Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/g_7fwkFb-KQ8yBjIotA4uwIiWGg.roa
File: g_7fwkFb-KQ8yBjIotA4uwIiWGg.roa (raw, json)
Hash identifier: NXdhda8PfqmkJUTkh4eT7FapioytuOV5OOUCjvOWy+w=
Subject key identifier: 83:FE:DF:C2:41:5B:F8:A4:3C:C8:18:C8:A2:D0:38:BB:02:22:58:68
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CE6372D8E4D6C930235E25A156C86
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/g_7fwkFb-KQ8yBjIotA4uwIiWGg.roa
Signing time: Mon 02 Jan 2023 03:36:00 +0000
ROA not before: Mon 02 Jan 2023 03:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133973
IP address blocks: 178.253.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e6:37:2d:8e:4d:6c:93:02:35:e2:5a:15:6c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83fedfc2415bf8a43cc818c8a2d038bb02225868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:ab:37:b0:cb:e2:51:5d:4f:bb:be:f8:07:
8a:de:e5:dc:af:fd:73:81:b6:b3:af:24:b0:ca:19:
11:dd:8c:aa:df:d4:0d:f6:75:ae:a6:6d:6c:f3:28:
3f:e6:93:74:b4:3e:03:f2:a0:2b:a9:a1:0c:22:a3:
db:ed:e2:6c:51:79:8c:a6:05:1f:34:bf:03:ae:79:
37:8e:2e:d4:92:77:24:9d:c9:bd:67:a1:b9:cd:37:
c2:e0:48:4a:49:8a:53:a3:20:1c:44:f7:66:60:69:
25:fe:de:2c:67:66:5f:8c:fe:09:b5:2c:cc:81:9a:
a7:ea:57:1a:72:75:45:26:49:6a:61:5b:ac:c6:22:
64:17:14:66:e1:00:f3:d9:30:32:49:71:11:f7:b4:
96:99:a3:3c:f7:71:f5:4f:88:9d:5d:b7:9f:cf:fe:
78:32:fd:31:e5:a8:9a:73:c6:f0:d4:ef:eb:65:75:
6b:fd:98:34:92:79:64:fd:82:0d:4d:e3:59:23:5a:
8c:e7:1e:11:5c:45:ec:a1:79:85:22:c4:1e:2c:4b:
24:97:c7:99:0d:b6:b7:fc:4b:07:d8:12:5a:47:eb:
21:a6:1f:5c:33:fb:ad:5d:db:04:f5:dc:dc:e1:8a:
2e:1f:4d:8f:d9:ec:d0:01:25:c5:5f:35:44:8d:6a:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:DF:C2:41:5B:F8:A4:3C:C8:18:C8:A2:D0:38:BB:02:22:58:68
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/g_7fwkFb-KQ8yBjIotA4uwIiWGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.52.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2f:7d:19:a0:c1:14:30:3d:39:fd:11:55:c9:84:fb:fb:eb:
27:03:e7:1b:96:9d:5b:42:34:84:44:9d:d3:66:59:a0:07:ac:
9f:8a:9e:ca:68:95:f9:76:6d:a3:41:6d:d9:63:95:cb:e2:e1:
66:21:3d:f8:80:5c:c4:f3:e9:e4:41:07:ef:ce:0d:44:db:11:
67:a5:f3:4a:cb:00:54:ba:88:36:89:d1:74:34:40:8e:0e:38:
f5:1e:db:84:ee:48:04:79:92:4c:7a:b5:ba:ae:bb:62:26:3c:
20:5b:bb:5c:2a:1f:06:74:fa:aa:63:8c:b6:9b:89:57:6a:3d:
3e:f6:0a:bb:02:3b:a3:d5:69:97:48:ce:87:e0:95:87:e8:b9:
e4:9b:5f:88:ff:d0:55:48:37:64:8e:b3:6a:b2:10:0e:3a:fa:
6e:6d:47:05:a0:8b:c5:16:c1:cc:f6:23:cd:dc:1f:2a:e5:bf:
b1:6a:19:58:c6:4b:a9:0b:37:cd:82:71:2d:71:91:da:02:fb:
e4:50:9a:83:d7:d7:87:74:71:52:a8:19:45:d1:81:97:3e:e8:
9d:3d:e4:4c:f6:b3:07:1e:aa:fe:00:1d:1d:99:95:ec:af:50:
e7:0c:c0:03:f4:32:fe:df:ea:09:d8:b9:12:a1:e1:57:4d:19:
e5:96:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org