Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VLVqPjkCzHZoOjcBkY2sIDbzQqU.roa
File: VLVqPjkCzHZoOjcBkY2sIDbzQqU.roa (raw, json)
Hash identifier: p8sO23k3zkUZp8ADbm7jQ7FlAnKcQzFGtQsCKpchaOM=
Subject key identifier: 54:B5:6A:3E:39:02:CC:76:68:3A:37:01:91:8D:AC:20:36:F3:42:A5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018806D964E8BE00184B7137AE981656B29F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VLVqPjkCzHZoOjcBkY2sIDbzQqU.roa
Signing time: Wed 10 May 2023 18:08:10 +0000
ROA not before: Wed 10 May 2023 18:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 178.253.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 11:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:d9:64:e8:be:00:18:4b:71:37:ae:98:16:56:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 10 18:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b56a3e3902cc76683a3701918dac2036f342a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:50:ed:8b:a0:10:a4:8f:4f:ab:67:05:74:
c6:22:53:c8:e0:36:f6:26:7e:74:dd:c9:83:3a:d8:
43:3f:ce:a8:2d:9b:e8:fc:0e:34:3e:5c:85:3b:1c:
d0:ca:c3:09:26:50:6c:b3:86:77:77:83:97:6c:55:
1a:eb:8f:41:ce:08:8a:28:9a:2e:fa:d4:f6:c2:ec:
0c:cd:e2:50:49:d3:dd:03:d3:22:e6:2c:ce:c2:c1:
77:99:29:d7:47:9d:22:56:80:19:28:ad:ed:cb:46:
3a:1f:6d:5a:8b:84:69:01:d5:a5:34:d7:a2:98:e7:
9d:a1:47:27:ca:4a:95:de:97:2b:84:3a:af:c0:d0:
6b:ce:e2:13:ef:88:72:61:4a:69:1f:2b:92:27:e7:
68:76:29:a4:bc:87:bf:4d:c4:1d:17:16:d5:5a:ab:
81:5d:5d:51:5b:e1:e8:6a:34:16:11:fc:aa:c7:b5:
8c:2c:51:8d:eb:cc:d2:87:c1:e6:5e:1c:4f:78:02:
92:76:b2:89:49:df:88:2d:99:79:dc:0a:fd:e2:8c:
46:15:a1:9f:3b:6e:0d:10:e0:38:1e:8f:9f:86:4b:
a8:88:2b:d8:af:a6:18:6e:66:d1:c4:f9:86:4e:7f:
83:57:8a:42:67:9d:94:1b:22:0d:e2:5a:cd:6c:b3:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:6A:3E:39:02:CC:76:68:3A:37:01:91:8D:AC:20:36:F3:42:A5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/VLVqPjkCzHZoOjcBkY2sIDbzQqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:62:4e:c0:fd:00:8c:fa:7b:8e:53:77:3e:49:50:10:fc:9d:
29:05:23:da:ee:f3:2c:bc:0c:0d:3a:d2:64:ab:7e:8a:4b:6f:
62:1d:3e:0b:7e:25:b6:13:d9:9b:26:70:c7:fa:1a:6a:cb:f3:
c4:e6:d9:a4:14:2d:45:60:7e:42:50:af:c4:23:0e:88:cd:8d:
d5:07:72:5d:f8:8c:3c:7f:3d:8e:48:00:b7:f5:8e:03:ba:e0:
1b:d2:76:0e:46:29:7a:63:6f:69:2d:02:3d:47:4b:e8:7d:d4:
ee:2a:16:5b:a7:4a:79:17:75:5d:d9:83:ff:f9:9b:45:7e:14:
f8:2c:69:86:5a:28:18:6a:ac:08:3d:ac:57:61:9d:49:00:3b:
c2:7a:e5:3f:d5:b7:d2:ad:de:7e:05:53:2b:93:23:58:95:1d:
9b:33:e8:18:6b:f2:03:7d:55:83:df:75:79:7b:ab:c6:f0:47:
98:2c:e9:87:2e:d4:87:12:6a:17:08:2b:a3:68:f0:00:f1:ef:
f4:4d:e8:96:b1:70:d1:67:49:4b:34:9f:0c:7e:0d:17:68:0f:
b6:a4:75:e9:41:8d:e9:c4:be:b7:1d:fd:15:c1:49:f7:9b:9c:
fe:91:13:93:59:c9:5d:45:aa:ea:b8:ba:58:33:1e:5a:b9:ca:
19:9c:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org