Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/xN5OKXd-ipf9N9fo6s6rhvn6jnE.roa
File: xN5OKXd-ipf9N9fo6s6rhvn6jnE.roa (raw, json)
Hash identifier: TY3PMboeMxv7KWzACMpQR4PqkVuaYA8XtOkQyEOxqYg=
Subject key identifier: C4:DE:4E:29:77:7E:8A:97:FD:37:D7:E8:EA:CE:AB:86:F9:FA:8E:71
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 0186B8B69CD9E3D7612E2EF70AE688EF4022
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/xN5OKXd-ipf9N9fo6s6rhvn6jnE.roa
Signing time: Mon 06 Mar 2023 20:57:00 +0000
ROA not before: Mon 06 Mar 2023 20:57:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43554
IP address blocks: 178.209.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:b6:9c:d9:e3:d7:61:2e:2e:f7:0a:e6:88:ef:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Mar 6 20:57:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4de4e29777e8a97fd37d7e8eaceab86f9fa8e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:91:93:44:80:e9:3a:15:17:2f:74:3a:b2:
d3:3d:1d:a2:58:92:0a:83:9e:28:f3:f9:23:80:5f:
b5:23:ac:c1:c8:47:e8:0c:b3:bc:81:b5:6c:3b:41:
6a:3a:89:f2:a6:8c:ae:e0:35:59:d9:55:80:9e:50:
00:7f:2f:f1:e4:63:68:04:2e:fa:72:56:ce:49:81:
59:1e:3f:f4:93:0a:24:3d:12:07:82:9d:b1:de:53:
72:6c:a1:47:11:22:9b:48:b5:5c:02:08:8d:5a:e4:
a7:55:38:f7:bc:6b:e4:78:00:14:45:40:1b:33:86:
dd:26:6f:75:57:f0:52:d8:98:e0:53:36:57:21:61:
90:5c:c2:6c:81:72:45:dd:c2:a3:35:d2:3f:68:9b:
01:39:49:f3:07:f9:4a:32:45:e5:0a:72:d1:11:7d:
17:0a:fd:c4:fc:fb:f7:cc:2a:67:ae:9e:85:68:f7:
54:06:00:6a:c1:5e:4f:6e:03:f2:6c:f3:c6:83:c4:
34:0b:c3:87:0d:7c:bc:50:c0:eb:53:1d:77:d3:04:
b0:7f:f6:3f:dc:43:71:9b:74:44:b8:c4:1d:f1:d3:
f3:41:ba:33:e5:0e:1e:17:9d:78:9b:94:5a:54:fe:
5e:02:3f:d1:ea:1f:3c:c4:72:0b:0d:34:3f:f2:0f:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DE:4E:29:77:7E:8A:97:FD:37:D7:E8:EA:CE:AB:86:F9:FA:8E:71
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/xN5OKXd-ipf9N9fo6s6rhvn6jnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
62:cc:4c:fb:90:c8:88:85:95:d1:2a:84:c8:78:84:15:23:e4:
b5:43:67:fa:e2:6b:cc:5c:c1:8e:e1:b6:f7:cc:85:37:99:64:
a3:1b:be:04:44:45:2f:ba:c4:f3:5d:bb:bd:02:66:1e:9d:c9:
cc:7e:d4:3d:c8:d6:13:f1:4a:30:0d:c0:21:e6:be:fb:a2:28:
f7:0c:0b:a9:6c:2b:3d:fc:21:c8:59:98:cd:72:8c:72:ce:3e:
67:1f:b7:4e:52:84:5e:49:9d:46:66:a7:48:99:bb:b5:b3:31:
61:c8:52:3f:21:65:20:83:25:4e:5c:46:4d:f4:4e:d3:61:6b:
83:b9:c1:1e:6d:ec:c2:0e:71:15:dc:3a:42:a0:a9:3b:28:41:
3f:48:e3:1d:62:7b:b6:31:b3:03:d9:5a:9b:e3:c3:b8:ab:04:
f4:26:e9:8a:1e:ff:fd:a5:33:50:86:85:c2:fc:61:b5:15:e7:
0a:e2:9f:f4:85:4b:f2:c0:88:d9:b3:2e:24:b0:a2:89:3a:eb:
c7:8c:33:a1:31:38:f6:6f:76:ab:96:9a:d1:c1:ab:54:2b:f1:
2e:72:ac:0f:37:f9:92:bd:d8:d9:99:a3:ff:11:65:7e:7f:39:
a4:55:49:af:59:e1:1e:7c:65:9e:c8:b6:d8:1a:ff:bd:7b:15:
6d:c0:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:20 2024 by rpki-client on console-ams.rpki-client.org