Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_mdbr8jRIY7E24g8nJJSaXeBf3U.roa
File: _mdbr8jRIY7E24g8nJJSaXeBf3U.roa (raw, json)
Hash identifier: vuHkCTRyjFYOrJZyxpI4Fzv/vlJ78qhnYRZHqHIPA/A=
Subject key identifier: FE:67:5B:AF:C8:D1:21:8E:C4:DB:88:3C:9C:92:52:69:77:81:7F:75
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018FD7DA702BD91C1FF376A2C87E077C28DF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_mdbr8jRIY7E24g8nJJSaXeBf3U.roa
Signing time: Sun 02 Jun 2024 07:29:27 +0000
ROA not before: Sun 02 Jun 2024 07:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395517
IP address blocks: 178.253.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:da:70:2b:d9:1c:1f:f3:76:a2:c8:7e:07:7c:28:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 2 07:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe675bafc8d1218ec4db883c9c92526977817f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:37:94:a3:64:66:f2:44:a9:0c:6a:57:b3:
2b:d2:dd:77:71:aa:98:fb:23:6d:85:6c:44:b6:b9:
24:9c:ee:7e:db:3c:00:ec:eb:54:03:9d:b6:5a:9a:
77:ee:89:dd:4a:7a:70:c5:9f:e6:35:65:ee:62:f8:
c7:1d:10:e5:fe:60:a9:a5:4d:fa:aa:4b:63:84:82:
4e:a8:48:e5:f8:f5:ce:71:47:97:7e:b3:8c:3d:7b:
bb:e7:0e:f6:f5:e8:83:b4:40:f3:54:bb:bc:cd:67:
a1:c0:36:31:c3:d4:9e:52:c9:30:7d:a3:eb:90:45:
a4:19:a0:31:53:27:86:8e:c4:bf:15:05:a0:f4:fd:
0e:9c:dc:59:c0:23:19:b3:64:55:af:b7:1b:cd:51:
85:e3:11:ae:34:b9:93:60:28:20:17:d5:a6:38:fe:
72:0a:d3:98:7c:f1:f9:c4:71:39:ba:18:57:7e:39:
d7:9d:5d:92:4e:2c:f0:59:5c:51:0d:87:b0:ab:a5:
e2:c3:67:92:d8:ec:3b:f0:21:87:7a:73:1f:50:78:
55:d1:06:ed:43:ad:96:eb:98:9d:8e:16:43:8d:64:
c4:69:de:5e:70:67:89:d6:4b:fb:35:13:d5:02:bb:
80:11:39:89:e2:b1:a0:cc:a2:34:af:ec:3f:19:50:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:5B:AF:C8:D1:21:8E:C4:DB:88:3C:9C:92:52:69:77:81:7F:75
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_mdbr8jRIY7E24g8nJJSaXeBf3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d1:11:3e:c5:87:ad:19:47:ce:14:7a:6b:42:4e:94:e5:85:
72:02:2e:9b:43:56:03:8d:56:c7:ee:8a:9c:16:42:46:6f:f8:
40:7e:4f:b4:c5:7a:5f:21:f9:7e:7c:5b:a3:84:22:21:c0:0c:
60:89:ab:99:5b:4e:1f:6c:16:e1:fc:79:e1:74:b6:2f:d4:c5:
00:4f:22:cc:fb:29:ef:e3:ab:d0:64:47:0a:65:d2:67:6c:e2:
18:87:bd:8b:84:b7:68:68:bf:84:6a:35:66:0f:30:0c:e1:06:
99:5e:67:1a:44:80:c0:fc:b9:5f:82:03:5e:f6:e4:6f:f9:e1:
5d:e4:a3:36:09:f7:17:f2:91:e5:c6:82:98:ef:52:0d:2d:a0:
b5:75:d5:8f:4a:cc:72:97:0e:ba:89:35:1f:d6:f1:ad:b8:9d:
f8:db:ab:3d:07:d3:6e:0b:35:9c:8a:27:28:17:bf:a5:0f:5d:
27:5f:2c:ca:5c:77:a3:72:d3:b8:cb:52:2c:fd:d1:3f:20:f9:
10:a1:74:97:b8:6b:34:ec:fe:8d:12:ed:19:92:51:56:00:48:
bb:ec:01:fe:3f:5d:15:3f:52:f6:d7:7b:30:46:a5:c7:0d:52:
dd:4b:4b:06:f4:59:82:ca:c3:68:c3:80:14:dd:2e:86:0e:cb:
c0:4f:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org