Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4a4sDlw6dFAj7wg6RdszW9OSuFI.roa
File: 4a4sDlw6dFAj7wg6RdszW9OSuFI.roa (raw, json)
Hash identifier: lAntHKaA4Hbcz9gL83aNwgbpVDfk237/Ko7SSGiSto4=
Subject key identifier: E1:AE:2C:0E:5C:3A:74:50:23:EF:08:3A:45:DB:33:5B:D3:92:B8:52
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571031968C1B688B342F7EB4E4CA3062B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4a4sDlw6dFAj7wg6RdszW9OSuFI.roa
Signing time: Mon 02 Jan 2023 05:45:06 +0000
ROA not before: Mon 02 Jan 2023 05:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206865
IP address blocks: 178.239.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:19:68:c1:b6:88:b3:42:f7:eb:4e:4c:a3:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1ae2c0e5c3a745023ef083a45db335bd392b852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:4a:84:e9:60:01:24:12:d7:5d:0c:f4:5a:
a1:0d:0f:ed:19:55:a1:01:88:98:0a:a4:4f:d9:7a:
e5:36:da:68:5d:10:87:af:54:19:93:7e:ba:11:a7:
fe:eb:d8:aa:ca:eb:86:a1:4e:a7:8e:4c:d2:0d:b5:
7b:ea:e5:88:5f:02:56:de:87:d1:54:8e:53:f7:8a:
23:a8:1f:1b:7c:a9:0e:fd:68:73:49:32:c9:d3:e7:
35:8b:b6:4c:2e:0d:7d:72:88:61:28:e0:2e:19:28:
f3:f9:41:dc:31:35:50:14:2a:cc:9d:1b:1b:78:3a:
51:d6:c0:3b:e1:0f:25:6a:6c:94:98:6d:4f:24:43:
e2:bb:00:81:3e:28:ab:a2:12:68:21:95:c0:89:0c:
75:57:c3:a6:f3:c4:72:1a:c1:27:39:bb:66:62:2f:
10:19:fa:75:fe:fb:77:09:43:a6:e5:72:28:ea:26:
3e:3c:3b:d9:c3:07:12:f1:ff:b6:dc:5c:40:2a:2a:
b7:2a:5e:f8:59:19:7e:57:49:dd:02:54:5d:69:21:
95:46:15:0a:f7:47:f2:bf:a7:83:f6:42:c3:04:5d:
6f:61:57:0a:ce:ec:f9:b1:e7:d7:70:61:3f:9c:e9:
35:93:4d:7d:71:a3:26:84:77:db:b2:f9:ba:d8:ef:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:2C:0E:5C:3A:74:50:23:EF:08:3A:45:DB:33:5B:D3:92:B8:52
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4a4sDlw6dFAj7wg6RdszW9OSuFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.199.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b1:ad:42:1c:5c:a6:41:a0:d0:fe:8e:91:c9:bd:c1:64:47:
d1:87:2a:13:5b:3b:33:f7:d9:01:34:f8:4e:6d:e8:09:74:6f:
b0:53:28:76:b4:7c:d5:8d:04:03:aa:2b:3e:47:9b:f3:bf:1f:
38:fa:32:ca:43:3a:aa:ea:83:6d:f0:fc:75:7e:a1:53:55:2a:
7a:15:2e:e3:5d:67:d3:9e:41:92:ba:dc:61:52:13:30:5b:ad:
ce:f0:81:7b:5e:39:6e:6a:70:1e:1a:e4:d3:e3:56:28:3b:98:
7b:9c:84:98:14:8a:18:3d:5c:df:55:62:b4:ec:fe:8a:1f:91:
54:57:06:80:a2:a9:66:0b:68:3c:db:79:34:4c:38:52:57:9c:
34:07:0b:94:6e:53:0b:52:06:48:e9:07:ea:b8:bb:f9:e4:d5:
94:85:ca:f4:ec:4e:b3:12:11:0c:54:41:e9:95:f3:14:e2:5b:
4b:e3:20:07:15:97:3d:50:c8:50:b3:bb:d6:06:f4:e2:0c:0f:
c6:bd:47:d8:41:61:43:ce:d0:e7:12:dd:ed:a3:c9:f3:3e:75:
0b:b1:f8:69:dc:6f:e6:b6:f3:f5:aa:7c:16:c3:08:a0:1a:f7:
2a:b8:f2:53:4a:80:f5:82:50:d6:77:a0:2f:37:5d:8b:04:06:
d9:d1:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org