Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/dBRVDe3rNRgMVDyrA57fMpb1aqE.roa
File: dBRVDe3rNRgMVDyrA57fMpb1aqE.roa (raw, json)
Hash identifier: wWh/c67AwUFJ4dqxqcQKEEBSWjRDPLs76U1wTLXQ29Q=
Subject key identifier: 74:14:55:0D:ED:EB:35:18:0C:54:3C:AB:03:9E:DF:32:96:F5:6A:A1
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 01856EA6BC7F39AFA8C4512C642EE0E72B98
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/dBRVDe3rNRgMVDyrA57fMpb1aqE.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8586
IP address blocks: 178.16.238.0/24 maxlen: 24
178.16.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bc:7f:39:af:a8:c4:51:2c:64:2e:e0:e7:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7414550dedeb35180c543cab039edf3296f56aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:a6:e5:81:69:d4:58:e5:ac:19:e0:f0:d1:
28:a1:88:cb:28:71:96:33:95:bb:39:fe:ca:2e:93:
83:92:95:35:4c:f5:dd:48:85:7d:f6:a7:0c:03:27:
66:cb:26:ff:e2:2f:80:e4:6c:bb:41:63:8d:e5:77:
c4:8d:6a:17:6e:ca:7a:d0:e2:df:f9:28:78:61:c7:
37:4b:b2:41:6d:6d:5d:4b:9c:5a:d3:30:6d:b0:44:
9c:04:12:70:16:4e:39:86:66:d3:e2:6e:98:d7:fd:
e3:f0:0f:ca:8e:92:1a:c6:c8:9a:84:6c:5a:aa:16:
93:b7:02:35:52:98:69:97:22:75:df:f4:bd:9c:54:
cd:e6:10:ef:6a:47:62:a4:83:e1:5f:16:0c:27:89:
00:81:1e:82:6f:46:53:1d:52:ab:27:e8:d8:19:f3:
34:eb:b6:50:ef:d4:67:39:ce:00:a9:66:18:b3:d8:
31:f6:a4:f9:73:33:e3:d8:43:04:ff:d2:41:3d:91:
43:ea:50:95:cc:1d:c9:d2:43:59:3a:b8:41:2d:0b:
8f:bc:05:f2:68:5b:14:cd:ce:27:4b:54:45:a6:07:
e6:1f:3d:12:5d:55:61:38:d3:1e:08:31:47:f9:dc:
d5:a4:df:6c:fd:7a:8a:3a:fb:34:1a:12:ae:a9:86:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:55:0D:ED:EB:35:18:0C:54:3C:AB:03:9E:DF:32:96:F5:6A:A1
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/dBRVDe3rNRgMVDyrA57fMpb1aqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.238.0/23
Signature Algorithm: sha256WithRSAEncryption
82:5e:5a:d7:ec:c5:8d:d2:1a:b9:8e:92:82:8b:76:3d:eb:72:
35:4d:cf:b5:5b:43:a0:d9:e1:26:45:65:5e:34:a3:70:b4:38:
fb:5d:9a:64:0f:94:df:1a:e1:e2:70:6e:27:fe:1d:56:66:40:
bd:7d:46:8b:e5:9e:aa:54:d4:ba:05:b8:c4:7e:47:1c:d8:2d:
1a:bc:bc:91:fb:c9:2e:3f:10:af:57:39:07:9c:f4:f3:e8:56:
15:c9:ca:77:a1:18:19:a2:c3:65:8e:dd:91:c4:94:c7:cb:e5:
2c:6c:86:3e:ea:35:b7:95:c8:ab:a1:ec:e6:10:83:43:9c:fe:
58:68:2d:8b:6e:d3:4d:63:d9:e9:49:48:03:7d:5d:95:b0:dd:
18:83:4e:b4:17:11:23:cf:7f:9c:bb:cb:57:75:fa:ad:a7:79:
e7:aa:03:33:cd:cb:c5:cd:3b:30:fd:ec:93:4d:92:6e:96:b3:
9d:d0:c4:5c:b2:60:0b:71:6f:83:b1:8d:9a:8d:e9:6c:dc:c7:
0b:42:ed:10:0a:3e:02:2e:dc:08:19:70:d7:e0:b6:e8:c5:f4:
7c:f0:60:98:11:09:b3:0d:62:ea:30:de:e7:ea:35:36:ab:85:
58:94:84:6d:06:fb:d0:76:d1:1e:07:98:f0:de:dd:25:be:fa:
13:e4:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:17 2024 by rpki-client on console-ams.rpki-client.org