Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/gjE-qrKXzu1tHMyMyXTQCoWYaH0.roa
File: gjE-qrKXzu1tHMyMyXTQCoWYaH0.roa (raw, json)
Hash identifier: QiS6evl8f+0r6gTER4+qs/jD0AM9MtBFcZ0+eKd+e9A=
Subject key identifier: 82:31:3E:AA:B2:97:CE:ED:6D:1C:CC:8C:C9:74:D0:0A:85:98:68:7D
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01856E4B07903EBCFF13839E18CEA9062B10
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/gjE-qrKXzu1tHMyMyXTQCoWYaH0.roa
Signing time: Sun 01 Jan 2023 17:04:49 +0000
ROA not before: Sun 01 Jan 2023 17:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41847
IP address blocks: 178.251.179.0/24 maxlen: 24
178.251.180.0/24 maxlen: 24
178.251.182.0/24 maxlen: 24
178.251.181.0/24 maxlen: 24
178.251.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:07:90:3e:bc:ff:13:83:9e:18:ce:a9:06:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jan 1 17:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82313eaab297ceed6d1ccc8cc974d00a8598687d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:ee:f3:95:fb:e5:d3:f9:fa:ec:a6:67:d4:
5f:66:b5:60:3d:4f:cd:e9:54:ab:82:33:00:39:8f:
ab:5e:de:dc:5d:9e:ef:d0:71:8a:77:30:26:1e:d0:
80:68:8c:1c:66:2c:95:b5:0d:80:f3:07:cd:20:35:
a9:1f:11:0c:e3:27:c5:da:b0:2b:d9:53:e4:bf:92:
e0:03:a2:f9:ec:69:38:d5:fd:0c:83:8b:74:94:24:
d7:67:47:f2:ee:68:ea:c2:fe:a6:70:ad:36:77:67:
24:4b:f1:cc:4c:c4:ce:54:85:8d:c1:ad:aa:be:12:
f8:5e:f5:3a:ac:46:d3:96:b8:b9:5f:6b:f5:df:1f:
63:25:fd:17:eb:f5:9c:75:f6:f0:23:dd:95:70:5e:
ef:20:e3:af:24:24:c5:51:94:c8:40:97:5a:14:03:
a4:79:d3:d3:ff:8e:7f:de:69:8d:ad:5b:90:a5:47:
ea:21:87:85:9b:49:a2:e2:34:87:0f:10:96:24:a8:
38:17:52:3d:aa:9d:64:3d:9c:2a:a5:f8:68:fd:31:
6e:5d:3d:c5:fb:30:75:bc:78:5e:bf:1e:dd:c0:43:
7a:36:ab:56:24:3e:fa:4f:84:47:a2:57:8d:e3:fc:
a8:68:39:cc:1d:96:fd:7d:46:87:b3:57:29:5c:37:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:31:3E:AA:B2:97:CE:ED:6D:1C:CC:8C:C9:74:D0:0A:85:98:68:7D
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/gjE-qrKXzu1tHMyMyXTQCoWYaH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.179.0-178.251.183.255
Signature Algorithm: sha256WithRSAEncryption
30:1e:96:c7:82:8f:cb:58:25:3e:9e:06:e0:b8:9f:1c:40:71:
43:96:f1:f2:bc:c6:5c:5e:0d:a8:1c:a5:0f:00:93:ad:a2:eb:
32:51:ac:99:df:02:34:e1:75:9c:c9:87:66:ed:47:85:93:e8:
f0:15:85:0c:4e:bd:85:90:4e:b0:ba:cd:c3:6c:ba:d4:eb:c0:
00:c4:b4:69:54:55:61:0f:df:e3:9b:f0:e3:e8:18:31:46:3b:
20:29:a0:55:74:d8:94:e0:f2:49:b1:3b:86:98:df:83:56:21:
c3:09:c7:52:2a:53:54:03:29:cd:07:01:80:a8:48:5b:a9:74:
ec:e1:2d:83:68:11:bc:98:7b:ca:61:ca:86:c4:06:ee:b1:a2:
09:ef:3a:c6:74:c2:fd:1f:32:58:ce:d3:6e:c7:8e:55:29:f6:
9c:c7:dc:91:a1:46:0a:ca:dc:7d:88:5d:4f:05:27:e6:7a:69:
fa:82:c0:0c:7c:01:4e:05:e2:ce:63:35:b0:73:36:d9:7d:4e:
47:54:a4:dc:a4:87:ca:e0:a5:6d:62:ab:69:f0:9e:47:a9:92:
fd:dd:80:a3:c1:ba:06:02:c0:67:6e:0b:d2:2f:61:54:64:79:
ed:6d:56:49:ff:a5:48:0f:2d:cc:ab:b7:5d:1f:87:45:0a:65:
ad:d0:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:49 2024 by rpki-client on console-ams.rpki-client.org