Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/1-0EF36HSSx78R5aixRy4ZnsF068.roa
File: 1-0EF36HSSx78R5aixRy4ZnsF068.roa (raw, json)
Hash identifier: Tgb0FEul2THjaOOjXrrxeeiHlkf3EHpIcpQebDzACLg=
Subject key identifier: FB:41:05:DF:A1:D2:4B:1E:FC:47:96:A2:C5:1C:B8:66:7B:05:D3:AF
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 018B56FD333AD5111691A31F4D546E08C62C
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/1-0EF36HSSx78R5aixRy4ZnsF068.roa
Signing time: Sun 22 Oct 2023 10:45:15 +0000
ROA not before: Sun 22 Oct 2023 10:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209828
IP address blocks: 178.255.218.0/24 maxlen: 24
2a10:7cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:fd:33:3a:d5:11:16:91:a3:1f:4d:54:6e:08:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Oct 22 10:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4105dfa1d24b1efc4796a2c51cb8667b05d3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:aa:83:b8:30:fb:ed:b8:83:2c:ea:34:84:
03:b1:44:f8:cf:69:55:b6:c7:ae:a6:d6:06:8e:7e:
2a:54:0d:ed:b5:64:aa:4c:0f:61:0f:d7:a1:2a:7b:
b9:d4:d7:77:9d:66:ca:50:19:63:7b:c4:cd:d7:da:
e3:68:a8:c9:ad:7a:40:6c:93:62:dd:c4:86:2f:eb:
66:a6:c0:8a:70:db:2b:8a:4d:3d:09:12:af:a6:c1:
c4:a7:07:e0:e7:f6:61:70:16:df:67:fc:df:70:53:
47:1c:86:ed:16:ab:d2:c7:34:54:f3:bf:f7:eb:7d:
c8:f1:77:5e:8a:65:7d:fa:71:c7:f2:6e:0d:61:a9:
2f:d0:4a:97:34:7d:e2:0e:86:bb:03:3e:37:bd:f0:
a7:2b:7b:d8:e9:27:59:3b:13:53:15:8a:dd:b0:ea:
cf:25:50:6b:dc:17:8f:2a:16:2f:50:43:51:ed:59:
3b:a0:77:fd:4e:61:07:82:0c:3b:79:bd:b5:08:b9:
9f:2f:d4:5b:13:0f:dd:53:64:5b:ca:bd:26:86:ed:
cc:b2:fa:c6:76:26:a1:9b:92:42:c3:a8:f7:32:bd:
61:c6:87:76:2a:b3:f3:42:58:42:d1:e2:d9:ad:a3:
ff:4e:3e:0e:28:bf:82:a9:29:de:a1:67:78:6a:38:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:05:DF:A1:D2:4B:1E:FC:47:96:A2:C5:1C:B8:66:7B:05:D3:AF
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/1-0EF36HSSx78R5aixRy4ZnsF068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.218.0/24
IPv6:
2a10:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
04:d3:78:73:39:ac:3b:c8:20:32:56:d8:28:b6:e6:e1:df:0b:
90:50:88:01:5d:51:d7:11:a5:42:6f:fa:c8:03:8e:ab:ef:f5:
62:4a:d4:6b:e2:d0:49:45:8e:3b:cf:01:a7:6f:58:83:74:94:
5b:a6:1a:9b:de:8f:4b:17:6b:ba:28:c4:2f:08:b7:c8:f9:73:
0a:30:a1:16:4a:26:93:a1:e9:0b:ce:7f:9f:f7:fb:b3:42:6f:
1f:60:49:35:da:73:ad:57:d6:f0:ec:ad:41:93:86:27:a3:45:
26:a5:d1:45:48:52:f3:1f:57:a0:14:11:cd:5a:cb:98:dd:1d:
b9:bb:d6:ff:37:14:52:a2:e4:fe:17:95:c7:77:b5:a2:99:00:
3f:ca:ee:f3:4c:d8:5d:88:9b:d9:f0:b8:40:a1:5c:57:d5:06:
f3:9f:a1:64:b9:18:e1:e8:9c:27:07:19:fc:b1:b2:2d:01:fa:
cb:14:b3:6a:c0:cc:d4:d6:c1:e7:00:6b:6b:39:e4:80:26:8a:
80:24:5f:4a:f0:b7:ba:7b:13:f0:1b:44:a7:d6:b7:5d:e9:85:
69:e4:71:d7:96:1f:fd:ee:8e:ee:58:c3:23:3b:90:88:86:6d:
50:bb:bd:d4:28:f1:46:d4:15:24:65:4e:76:86:ca:60:e2:44:
b6:57:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:45 2024 by rpki-client on console-ams.rpki-client.org