Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AX9-Q6hVZDugq3D4y6OwR-MjgDI.roa
File: AX9-Q6hVZDugq3D4y6OwR-MjgDI.roa (raw, json)
Hash identifier: xgTI3Fzav8iu4UH3TrWGnODIwfMm9rwuC4SkaKI8xCw=
Subject key identifier: 01:7F:7E:43:A8:55:64:3B:A0:AB:70:F8:CB:A3:B0:47:E3:23:80:32
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0191ED588C723F7980E31851AFD516B79B05
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AX9-Q6hVZDugq3D4y6OwR-MjgDI.roa
Signing time: Fri 13 Sep 2024 21:44:48 +0000
ROA not before: Fri 13 Sep 2024 21:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 178.253.12.0/23 maxlen: 24
178.253.16.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 22:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ed:58:8c:72:3f:79:80:e3:18:51:af:d5:16:b7:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 13 21:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=017f7e43a855643ba0ab70f8cba3b047e3238032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:be:a9:63:7c:ff:29:43:96:7a:89:69:5a:
8d:f3:fc:90:9f:91:d2:10:f3:95:98:08:b9:78:64:
4a:9f:8b:bb:ff:02:30:56:53:f5:be:e8:7d:60:01:
19:05:4e:20:16:e5:fe:cd:2f:12:93:99:ab:63:6c:
bd:7c:8b:9a:3f:0f:6e:70:88:f2:dc:21:bb:ae:a5:
ca:c3:d3:de:01:a1:8f:e6:d3:dd:28:49:4c:50:50:
db:25:79:f0:08:76:77:38:4f:0e:6f:42:c9:e1:e9:
cf:8d:a5:59:d9:b6:7c:05:3f:14:f0:81:58:0f:26:
cf:09:ae:03:b1:d8:65:eb:d9:46:b4:6b:f2:41:eb:
21:1e:ac:d5:e2:59:4a:34:fd:9a:a6:d1:50:f5:c9:
72:56:65:93:74:d8:43:4e:91:ce:e6:ff:4c:25:2f:
1f:dc:7d:ed:f6:c2:e8:e8:32:2d:07:4c:60:c4:90:
6d:de:76:e1:56:56:ca:94:f1:70:aa:51:fd:75:c1:
db:41:97:01:ee:d9:dd:82:8f:68:05:f1:a7:4e:f3:
51:5f:55:06:04:77:df:75:67:43:71:1e:23:64:1d:
f7:4f:a1:14:07:44:1d:35:01:a0:8a:fc:03:98:cf:
ab:3f:ce:6e:38:46:5b:64:c4:09:0d:ae:06:5b:ea:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:7E:43:A8:55:64:3B:A0:AB:70:F8:CB:A3:B0:47:E3:23:80:32
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AX9-Q6hVZDugq3D4y6OwR-MjgDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.12.0/23
178.253.16.0/24
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:0a:83:9a:a6:75:45:dd:8b:0d:8e:2c:f3:d1:a7:4e:93:d9:
e6:99:a8:ac:e4:e5:25:bb:da:ae:95:9b:9d:75:4d:b4:59:06:
77:90:71:09:f7:f1:bf:af:4d:26:e7:11:c1:60:85:87:a0:35:
4f:13:4f:e5:98:59:6e:05:49:d8:5d:c1:28:a7:14:92:42:93:
a6:93:52:71:c6:26:9f:34:17:d1:5f:10:b2:d3:d9:bf:97:51:
fa:81:6f:cb:f1:cd:cd:a9:16:a7:b5:81:8c:cd:3e:14:e8:f4:
2d:dc:f1:de:42:c9:99:b1:98:70:85:b8:c4:17:95:73:08:83:
6f:20:b3:ce:a8:0e:17:e0:f5:16:51:d9:1a:a4:2f:24:e9:80:
d5:56:a3:80:f1:f7:e5:40:2d:42:11:6b:af:84:79:bf:35:ce:
66:98:cc:35:2f:56:d7:46:32:81:94:96:ec:e1:86:3c:b5:db:
8d:8a:c2:38:30:c6:96:88:2d:be:4f:da:b5:b6:8b:0c:70:70:
62:fb:33:99:fd:f6:3b:8a:c2:79:9f:4a:1b:b4:b2:70:e7:dd:
a2:54:16:1c:3e:12:41:51:f2:88:f3:d3:27:46:9b:43:11:a0:
7c:a8:03:8b:88:9d:df:1c:46:5c:be:30:8f:e6:f1:34:0b:3e:
ed:13:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 00:24:22 2024 by rpki-client on console-fra.rpki-client.org