Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/u981zKrM20CAjAhQsOq9dyy3pJc.roa
File: u981zKrM20CAjAhQsOq9dyy3pJc.roa (raw, json)
Hash identifier: 6lic7rephJf9vhTHh/tZ7jOmbmiiaiDaLNYF/0LwLNo=
Subject key identifier: BB:DF:35:CC:AA:CC:DB:40:80:8C:08:50:B0:EA:BD:77:2C:B7:A4:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 018BB373DF5E0A26E641CF2F0027B3976913
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/u981zKrM20CAjAhQsOq9dyy3pJc.roa
Signing time: Thu 09 Nov 2023 09:39:57 +0000
ROA not before: Thu 09 Nov 2023 09:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 178.251.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:73:df:5e:0a:26:e6:41:cf:2f:00:27:b3:97:69:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Nov 9 09:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbdf35ccaaccdb40808c0850b0eabd772cb7a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:1c:1f:db:ea:17:e0:24:4d:27:2c:51:01:
4b:13:2c:b1:bd:d5:8e:54:d3:91:d5:fd:3f:5a:44:
c3:1b:d6:69:b9:43:56:67:d0:04:33:6b:2a:04:f5:
79:b2:32:a1:10:a9:a3:b9:49:04:ef:40:06:d7:f1:
16:19:3b:9a:67:3d:b7:f9:a6:72:2b:07:27:cb:eb:
2e:35:8a:48:cd:03:79:6a:9f:75:72:f8:01:40:f0:
03:d4:81:9e:74:a9:b1:5d:10:14:da:c6:d1:ee:b1:
d7:51:2f:81:eb:a0:23:66:f7:25:b5:20:92:bf:a4:
24:89:b7:18:3b:4d:0a:74:13:a2:51:2c:61:3c:db:
41:9f:d0:3d:f8:4c:55:d1:bd:6a:dd:44:3c:52:7f:
81:c3:22:7f:39:11:1a:27:ea:8e:eb:13:2b:11:14:
77:b3:54:3a:a6:36:ff:84:65:58:97:b5:5d:36:41:
f9:6c:2a:a0:2d:d8:95:80:0b:4f:05:45:c5:d3:1f:
36:ea:87:97:30:f0:0d:35:7e:b8:db:70:51:87:ae:
1c:7a:3b:cc:94:4c:a7:59:4c:95:56:8c:af:43:69:
a9:74:cc:7f:fb:e3:93:96:4e:0f:c1:63:9c:ee:95:
3c:7f:e7:d4:5f:af:23:2d:4b:57:3b:b4:dd:cb:60:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:35:CC:AA:CC:DB:40:80:8C:08:50:B0:EA:BD:77:2C:B7:A4:97
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/u981zKrM20CAjAhQsOq9dyy3pJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
33:84:5a:9d:1e:1e:59:8b:fc:16:c7:c2:34:55:cc:38:63:da:
a9:bb:1e:db:5c:66:b4:10:c1:89:28:e8:14:00:83:f5:44:03:
1e:4c:27:df:2a:3e:b1:b1:a8:50:f5:9b:fc:0a:b2:1f:38:5e:
a0:af:9a:a2:c5:c2:fb:00:9e:30:85:af:54:fd:5e:3d:be:9c:
bb:3f:c0:b3:cf:35:3c:b7:6a:4b:93:6e:c9:e7:46:4e:46:e5:
1f:4a:44:d9:86:c8:ed:ba:56:3c:5e:ee:31:d3:d9:3a:b5:d1:
78:3c:61:7b:5a:b0:29:52:d3:6d:62:b3:d4:af:19:4d:76:c5:
3a:1c:66:1c:21:6a:6b:59:dc:7d:5c:d6:7f:4b:2e:cf:3e:3b:
f3:6d:94:0c:6a:2a:72:e1:59:cf:3a:d7:e2:26:3e:33:9d:40:
35:7b:0f:e9:cc:5a:a5:7f:b7:85:ec:47:88:90:f7:eb:56:48:
8d:b4:03:23:f6:38:b7:f0:e2:31:56:37:8f:71:cb:e8:3d:6c:
18:22:ac:a3:63:49:68:af:23:2e:9c:60:40:c5:ba:c5:99:34:
08:21:cd:db:f3:b5:56:e4:4a:01:7e:fa:b8:98:ee:73:52:08:
55:8a:f6:c6:20:71:86:1a:c3:c1:df:b9:87:ff:87:84:50:fa:
46:ea:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:05 2024 by rpki-client on console-ams.rpki-client.org