Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/KaEpOC8UToT3Zj0jJEfFior4Iog.roa
File: KaEpOC8UToT3Zj0jJEfFior4Iog.roa (raw, json)
Hash identifier: 4kheqrpgvxGyUNt/1KHe4XV0XIa4IntNw5Km0Svx74Y=
Subject key identifier: 29:A1:29:38:2F:14:4E:84:F7:66:3D:23:24:47:C5:8A:8A:F8:22:88
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0186DEFF88F084E4C8EE1483EF64FAE2683D
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/KaEpOC8UToT3Zj0jJEfFior4Iog.roa
Signing time: Tue 14 Mar 2023 07:22:13 +0000
ROA not before: Tue 14 Mar 2023 07:22:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204834
IP address blocks: 178.157.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:ff:88:f0:84:e4:c8:ee:14:83:ef:64:fa:e2:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Mar 14 07:22:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29a129382f144e84f7663d232447c58a8af82288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:cf:9b:68:66:05:4b:5b:f5:ac:14:81:20:
9b:b0:60:6e:34:c5:31:2b:42:33:56:f6:f7:7a:15:
0c:1c:a4:ab:98:01:e2:ed:5d:a2:33:a0:1b:10:0c:
fa:69:57:39:f4:52:66:27:b8:c1:25:3c:50:46:4d:
42:50:b2:71:d6:15:83:e7:81:07:ff:f4:d4:1c:7e:
56:43:0d:c4:f8:00:05:d4:cd:c5:4e:a3:7f:24:7a:
a4:57:46:7d:e1:40:0d:a2:bd:50:ec:e1:1e:f4:77:
3b:7c:0b:5d:41:a8:94:3d:51:59:e9:83:b7:5d:6c:
65:ec:aa:53:0a:b8:1f:ae:e5:5f:af:64:5e:99:d6:
40:84:94:9c:5e:d9:cb:50:73:f2:f9:1c:af:fe:2d:
fd:c8:13:0d:29:88:47:60:46:e6:05:ec:1b:c4:1f:
20:f9:95:f8:e0:74:a1:9f:01:f0:4a:c5:0c:ac:3f:
a8:76:56:9f:df:85:7f:75:88:e6:10:f3:36:e3:cd:
3c:9a:ba:f9:40:b9:66:d1:d3:f5:d6:a6:ad:1e:23:
67:38:77:a6:29:e2:1a:e9:46:d5:83:1a:ce:5e:29:
b0:51:cf:d6:82:1a:84:72:c8:d8:66:15:4d:bc:8c:
54:81:34:96:c9:fc:7c:b2:e3:46:8f:04:d1:d2:5b:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:29:38:2F:14:4E:84:F7:66:3D:23:24:47:C5:8A:8A:F8:22:88
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/KaEpOC8UToT3Zj0jJEfFior4Iog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:96:e1:2d:cf:38:93:8f:31:51:2f:9b:9c:d9:6f:49:52:37:
5b:0c:8d:66:4b:15:fd:ff:a0:b3:6b:23:cc:d4:4c:71:90:71:
02:b8:ae:7c:cf:48:f7:ca:5a:a1:57:a2:3d:48:c7:7e:4f:52:
85:8e:c3:7e:51:92:24:d7:c9:ae:c7:e2:f3:91:30:3b:60:96:
c6:74:ba:bb:a1:9e:3c:6c:9d:c6:59:3b:3e:54:0a:1e:51:81:
83:22:23:ed:0b:84:55:d8:31:83:8e:6f:38:d2:10:32:30:75:
99:a6:c6:6e:0f:32:8a:89:71:c0:1e:4f:9a:9d:e7:73:a2:b9:
1a:fb:5a:f9:35:86:55:9e:76:ac:fe:ff:c1:93:57:4a:e5:6a:
d0:55:a0:e4:d6:63:d3:c4:ef:dc:f2:8e:76:d3:80:41:67:d6:
a8:fb:68:81:b9:cb:aa:2f:9c:97:4a:d9:d4:5e:cd:e1:44:a3:
42:9e:5d:65:6d:94:e4:c2:99:07:c9:43:d5:e3:4f:e8:ad:7f:
e9:06:ef:ee:24:ba:09:06:de:cc:34:79:0b:cd:3a:65:9f:a3:
22:3f:a4:46:44:c4:a3:ce:af:31:06:3f:19:fb:e0:9c:87:6e:
b0:3e:6e:89:8f:63:e8:f3:f3:b1:3e:36:91:49:18:3d:03:02:
c3:12:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org