Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/H9grEVXkEYSoJAJmTft-nWwY1Cw.roa
File: H9grEVXkEYSoJAJmTft-nWwY1Cw.roa (raw, json)
Hash identifier: swnCvv03TtM/JP1NWTkZ+/yBPwQY8BdThdmSweEz8YM=
Subject key identifier: 1F:D8:2B:11:55:E4:11:84:A8:24:02:66:4D:FB:7E:9D:6C:18:D4:2C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0187E242D457085EC0BB2321F364613E0ABD
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/H9grEVXkEYSoJAJmTft-nWwY1Cw.roa
Signing time: Wed 03 May 2023 15:37:23 +0000
ROA not before: Wed 03 May 2023 15:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200209
IP address blocks: 178.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:42:d4:57:08:5e:c0:bb:23:21:f3:64:61:3e:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: May 3 15:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fd82b1155e41184a82402664dfb7e9d6c18d42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:d5:c3:f4:57:5a:57:9e:a2:67:51:ba:1c:
b2:06:7a:8d:32:b6:86:e8:aa:bc:ba:6f:19:95:f5:
b0:97:0a:89:d9:0b:83:8e:bb:53:a3:23:91:3f:e2:
4a:24:42:27:31:0c:34:7c:ff:9e:a5:61:62:8c:79:
16:3f:62:b0:4e:fc:27:b6:0b:5b:4b:cb:9d:83:e4:
92:86:11:19:3b:5a:d4:4f:23:6b:98:71:d4:ed:d1:
88:04:32:02:d4:6d:31:47:38:07:cd:83:c8:05:ee:
81:42:1a:fe:4e:89:6e:ea:5a:05:f1:0f:73:f2:45:
76:14:50:ac:42:4a:c3:35:a6:97:99:a3:36:21:4f:
b3:69:51:8d:f5:03:52:69:ec:4e:b3:71:5a:66:d5:
d0:7a:6e:22:1e:e5:42:f4:6e:ba:4d:39:d9:00:bf:
47:a5:09:9f:f1:5a:d1:c4:02:94:dc:04:bb:29:c6:
d6:3e:a0:92:47:29:dc:6f:8f:6d:a0:0c:cc:b3:09:
d9:88:6f:a1:00:4c:8e:75:ad:43:37:cc:91:0e:7c:
83:67:34:6b:01:5d:2f:2c:45:38:fc:74:38:08:c3:
65:16:c5:4d:ea:5d:c1:1e:d7:58:f9:82:a8:95:15:
7f:44:d2:31:f2:f7:5a:89:87:68:9f:d2:bd:40:77:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:2B:11:55:E4:11:84:A8:24:02:66:4D:FB:7E:9D:6C:18:D4:2C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/H9grEVXkEYSoJAJmTft-nWwY1Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ab:bc:92:95:8e:ed:2f:ff:5e:6c:46:fe:b6:a8:e1:aa:b6:
46:02:10:aa:09:fa:c2:a7:38:3a:3a:1e:79:ee:57:90:e9:de:
fa:f4:4e:d5:52:da:c7:a7:4b:22:5f:2c:77:a4:0a:2d:1f:df:
77:dc:34:93:37:fe:8a:1d:d8:ec:c6:86:d5:33:ab:6f:d8:69:
fa:79:d7:c2:2a:f5:4c:7d:0d:ae:e3:09:c1:1c:67:f4:6d:f1:
87:b8:d1:69:a7:71:ea:5d:f8:da:8d:46:aa:4b:75:b1:05:08:
bd:11:46:16:04:c7:e9:60:f7:88:07:12:7b:4c:bd:87:d5:45:
9a:5b:f7:2c:f5:76:59:f5:2f:66:d7:21:21:bf:a1:24:8f:58:
10:e5:ab:d6:a8:37:6d:31:8c:5f:55:7a:2c:db:0f:31:9e:40:
a6:27:02:fd:db:1c:a2:fa:06:b2:b1:20:01:45:3d:64:e9:7a:
41:e3:f6:0a:1b:a0:c6:94:02:2f:be:73:69:d7:75:c9:95:08:
4d:c6:b2:1d:d8:06:81:76:80:91:78:2b:73:a5:7f:43:24:8f:
dc:f8:ce:5a:6c:73:21:fb:b1:d3:e4:df:ba:05:b5:44:c3:61:
96:5e:f3:ca:14:f6:ac:fa:33:ae:f5:88:3d:8d:15:05:73:ba:
55:c2:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:57 2024 by rpki-client on console-ams.rpki-client.org