Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/nIxEtjWNe1LXkiGc1xpxwT0vviA.roa
File: nIxEtjWNe1LXkiGc1xpxwT0vviA.roa (raw, json)
Hash identifier: OGSUmTFXxCsnnze4QkTX7t801/jpilG6X7pSLS2Ft0A=
Subject key identifier: 9C:8C:44:B6:35:8D:7B:52:D7:92:21:9C:D7:1A:71:C1:3D:2F:BE:20
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0186EEFFCEFF4D006D88DEE2089447DF0B92
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/nIxEtjWNe1LXkiGc1xpxwT0vviA.roa
Signing time: Fri 17 Mar 2023 09:56:27 +0000
ROA not before: Fri 17 Mar 2023 09:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 178.236.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:ff:ce:ff:4d:00:6d:88:de:e2:08:94:47:df:0b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 17 09:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c8c44b6358d7b52d792219cd71a71c13d2fbe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:c6:ed:41:06:f0:fc:49:98:0f:e2:dc:a8:
74:fe:ff:2d:63:9e:ee:8d:a8:36:59:1a:54:17:57:
1c:57:30:1f:1e:b5:96:64:38:ee:bb:c5:8c:a6:45:
68:31:06:65:4c:6f:8f:38:ec:14:b9:c8:73:9b:27:
f7:7a:f6:7e:f7:a0:ea:14:9a:7b:f1:05:aa:9f:1d:
de:90:7c:c4:58:cd:c2:92:6c:57:19:73:c3:ee:a4:
8d:c3:aa:7f:f6:70:9e:31:cb:61:12:76:52:7f:1e:
9f:3f:52:6d:8a:32:18:2f:80:04:11:b2:3c:bb:3e:
3d:96:a9:dd:89:66:c8:c4:92:3a:60:d1:0c:e1:d4:
1a:ea:58:6b:e7:a8:a6:82:2f:2a:77:d3:1d:80:52:
0d:07:96:63:9c:ba:25:50:a9:0f:cd:60:75:d0:a6:
68:79:90:65:76:cb:fb:ff:08:0d:24:d8:f1:41:e7:
ca:5c:2a:58:09:81:6c:aa:d6:05:56:53:1d:21:5f:
3a:8e:22:1d:63:99:a2:09:f5:23:ce:10:05:fa:eb:
83:98:86:d5:7e:9d:d8:ee:56:8b:b9:99:78:26:2d:
37:ac:08:a8:6a:bf:8b:0c:f9:61:2a:83:7d:a6:e6:
19:a2:e5:e4:0e:35:34:05:a7:5f:38:1f:49:7f:38:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:44:B6:35:8D:7B:52:D7:92:21:9C:D7:1A:71:C1:3D:2F:BE:20
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/nIxEtjWNe1LXkiGc1xpxwT0vviA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.227.0/24
Signature Algorithm: sha256WithRSAEncryption
83:da:66:63:00:d1:f1:06:b4:62:73:d7:02:59:f8:f4:94:3c:
a8:cf:cc:3c:62:28:65:09:b7:4e:74:4d:5c:64:1d:c0:56:6a:
42:a2:f0:3d:e7:e8:92:ca:1c:97:e5:4f:a1:11:b7:0f:d5:0a:
0f:8b:9d:88:bc:f1:b1:08:ca:4f:9b:cd:7d:0d:b8:e8:29:7a:
c7:b7:25:24:4b:cb:ee:33:8d:23:6d:7b:a7:b0:39:ab:af:7e:
dc:77:e2:4a:f6:e6:b5:b9:5e:46:42:68:00:94:53:c1:b3:b5:
4a:59:d5:24:c7:1e:de:c5:a4:22:c7:33:8d:5f:56:cb:23:79:
00:b5:92:62:dc:74:fa:19:ce:8e:bd:5c:ec:30:21:1b:84:6f:
30:dc:4c:f7:da:f0:30:50:59:99:8e:9c:b7:2b:4e:78:42:e3:
67:8f:e1:a9:1f:f5:07:70:1e:07:e1:62:d6:e5:4b:dd:d1:db:
ba:59:ea:f6:7e:f5:15:31:35:d5:cc:f5:e5:a7:da:d6:48:7d:
9c:1c:5c:6f:2a:c7:a2:e7:82:72:04:50:fe:1a:d3:da:8f:19:
86:8e:e4:16:2d:d0:d9:53:26:69:01:99:50:1b:90:33:26:bb:
58:de:2b:57:63:a8:71:10:5d:f8:5e:8b:ba:48:6d:22:f3:25:
4a:30:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org