Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/BCJ6eGE3_p4Vbg6G2btflFBrGIA.roa
File: BCJ6eGE3_p4Vbg6G2btflFBrGIA.roa (raw, json)
Hash identifier: 0RDWgtm7jAj4o8LgTEmUiwZz0k4PrSWqe7Ue3xJi2s0=
Subject key identifier: 04:22:7A:78:61:37:FE:9E:15:6E:0E:86:D9:BB:5F:94:50:6B:18:80
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CECA9169FBCE43A9811F8D1A029BF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/BCJ6eGE3_p4Vbg6G2btflFBrGIA.roa
Signing time: Mon 02 Jan 2023 03:36:01 +0000
ROA not before: Mon 02 Jan 2023 03:36:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 178.253.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ec:a9:16:9f:bc:e4:3a:98:11:f8:d1:a0:29:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04227a786137fe9e156e0e86d9bb5f94506b1880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:be:64:63:f3:81:96:a7:6c:08:15:9c:27:
94:12:77:f5:31:fa:13:10:cb:d9:d7:1a:54:dc:4c:
23:25:61:4d:ac:88:7f:9e:40:ae:71:4b:41:c3:f0:
8a:03:df:0b:2b:cd:d8:ec:94:98:33:8f:36:8c:c6:
9f:e8:dc:5e:c1:84:c5:8a:3b:70:f5:03:d9:ec:60:
81:cc:2f:b9:71:22:d4:4f:33:b3:08:a2:45:62:ec:
15:ee:10:b9:2b:d1:ab:89:9f:0f:54:4d:7c:05:bd:
0f:a8:18:d3:15:2d:91:13:02:3c:50:0c:82:2d:13:
4e:e6:43:e3:fe:74:ef:2c:4e:c8:26:87:12:f7:48:
83:88:dd:8b:e9:df:72:3d:16:ab:16:dd:78:3a:23:
cc:79:51:0f:aa:42:80:1b:c9:a5:83:18:5c:f2:37:
cb:c7:74:90:6d:0d:5a:aa:0e:54:fa:81:e5:48:72:
80:b9:60:e1:fb:3f:a9:0f:d9:fd:da:af:50:31:42:
f1:29:17:e6:d2:7e:46:8f:e7:5f:e0:78:e6:dd:5f:
3a:1c:39:2c:b2:70:41:38:65:3e:ee:e1:cc:60:93:
70:d1:6d:00:47:5b:76:97:df:36:39:97:af:96:58:
e2:ef:09:93:d1:3f:6b:46:19:d8:0a:02:83:0b:93:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:7A:78:61:37:FE:9E:15:6E:0E:86:D9:BB:5F:94:50:6B:18:80
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/BCJ6eGE3_p4Vbg6G2btflFBrGIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:00:3c:3e:98:e7:d1:c3:57:0b:fa:18:d4:02:f5:6f:43:9a:
fb:e8:4c:5a:2c:de:15:be:8d:39:e5:bc:6f:fa:f6:c0:ab:05:
a5:05:fa:d9:ee:d6:1c:99:d6:77:8d:82:6e:5e:c5:7a:db:cf:
bb:df:ef:12:70:7b:66:3f:54:84:c5:0b:fd:c0:6b:af:12:01:
1d:a8:96:de:e4:2c:87:59:78:b6:4b:c3:0a:d7:77:98:13:3f:
b9:d0:06:42:a8:15:f0:e0:03:17:33:ac:d9:79:9f:f8:b6:55:
9b:7c:44:3b:b7:68:59:57:db:c4:f5:79:26:c1:41:e3:54:f5:
43:bc:ca:f3:60:56:bf:d8:34:13:3e:12:72:49:cd:cf:0d:42:
b9:dd:27:96:ba:95:3b:76:f8:df:86:53:7b:4f:54:d2:ec:1e:
8e:4d:23:71:9a:9e:3f:f6:d0:aa:f0:57:1b:41:ee:7f:05:65:
e4:76:2e:f4:da:63:4f:a4:d2:47:cf:84:e1:39:bd:4c:64:12:
97:fc:35:6c:ae:28:5b:c0:85:1f:9d:9c:5b:fd:f4:71:11:86:
fc:8f:f6:a8:01:df:07:b8:2a:e3:28:d0:b4:4c:85:b9:23:4e:
58:8b:7b:19:48:a2:5f:22:0b:01:ae:8c:a6:74:85:c1:4d:15:
67:31:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org