Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lCxT5nIb_PatZgLoP-1ta1fC9a8.roa
File: lCxT5nIb_PatZgLoP-1ta1fC9a8.roa (raw, json)
Hash identifier: 67h6OD5UPmUytPREOK+DZYKZqoivfBCoXiGrkvG6aiY=
Subject key identifier: 94:2C:53:E6:72:1B:FC:F6:AD:66:02:E8:3F:ED:6D:6B:57:C2:F5:AF
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CE91235E5DEB38A4376DADEA6E146
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lCxT5nIb_PatZgLoP-1ta1fC9a8.roa
Signing time: Mon 02 Jan 2023 03:36:00 +0000
ROA not before: Mon 02 Jan 2023 03:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 178.253.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e9:12:35:e5:de:b3:8a:43:76:da:de:a6:e1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=942c53e6721bfcf6ad6602e83fed6d6b57c2f5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:b8:fd:53:76:00:3c:3d:32:4b:4f:3b:4d:
29:8b:86:8f:45:74:c4:52:60:e0:f5:f8:77:8c:94:
55:5e:a0:26:e4:33:8f:12:9a:7d:c0:82:ed:54:a3:
9e:db:a8:c1:2c:0d:e9:dc:9e:61:db:7b:b0:2f:e9:
66:4d:24:1a:25:8d:bc:3b:c7:35:fc:a7:1d:29:19:
71:f0:68:06:c3:48:d5:7d:74:d3:dc:23:f3:58:ac:
9e:76:46:f3:a9:34:20:c0:b4:3a:88:bd:07:00:50:
59:bb:17:80:21:93:d6:93:2f:a9:a7:9c:9c:b5:be:
c3:d3:ef:c6:d4:0b:5c:07:97:eb:45:2f:80:7d:3e:
47:b1:14:27:6a:ac:90:7e:cf:fa:89:68:ce:95:dd:
79:5b:86:fd:e0:15:a7:f4:7a:c4:c8:74:9e:3e:c7:
eb:b6:f9:ca:60:e2:69:0b:a0:4e:b5:40:2d:64:b4:
98:59:a1:48:1c:9c:15:5d:31:cd:c9:9a:32:4c:1c:
76:72:74:99:71:f5:a3:43:c6:1d:7a:0f:c9:6c:20:
a9:3a:24:75:bc:a6:d5:b1:36:56:79:8a:19:8e:22:
b2:dd:a5:0b:55:e4:a9:60:28:4a:c5:ef:3e:ea:bf:
26:37:7c:94:ff:9a:c0:9f:3e:63:67:e1:37:e7:c3:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:53:E6:72:1B:FC:F6:AD:66:02:E8:3F:ED:6D:6B:57:C2:F5:AF
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lCxT5nIb_PatZgLoP-1ta1fC9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:15:c6:fd:3f:aa:e8:f6:d2:b0:28:5e:35:59:ad:56:6d:a0:
ba:03:2a:82:6e:cc:44:cf:60:9f:e0:6e:53:6e:11:e0:17:1a:
de:99:62:d3:7e:d7:f2:f1:78:f6:50:f4:3d:de:56:73:55:32:
d0:ef:3b:04:5a:74:a5:a0:32:3f:38:83:42:97:79:c3:d5:5e:
13:96:0c:ef:8d:4e:b6:4f:93:c9:d9:6b:c6:86:9c:92:21:39:
7f:03:46:21:8b:de:ae:f4:30:a2:16:54:d9:23:5a:d6:c1:38:
00:2b:48:23:d1:49:96:2d:3c:d6:42:a4:70:9f:aa:f0:90:1d:
86:31:10:c0:19:ee:15:10:ec:ab:bc:50:90:2f:4d:44:12:3a:
4a:7e:2c:2f:00:82:4e:a2:ec:ba:86:0a:86:65:da:cd:e3:86:
ea:52:3a:af:7e:10:62:4c:e4:4a:be:28:a9:6f:79:b8:0f:21:
b5:9f:b5:c9:fc:78:15:1a:d4:7f:a4:5c:72:5c:20:c7:dc:f7:
b9:47:12:31:8d:67:af:40:38:53:d1:23:9f:b8:7f:fa:75:e6:
95:fb:cc:43:d2:c4:a9:7d:37:86:9c:d4:41:92:59:e6:01:1f:
09:06:0b:6b:3f:75:98:f6:e0:30:da:b0:f0:37:8a:ef:a7:c5:
cf:f8:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org