Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/2ja-mzLI1FMlA5zNkoCOXf5v2Gs.roa
File: 2ja-mzLI1FMlA5zNkoCOXf5v2Gs.roa (raw, json)
Hash identifier: Wx/ARkKDqyhJy9kFoE45Abs9erPAcbWThE2WMwdsn4g=
Subject key identifier: DA:36:BE:9B:32:C8:D4:53:25:03:9C:CD:92:80:8E:5D:FE:6F:D8:6B
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 0185710C1B5CB4AED7939B17D6B78E662949
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/2ja-mzLI1FMlA5zNkoCOXf5v2Gs.roa
Signing time: Mon 02 Jan 2023 05:54:56 +0000
ROA not before: Mon 02 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62291
IP address blocks: 178.251.48.0/22 maxlen: 24
178.251.54.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1b:5c:b4:ae:d7:93:9b:17:d6:b7:8e:66:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Jan 2 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da36be9b32c8d45325039ccd92808e5dfe6fd86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:e1:fd:23:ad:3f:b5:0c:75:be:ea:07:5f:
a0:e1:f2:9c:d3:a6:fc:1c:e4:17:e7:d7:12:b6:f5:
8a:6b:32:45:d2:95:4d:44:24:26:52:dd:8b:02:1a:
45:82:da:bf:3f:9b:ce:88:47:30:97:39:5f:ef:78:
a5:35:61:3e:24:a2:56:5f:9e:fd:59:1d:8d:ae:0d:
74:e7:32:ba:bf:f0:60:97:99:ca:b8:1e:91:f2:00:
f3:ab:77:c3:25:ea:51:fb:8c:a5:c1:1a:e6:9c:f7:
fa:28:1a:3e:cc:08:13:32:39:d3:e6:ce:a7:df:06:
0b:30:7e:de:84:33:4b:0c:f9:cf:e7:72:e2:a8:a0:
4d:7e:22:80:60:d4:db:49:f6:65:cb:59:b7:08:5f:
42:5e:c3:b8:bb:b9:f4:35:44:05:a5:92:db:f6:2a:
cc:bd:86:f6:17:7d:bb:7a:6f:c2:ce:e3:de:a6:b6:
1b:e3:05:56:6e:c8:e2:37:3a:9c:d6:93:9c:93:2b:
bf:10:20:fc:1d:ec:60:02:bd:b9:a0:a4:af:21:6b:
c7:cb:6a:da:d9:48:2b:1d:20:81:e4:83:21:ce:58:
f8:12:fe:d1:eb:9a:23:4d:66:d9:09:ea:8f:f9:2b:
83:62:0f:d0:39:58:10:12:58:a9:21:16:ed:d9:e2:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:BE:9B:32:C8:D4:53:25:03:9C:CD:92:80:8E:5D:FE:6F:D8:6B
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/2ja-mzLI1FMlA5zNkoCOXf5v2Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.48.0/22
178.251.54.0/23
Signature Algorithm: sha256WithRSAEncryption
77:37:0f:47:2c:4b:15:91:f3:0e:14:4f:b2:db:35:ff:7a:01:
74:e4:8b:96:39:73:6d:66:63:3d:68:66:93:21:09:19:40:ee:
88:c0:18:7e:4c:5a:b1:70:3d:97:b7:b3:68:4d:7d:73:57:af:
29:56:bd:93:93:b0:1c:c2:ca:8e:e8:37:80:b0:b1:e7:bb:11:
5c:04:4e:45:b1:33:1d:c5:82:5b:ec:ba:d1:f9:36:02:0d:38:
d8:65:78:b4:bf:b6:ae:00:8f:75:d2:94:37:43:f7:c0:5d:fc:
83:93:b6:86:35:cf:a7:67:cc:aa:c8:d9:71:87:9e:e3:1a:63:
22:fe:41:69:f2:96:2a:f9:71:f8:6d:27:4f:25:de:7f:62:73:
77:29:1e:05:11:cb:c3:f1:f9:96:ad:fc:86:7f:b8:5a:50:3e:
6b:0d:15:4b:fd:e1:52:59:84:7e:38:ea:09:55:30:ef:56:19:
87:66:6a:1f:df:09:a3:27:b0:75:50:5d:4b:66:80:a2:8c:d1:
72:bb:af:7e:bf:08:88:0c:4d:86:48:84:34:49:1b:85:78:70:
ce:9f:85:4c:13:d5:36:e5:9e:bf:f3:e9:34:fd:9a:2c:e4:dd:
71:b7:ff:7d:d6:79:f5:7d:1d:41:52:e8:f8:a6:2a:9f:da:4b:
31:76:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:57 2024 by rpki-client on console-ams.rpki-client.org