Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LtCUV-pY7O6VVMhSgKASBuRFWA8.roa
File: LtCUV-pY7O6VVMhSgKASBuRFWA8.roa (raw, json)
Hash identifier: D6AnKiOd8dn7DGATnAXlatMZHDu6F1V+j2jsxJUTTUk=
Subject key identifier: 2E:D0:94:57:EA:58:EC:EE:95:54:C8:52:80:A0:12:06:E4:45:58:0F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A0034F3F673E19D564DD2E7084D5930DF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LtCUV-pY7O6VVMhSgKASBuRFWA8.roa
Signing time: Wed 16 Aug 2023 21:16:24 +0000
ROA not before: Wed 16 Aug 2023 21:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395517
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 05:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:34:f3:f6:73:e1:9d:56:4d:d2:e7:08:4d:59:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 16 21:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ed09457ea58ecee9554c85280a01206e445580f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:34:d0:40:ca:cb:43:bd:c6:38:6d:cf:68:
c9:f0:0b:14:04:67:59:2a:1e:07:dc:8a:83:fb:9a:
ef:f9:2c:6d:ad:8a:19:42:67:c8:b1:3f:d5:3b:f2:
f0:f6:0b:6d:99:29:19:c6:09:ee:3c:d2:fd:a0:62:
a4:ff:21:2c:79:34:c6:bd:23:36:3a:32:58:85:e4:
ac:6d:4a:b0:3c:bf:ac:bd:a6:71:a3:04:54:d2:ea:
1e:1e:be:d4:ad:9c:07:b2:16:d8:35:27:e7:8b:f8:
8d:f2:04:fb:10:c9:d6:a1:49:db:ca:5c:21:86:a2:
8e:90:e8:b1:f1:00:34:70:20:c0:f8:e6:0c:f0:9f:
8d:c5:b7:d5:37:38:1f:4b:00:34:b6:eb:ad:e6:db:
95:41:f4:85:ab:d7:bd:ae:c4:8d:8a:95:74:b4:f6:
35:9e:1d:44:bc:2f:bf:9f:1e:e8:93:bc:03:5e:24:
2f:9b:1c:95:6d:ce:cd:70:96:76:28:1d:b4:86:db:
34:9b:e6:c0:bd:74:01:95:1f:97:81:9d:d6:1f:bd:
d4:43:f9:e9:9c:51:a5:1d:01:bc:9e:95:5e:8d:20:
b2:20:10:2a:4d:7a:22:7e:df:36:b8:ed:84:74:50:
bd:95:94:5d:72:9f:ff:12:e9:de:2a:3c:b7:c9:e1:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:94:57:EA:58:EC:EE:95:54:C8:52:80:A0:12:06:E4:45:58:0F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LtCUV-pY7O6VVMhSgKASBuRFWA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.32.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
82:d8:24:72:f0:03:b9:4d:e7:e7:f0:63:c9:1a:bf:be:cb:07:
59:c1:dd:8d:b8:49:c6:3c:6e:a8:c2:1c:a8:7d:23:b7:6d:fb:
f5:c1:a0:fe:7e:48:ca:48:2a:2a:4a:ff:85:9c:e2:0c:a7:32:
d8:02:17:3d:d8:20:07:7d:d6:80:b2:1c:8a:62:66:3b:32:dc:
c2:81:70:af:60:47:c9:a5:a7:e0:16:f5:51:0e:7c:8f:13:80:
d0:42:02:97:4b:3b:44:80:a6:39:28:c2:57:13:90:32:0b:7d:
e6:7a:83:31:92:6d:b4:9b:74:8e:ef:c5:b7:01:a0:84:69:1a:
ca:09:2a:85:8c:d4:73:55:45:0f:47:b1:e1:79:b3:2d:a8:2b:
36:36:d5:af:32:9a:7e:84:8d:cc:db:14:6f:26:04:b9:3a:77:
a3:ad:b6:42:2a:55:de:29:32:17:90:23:e1:ec:3d:95:be:b8:
ea:23:b2:ac:5f:3d:22:81:fe:5d:05:51:1b:3f:b7:c1:11:44:
11:b1:dd:9c:dd:dd:a7:28:de:46:1b:3a:8d:c9:ea:ba:0b:08:
31:a6:5f:fd:cf:f1:66:5c:25:ba:dd:60:a5:c0:42:b1:6e:f4:
52:80:ca:31:fa:74:00:4b:35:58:cf:e0:fa:b6:e3:3a:b3:de:
3e:50:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org