Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/kLCVCQt8xPznFLBWSIrX_24VX_s.roa
File: kLCVCQt8xPznFLBWSIrX_24VX_s.roa (raw, json)
Hash identifier: kN63ovTAwR5PFBFLgPxAGvecU7TmYamPjJU09ULEcTk=
Subject key identifier: 90:B0:95:09:0B:7C:C4:FC:E7:14:B0:56:48:8A:D7:FF:6E:15:5F:FB
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBBAD83D8B54F79CDA9ECD37345AF3
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/kLCVCQt8xPznFLBWSIrX_24VX_s.roa
Signing time: Mon 02 Jan 2023 05:37:03 +0000
ROA not before: Mon 02 Jan 2023 05:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 178.251.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ba:d8:3d:8b:54:f7:9c:da:9e:cd:37:34:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90b095090b7cc4fce714b056488ad7ff6e155ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:2c:28:05:79:75:c2:92:22:dd:93:50:68:
62:64:56:26:23:66:69:22:0d:73:21:f2:d6:a6:2a:
d4:2c:fe:cb:ee:0c:f2:bb:9e:a0:ed:d9:cf:14:65:
7b:b8:69:23:1c:7a:08:08:12:43:64:52:39:75:31:
10:dc:fb:22:40:60:b2:0c:99:02:a1:92:5c:0a:7b:
9c:04:ad:77:48:c4:bf:ae:7d:d9:3e:28:eb:d9:23:
09:1c:e7:01:74:2f:da:39:00:1f:0b:99:da:c3:38:
41:b5:12:d0:7b:a4:95:7f:21:dd:a3:8b:aa:23:70:
9f:dc:dc:54:6f:93:dd:1f:d7:1d:42:fa:a1:6e:a4:
f9:76:75:9b:9d:6a:52:cb:b4:63:71:36:64:62:25:
26:6e:36:99:36:7e:0f:7d:c5:5f:f2:f8:d0:3e:f0:
37:69:ce:e8:6e:21:70:5e:9c:7b:85:86:3d:32:be:
a7:1c:d3:0c:b0:6f:52:d0:24:4d:13:2d:e3:87:e0:
35:2b:9c:c7:66:57:26:c8:0e:69:d8:44:d6:3e:a9:
4d:b2:ec:64:1e:0c:d0:3f:85:5f:fd:94:39:7b:c7:
11:99:25:14:39:07:b2:51:46:b6:6e:98:a6:79:85:
be:2a:e0:d0:00:c2:c6:46:a8:7b:7c:0c:d2:2d:c9:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:95:09:0B:7C:C4:FC:E7:14:B0:56:48:8A:D7:FF:6E:15:5F:FB
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/kLCVCQt8xPznFLBWSIrX_24VX_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:eb:0a:8c:e1:f4:d8:16:d3:75:dc:62:5f:69:ae:44:f0:b0:
af:92:b6:da:1b:ef:55:2d:da:91:5c:26:1d:74:97:19:1e:b7:
fb:e5:f3:84:30:bc:8e:85:4a:bc:7f:8c:8a:a3:0b:1c:a1:8c:
41:cf:6b:85:36:2f:0f:a8:5a:fe:05:05:97:af:20:97:68:6d:
03:95:76:0a:06:32:d4:89:3d:ff:7f:5f:0d:40:6b:10:9d:fb:
b8:a3:9c:67:76:dc:fb:9d:c3:79:c5:09:8b:bb:72:85:20:f3:
0f:1c:d6:ae:fb:5c:0c:62:cb:bc:8d:3b:57:dd:db:9d:04:86:
7a:47:b3:77:20:0f:2f:f4:ea:f7:82:1a:16:32:43:79:d8:e1:
a8:41:fa:f5:14:4f:49:4b:a1:4b:5a:25:d4:b8:29:74:47:d7:
14:eb:52:e2:06:bd:09:eb:25:77:1c:61:6a:5e:61:56:be:45:
1c:38:c6:3a:cd:0a:96:c2:f7:1c:b2:3f:7d:cd:53:82:f9:60:
0b:c8:42:60:81:30:64:10:0d:c3:1f:0d:a7:6d:a4:69:12:44:
78:90:90:55:39:f8:76:cd:d0:24:21:7c:72:bb:80:1f:15:08:
8d:28:47:49:30:24:4c:50:0c:a8:33:cf:87:95:57:e1:3b:1c:
89:d4:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:57 2024 by rpki-client on console-ams.rpki-client.org