Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/rOdqR7i3y3nUCViSpmuFhGfv4aY.roa
File: rOdqR7i3y3nUCViSpmuFhGfv4aY.roa (raw, json)
Hash identifier: kmpPotgzylEKzwzvqPm41FhKcm4s+y9sX9oiO8Xc0jE=
Subject key identifier: AC:E7:6A:47:B8:B7:CB:79:D4:09:58:92:A6:6B:85:84:67:EF:E1:A6
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 018995F2D5E537E8DE075BC6EC5B9BC3D0BC
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/rOdqR7i3y3nUCViSpmuFhGfv4aY.roa
Signing time: Thu 27 Jul 2023 06:04:26 +0000
ROA not before: Thu 27 Jul 2023 06:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23674
IP address blocks: 178.236.228.0/24 maxlen: 24
185.2.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:f2:d5:e5:37:e8:de:07:5b:c6:ec:5b:9b:c3:d0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jul 27 06:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ace76a47b8b7cb79d4095892a66b858467efe1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:81:18:55:0f:32:69:ff:7f:fd:4e:39:6b:
a3:f9:5b:cf:4b:74:df:83:b7:46:23:b1:9b:b2:29:
e0:01:dc:f0:56:b6:b7:ac:55:f8:f8:6f:f0:36:9f:
4f:75:02:db:5d:84:7a:99:db:e1:d5:e5:b7:0e:5c:
a7:d3:a4:20:eb:c7:58:42:97:00:9f:06:55:cb:17:
4f:51:68:66:8a:c1:ea:ec:ea:6a:8d:45:ab:d3:da:
aa:0e:5c:76:4c:a0:36:6a:46:b9:32:46:04:c7:73:
19:a4:c9:76:76:a7:51:b7:ba:22:c0:2b:b5:47:a7:
36:18:24:42:74:c7:82:81:9d:38:95:89:72:55:fd:
62:ff:83:45:2a:95:58:e2:f0:f9:33:53:25:ce:7e:
83:c1:72:09:dc:50:89:19:95:42:de:0e:51:01:94:
5f:dd:49:a8:6d:cc:c1:e1:7f:e4:50:42:01:ca:22:
5e:88:7b:57:0d:f1:c6:86:71:a8:65:95:27:74:63:
e7:e7:9e:f2:63:87:24:ef:56:87:56:4f:12:b5:bc:
d2:51:c2:f6:c1:bd:19:d5:2e:a6:e1:70:44:3c:bd:
a3:a0:fe:3d:20:9a:5d:e2:69:19:94:1a:5e:44:d4:
ce:27:98:93:f5:1f:fe:38:75:9e:de:9e:8c:63:83:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:6A:47:B8:B7:CB:79:D4:09:58:92:A6:6B:85:84:67:EF:E1:A6
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/rOdqR7i3y3nUCViSpmuFhGfv4aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.228.0/24
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:aa:25:08:2b:f0:c1:3f:42:6c:c2:26:94:2c:cb:61:95:63:
cc:db:f7:00:69:41:1c:90:d9:7d:39:b0:02:32:4f:47:f6:76:
a2:23:b7:30:13:df:0d:e2:d7:81:19:ac:1d:14:3a:dd:89:14:
00:39:c5:c5:e3:72:3b:95:bd:ae:1f:01:70:27:ac:a9:93:1b:
9e:ba:af:a7:2e:19:d2:59:10:e6:21:32:fa:7b:c3:23:f5:54:
9a:07:57:61:06:81:d0:28:cd:ad:5f:79:7c:87:70:b9:a5:02:
24:fa:d6:ea:65:72:55:ab:b3:e8:bc:de:19:3a:60:97:e2:e4:
31:29:7c:23:5f:c6:56:45:18:86:de:65:22:78:6d:d4:46:65:
b5:84:2d:d3:62:9e:95:57:74:c5:58:a5:a1:30:3e:3c:52:23:
ea:c7:62:1c:c6:0a:7c:6c:33:3f:11:2b:59:f6:d6:37:e5:8f:
e5:b3:2f:cd:cf:09:00:e5:67:dc:fb:fd:c0:15:b8:cd:14:9b:
7e:62:57:e1:4f:a1:6b:d1:96:d3:2d:78:09:a2:01:a4:66:f5:
6b:7a:30:65:2f:aa:2a:2b:b2:04:da:64:d6:4b:f9:e7:8c:52:
08:5a:b7:be:73:94:1a:16:35:4a:41:41:20:1a:34:42:ee:8f:
4c:06:14:c2
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 1 03:01:48 2023 by rpki-client on console-fra.rpki-client.org