Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/15LlNTpo_u2GMm6BL8gkBauKYR0.roa
File: 15LlNTpo_u2GMm6BL8gkBauKYR0.roa (raw, json)
Hash identifier: 8LwXYo7mJUHcqgTdm1YcMZg7JPyiWwDA02c7FsccTlk=
Subject key identifier: D7:92:E5:35:3A:68:FE:ED:86:32:6E:81:2F:C8:24:05:AB:8A:61:1D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CE3A3071F5F7CD6ED16160691BF42
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/15LlNTpo_u2GMm6BL8gkBauKYR0.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e3:a3:07:1f:5f:7c:d6:ed:16:16:06:91:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d792e5353a68feed86326e812fc82405ab8a611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:88:52:5d:5a:05:7b:33:f9:40:0c:24:55:
f3:c5:e0:cf:6b:26:82:9a:d9:43:cc:57:b1:df:dc:
7b:5f:2c:33:1d:85:03:c7:66:50:b5:1c:77:92:0c:
9c:2a:67:8f:c3:72:d9:4c:2f:3b:d5:0d:86:e4:c0:
ab:4a:39:75:73:cb:56:6f:e6:77:65:f1:b3:30:dd:
61:32:ff:1b:e6:b2:b6:c9:25:91:cc:c7:a8:44:1f:
c7:25:17:a3:13:08:6c:46:e0:16:23:8b:43:67:b5:
ca:c0:ea:23:42:08:68:09:3e:dd:63:12:a0:aa:bf:
ae:b0:fd:97:70:01:47:14:cb:5f:7c:c1:78:57:51:
9a:63:eb:22:ed:7b:de:1e:4b:7d:4b:d8:4d:0e:0f:
79:f7:c3:c2:4c:8c:85:4d:4e:8f:e7:03:d1:12:a4:
b3:e7:ce:ed:87:32:5c:f6:6b:7c:10:d9:5c:a0:9c:
5a:6b:5e:00:5e:cc:39:6e:d3:ff:ca:b9:bf:1e:1f:
29:96:54:8b:f1:5c:55:33:c8:38:0c:eb:0d:23:16:
49:86:38:87:3b:36:38:3d:ca:37:c4:a4:dd:70:69:
18:17:e1:c7:c0:1b:10:c2:32:ff:33:c3:88:f6:e2:
36:37:54:c1:db:93:b1:a3:20:e4:af:54:ea:fb:c3:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:E5:35:3A:68:FE:ED:86:32:6E:81:2F:C8:24:05:AB:8A:61:1D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/15LlNTpo_u2GMm6BL8gkBauKYR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:33:94:22:d4:0a:89:7f:b8:2c:b4:6a:9e:09:4d:84:11:45:
41:f1:53:89:5f:ed:f7:dc:2c:76:c4:a5:00:83:8a:2d:ee:21:
95:73:60:ab:2f:bb:61:e0:e3:b9:67:a0:40:35:65:ab:30:54:
6a:2e:0f:a1:97:3e:73:b7:ac:25:2d:53:92:a2:23:47:63:67:
46:d1:bf:c6:86:a1:91:82:6f:37:d8:19:ed:ca:33:a9:d7:c5:
98:04:e7:ea:f4:dd:5d:d8:c5:0d:ba:5e:fd:9e:40:9d:b8:8e:
12:a3:2f:63:4a:53:01:c5:96:8f:bb:93:3a:c6:d1:17:0b:14:
90:8b:ab:07:d3:da:56:87:31:e4:29:82:60:20:70:b5:9a:71:
f8:6d:ae:34:0e:db:f3:6d:f8:69:66:3e:aa:15:c0:97:f3:68:
89:2a:9a:7c:8a:6d:d1:3c:12:55:76:f0:a5:de:4c:17:9b:f7:
28:75:e7:c1:90:e3:6a:4d:2d:f2:5f:e9:79:15:f2:a7:4f:64:
22:41:25:de:a1:1c:0d:e9:08:11:41:97:0d:23:4e:48:2b:67:
0b:92:d4:3c:bd:85:60:53:7b:b3:52:f9:3a:a6:94:ba:fd:1e:
0e:82:9a:a7:c8:c4:f9:0e:0d:62:ec:23:46:e0:70:4c:d7:cc:
cd:3c:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org