Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sic5lqcu-t_BrSZmgVh3yeDtzR0.roa
File: sic5lqcu-t_BrSZmgVh3yeDtzR0.roa (raw, json)
Hash identifier: BrhqWfA3aOQQ/etnf3T6SuacOgwSDSlPNPOlEe2V/zo=
Subject key identifier: B2:27:39:96:A7:2E:FA:DF:C1:AD:26:66:81:58:77:C9:E0:ED:CD:1D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CED96D896BD861C201CE5C431F685
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sic5lqcu-t_BrSZmgVh3yeDtzR0.roa
Signing time: Mon 02 Jan 2023 03:36:02 +0000
ROA not before: Mon 02 Jan 2023 03:36:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395517
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ed:96:d8:96:bd:86:1c:20:1c:e5:c4:31:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:36:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2273996a72efadfc1ad2666815877c9e0edcd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:27:e7:ef:c7:bf:8d:28:f8:10:f0:48:7c:
4e:5c:55:db:c7:fb:38:52:14:1b:d2:3f:40:1d:4b:
08:16:8a:62:f0:95:ca:f4:51:33:af:b8:48:c1:7d:
e7:6d:05:11:b8:eb:82:ef:91:26:3b:85:0e:00:d6:
ee:ed:ca:b1:8e:f6:b5:03:a7:f3:4a:77:20:17:fd:
ea:56:38:a9:1c:53:03:2d:58:23:12:58:d4:fe:7a:
84:f9:03:0f:30:36:8c:db:ed:ad:1f:4e:92:8f:8e:
f1:43:ed:09:ba:d7:2b:b1:4f:34:a8:2f:10:7c:23:
66:1e:7b:62:47:9f:a2:e2:4c:f8:d5:86:02:77:59:
35:f9:1a:ab:88:7f:d5:5c:f2:54:28:dc:3d:f1:72:
3c:dc:8b:31:1a:3f:0d:b4:25:7d:54:e0:a2:03:ba:
18:f4:02:fe:d2:b2:aa:12:74:ec:90:30:73:b5:56:
ce:ce:9d:40:72:a8:5b:f7:36:05:14:aa:2a:03:60:
6e:13:da:01:45:70:91:e5:88:34:13:2a:a8:3a:47:
57:26:a9:81:21:3b:41:b1:53:c5:50:7d:82:ad:e9:
4f:d0:e9:5a:04:73:8e:e7:ad:8f:e3:af:b2:40:4c:
d5:4e:1e:84:09:4d:6f:49:0f:db:9f:a1:da:1a:c2:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:39:96:A7:2E:FA:DF:C1:AD:26:66:81:58:77:C9:E0:ED:CD:1D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sic5lqcu-t_BrSZmgVh3yeDtzR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:f6:ea:47:49:1c:84:e0:ff:fe:8a:77:c6:02:2a:2e:84:14:
f7:71:d1:20:b9:04:b7:78:19:21:5d:d7:e0:b5:05:6e:00:57:
66:15:b8:70:c6:7c:97:a0:3c:36:51:47:fe:11:7f:0e:2e:8a:
77:83:20:ec:2b:a0:03:fe:84:60:f5:c4:52:fc:cf:8f:cb:38:
1d:30:c2:6c:93:b9:84:ef:df:2a:c3:9f:5d:56:72:42:22:36:
84:fc:50:5d:fb:a0:11:3f:92:3f:89:7f:4f:63:23:27:35:88:
59:0f:41:7e:4f:ed:e4:79:b4:3c:84:d7:a8:8a:36:67:08:47:
b4:9b:09:e1:37:74:13:51:f0:3f:59:e2:a2:2e:34:f8:1b:17:
aa:e6:b2:64:3b:6c:3a:71:f0:7a:ef:04:0a:b2:9d:e2:c4:0a:
07:11:26:a3:4c:45:48:6a:0a:40:9d:1e:69:ad:a6:c1:16:4c:
42:30:3b:7f:2a:de:0b:35:3b:80:0f:f4:30:f8:02:09:81:40:
88:e0:d0:28:4a:de:d8:39:68:42:5c:be:cc:ed:cd:d1:34:d4:
cb:55:ab:2f:ac:12:bd:70:f7:f5:86:97:21:32:cc:33:d6:97:
a4:6f:81:36:6e:b7:43:61:d2:5a:65:4f:b4:0b:85:c5:46:20:
57:1b:da:88
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 16 21:39:29 2023 by rpki-client on console-fra.rpki-client.org