Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7RUr_VFdr1qdX10ygu3FUNAw_2k.roa
File: 7RUr_VFdr1qdX10ygu3FUNAw_2k.roa (raw, json)
Hash identifier: KkcNvvEj6g4zrZ2oJq6+Wnf5jKXKiawS7CXYlHay1P4=
Subject key identifier: ED:15:2B:FD:51:5D:AF:5A:9D:5F:5D:32:82:ED:C5:50:D0:30:FF:69
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018FD7DA6EF53623C565959A708FBF4E6550
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7RUr_VFdr1qdX10ygu3FUNAw_2k.roa
Signing time: Sun 02 Jun 2024 07:29:27 +0000
ROA not before: Sun 02 Jun 2024 07:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 20:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:da:6e:f5:36:23:c5:65:95:9a:70:8f:bf:4e:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 2 07:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed152bfd515daf5a9d5f5d3282edc550d030ff69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:f4:51:fd:3a:9a:e3:93:6d:98:8a:d4:a8:
3b:6e:a8:b6:ae:ef:2a:02:98:55:19:81:31:a8:99:
83:3d:6b:0f:a9:10:09:fa:9f:ed:e5:dc:2b:c0:e7:
ed:d8:86:e3:7e:99:4c:5e:cf:42:01:ed:98:53:d5:
30:c6:80:38:ee:5c:61:6f:19:7d:4e:f6:44:15:8a:
44:3f:cf:ea:bf:57:3e:c8:f9:69:ca:be:e5:04:df:
07:48:5e:7f:f3:63:e1:7d:b1:52:71:68:0c:62:40:
02:7a:8a:f2:bd:25:87:7d:2a:ce:50:18:19:a6:93:
00:0b:cd:79:58:d2:e1:17:89:a4:ce:ed:6d:8c:5f:
d5:82:64:bc:f0:f6:a5:30:96:2f:d0:c0:70:fb:1a:
37:c8:5f:7f:b9:3c:5c:ea:86:ac:78:bd:a8:69:68:
94:99:d5:58:ee:3d:ed:5b:c1:ad:e1:0e:5f:03:43:
25:9b:47:2a:59:52:f3:dc:79:d3:3c:c0:21:a7:d2:
8b:dd:ad:ed:93:57:7c:45:e8:05:5e:cc:36:6d:46:
b8:22:08:8f:e8:f1:f0:10:66:87:0f:3a:f6:0b:33:
72:32:06:74:89:fa:9f:de:9d:60:48:33:47:9c:79:
da:4d:36:36:84:e9:e9:29:ab:c5:11:98:14:53:00:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:2B:FD:51:5D:AF:5A:9D:5F:5D:32:82:ED:C5:50:D0:30:FF:69
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7RUr_VFdr1qdX10ygu3FUNAw_2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:da:c6:89:ef:9d:bd:21:3e:37:00:e2:ee:14:5f:f8:c2:b7:
15:3c:9b:ad:04:fb:7b:f6:b3:52:c0:19:f4:cd:dc:ed:d0:cd:
18:40:80:c2:db:1f:6e:ab:7b:bb:1e:e2:43:f7:63:68:2c:40:
58:a4:48:69:75:3c:04:e4:bb:79:11:1a:f1:e4:c5:d7:9c:a7:
8e:c2:85:1f:dd:fb:db:1f:f1:54:93:34:2c:9a:3b:d8:23:92:
8c:9b:fa:7b:72:7d:d6:93:7f:d3:68:4f:6d:b7:ed:7d:7c:6c:
26:0b:3a:1e:e1:55:cf:b6:35:14:21:82:e9:9c:1a:df:05:02:
c1:95:73:e4:d2:e3:fa:c9:c9:f7:bf:46:59:9e:cf:c3:5c:7f:
b5:c3:ed:4d:82:15:f1:e9:ff:11:b1:a4:1e:62:c8:4f:d9:88:
0b:c2:12:73:d9:18:1b:16:33:02:f9:1f:a3:ab:7e:a6:23:7f:
b6:b1:ef:14:1a:54:be:ac:d0:0a:f4:bc:20:e0:4c:1c:d7:32:
f8:f9:ef:23:52:45:18:ee:da:22:9e:00:d5:8e:a8:a2:df:d3:
88:b8:75:27:99:a5:5c:ae:61:9c:ea:83:19:15:bf:8e:a0:4d:
ba:08:d8:0a:bb:db:4e:52:a7:75:4b:7e:e2:49:b2:e2:c4:28:
39:a2:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org