Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/oZZoaR3srxXM9CAdrtsmfe9J5EI.roa
File: oZZoaR3srxXM9CAdrtsmfe9J5EI.roa (raw, json)
Hash identifier: jdo8Z8AbMV1XANM+Eg73+z2it72Z41YI9KphVuIKc+w=
Subject key identifier: A1:96:68:69:1D:EC:AF:15:CC:F4:20:1D:AE:DB:26:7D:EF:49:E4:42
Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial: 01856DB8750062916240F391E83001FB757C
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/oZZoaR3srxXM9CAdrtsmfe9J5EI.roa
Signing time: Sun 01 Jan 2023 14:24:42 +0000
ROA not before: Sun 01 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50655
IP address blocks: 178.20.168.0/21 maxlen: 21
178.20.174.0/24 maxlen: 24
2a00:1d38::/32 maxlen: 32
2a00:1d38:fa::/48 maxlen: 48
2a00:1d38:feed::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:75:00:62:91:62:40:f3:91:e8:30:01:fb:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Validity
Not Before: Jan 1 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19668691decaf15ccf4201daedb267def49e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:c2:4b:f4:c2:ce:1c:81:05:f6:0f:08:24:
ae:d2:96:ef:dc:0b:96:57:bf:90:55:72:98:f6:98:
8e:de:9e:21:ce:8f:89:83:c7:26:c8:50:9e:e3:82:
c4:ad:ac:6e:1a:b7:2e:11:71:8b:c2:ae:d7:15:57:
26:f5:b4:46:c4:d7:59:f7:06:05:de:4f:f6:e3:b6:
63:6e:83:7b:cc:06:9b:52:c8:b5:92:03:07:e9:cf:
ca:f3:9b:af:f7:06:9b:31:cc:93:81:ca:2c:00:71:
ad:36:1e:e5:7e:b4:a0:80:bb:f0:22:98:dd:91:1e:
b1:19:f6:4d:fd:ea:99:ea:d7:7c:26:6b:54:0b:4b:
fc:8e:28:46:e1:e6:da:a5:a5:97:12:af:7d:26:62:
5e:3f:9c:c7:4b:cb:3d:5c:8d:38:d4:32:8d:06:bb:
0b:4c:24:6f:1a:ec:7a:8e:ea:7d:fd:69:0d:c8:2c:
56:ad:f2:74:9a:1c:4d:37:2a:10:c4:be:79:20:51:
b7:e2:67:c3:7b:79:37:cf:6b:89:49:05:cd:97:19:
e2:74:b6:8d:1d:e3:68:24:8f:69:0e:e0:31:00:1f:
67:c5:bc:35:05:2b:cb:8d:c0:00:d6:86:47:28:a9:
6e:18:9e:a8:0a:ad:c0:71:8b:4e:d6:bf:ed:1f:28:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:96:68:69:1D:EC:AF:15:CC:F4:20:1D:AE:DB:26:7D:EF:49:E4:42
X509v3 Authority Key Identifier:
keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/oZZoaR3srxXM9CAdrtsmfe9J5EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.168.0/21
IPv6:
2a00:1d38::/32
Signature Algorithm: sha256WithRSAEncryption
70:af:77:47:8e:f8:9e:b2:17:ea:05:c9:53:38:0c:a0:d5:30:
b1:f2:96:ab:02:38:de:2c:9b:d0:91:82:63:47:40:3c:ee:2b:
75:9b:d5:49:39:a9:9b:97:55:da:26:8e:dd:77:59:3f:98:ef:
99:d5:43:c4:4b:51:10:d5:7c:6c:be:0f:44:e1:a1:f8:30:ef:
b0:bc:e6:09:04:ce:d5:68:56:71:1e:33:37:cf:d7:7c:ab:21:
11:e5:ad:87:d0:d5:e1:a2:29:75:f4:3e:6e:de:4b:bf:f5:94:
0a:04:2c:79:78:a8:da:7e:db:a1:ed:82:bd:5b:33:86:ac:76:
e7:06:f2:49:7c:ad:24:51:2c:09:07:17:95:b3:8d:92:42:11:
de:a9:38:dd:b0:20:dc:86:59:39:5d:dc:1d:d6:63:61:9f:6f:
16:65:55:df:ac:1c:1a:4e:f7:8b:3e:fc:92:7e:4d:c1:71:76:
51:68:97:40:42:6a:15:6d:9e:8b:be:1d:56:5e:f0:5f:97:c2:
5f:3d:a6:dd:d9:ab:9c:20:54:51:96:04:9a:eb:b3:c9:f7:f7:
da:6d:6f:b7:70:d2:53:49:28:e8:5f:fc:42:c1:e6:ac:e7:5b:
e9:77:3f:5c:d9:d2:61:19:cf:43:10:ac:2c:86:a0:0e:71:4c:
84:d6:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org