:12:60:31:bf:5b:06:48:69:f9:63:ee:56:a5:
e2:49:fe:78:ac:75:66:04:fd:6e:5a:8c:09:4a:e0:
10:b5:fc:ce:c7:d8:3b:f0:e5:f0:0c:37:be:c9:99:
1c:40:ab:21:40:c3:6e:f2:38:89:2a:10:37:14:48:
3f:4d:4e:89:f6:eb:e6:c6:eb:42:21:a9:3a:31:be:
11:2d:ec:0c:8b:30:31:9e:6c:d7:48:d9:46:1f:7b:
96:a6:be:d2:ad:d2:55:f5:50:97:d6:3d:bc:c4:bb:
dc:08:39:de:27:ee:50:5c:74:f9:be:2c:c3:4b:37:
22:8a:50:ec:25:e8:1b:28:7f:a4:23:89:b2:f4:5a:
ef:12:14:80:bf:7a:45:d1:1b:bc:a4:6a:92:4a:f8:
9b:79:82:eb:4f:a0:4e:43:9a:a5:06:79:bc:b4:58:
6c:36:54:d5:ee:c8:33:01:10:05:71:23:79:b0:f7:
4f:e6:bd:4d:ec:41:f3:55:20:38:cc:53:b2:cd:87:
60:f4:ae:d9:27:30:a8:92:68:2a:7f:61:38:17:27:
86:4c:0f:9d:2b:0d:12:07:75:8f:6f:f1:78:fc:72:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:30:BD:9B:55:80:B9:83:6C:57:B4:6D:36:90:9C:16:54:40:22
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/TD0wvZtVgLmDbFe0bTaQnBZUQCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.224.0/24
178.236.236.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f2:56:79:42:30:27:5d:a1:e7:5a:73:55:79:3a:39:9d:51:
fd:51:cb:18:a6:6a:bc:31:84:6b:d4:5d:12:b8:19:b1:df:3c:
45:45:12:e5:6b:3c:27:75:86:a2:0b:fd:88:f4:4d:0f:32:86:
1f:9d:a6:80:3e:90:bd:af:b9:bf:5e:5b:a5:cb:34:a0:05:45:
f4:e9:32:c7:19:66:93:4b:d6:2e:d6:82:56:7f:3f:33:fb:16:
70:95:1e:52:20:35:0c:ff:ce:a4:31:46:8f:ea:43:b8:46:d9:
22:cf:39:73:f0:7b:cc:a9:08:3d:41:d5:11:07:5c:2d:de:a2:
c0:45:02:02:c7:8f:08:79:b5:7b:7f:11:43:9b:fe:ba:16:aa:
ac:2f:b8:49:9f:d8:9d:89:be:5a:6d:65:21:f7:56:d9:af:0f:
4a:d4:e1:34:81:ea:c2:2e:09:45:60:89:8d:de:79:e5:53:25:
b5:aa:10:2c:e7:e3:7e:6e:80:e8:3f:06:69:8b:26:6d:b1:c0:
33:5b:59:12:67:38:23:94:b8:d4:a3:77:0c:1f:b6:84:55:0a:
67:59:69:8c:38:aa:fc:37:27:f6:46:0f:ef:3b:e5:f7:f5:db:
6f:b9:ac:26:46:b3:b7:b0:ff:04:ba:4c:50:76:b2:88:68:47:
3e:c1:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org