Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/1GneG6mBBR5WYXjk_HP7WIL7hKE.roa
File: 1GneG6mBBR5WYXjk_HP7WIL7hKE.roa (raw, json)
Hash identifier: p4Mab2L+INmkBLUnXxGIXK16eDr/tRU2pyMafvvo+V4=
Subject key identifier: D4:69:DE:1B:A9:81:05:1E:56:61:78:E4:FC:73:FB:58:82:FB:84:A1
Certificate issuer: /CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Certificate serial: 018C8DE3617D19B0D818E67C515601CD4752
Authority key identifier: DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/1GneG6mBBR5WYXjk_HP7WIL7hKE.roa
Signing time: Thu 21 Dec 2023 19:38:58 +0000
ROA not before: Thu 21 Dec 2023 19:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 178.211.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:e3:61:7d:19:b0:d8:18:e6:7c:51:56:01:cd:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Validity
Not Before: Dec 21 19:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d469de1ba981051e566178e4fc73fb5882fb84a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:d0:1d:d7:a4:ea:98:51:e2:e4:81:39:f5:
e0:d3:d0:08:25:57:2a:60:03:59:87:a5:b0:31:b8:
8a:33:58:64:90:a7:fb:18:22:28:05:5e:83:87:f4:
8c:1c:91:14:21:60:44:a9:7a:4f:c0:a8:ee:b1:0f:
9d:dd:69:e4:ff:41:58:bc:e8:86:7e:af:d2:78:30:
7c:45:1d:1c:d6:31:c7:91:5a:e5:87:ef:ee:08:c1:
50:92:7b:1c:e4:2c:6e:94:49:c8:1f:e0:16:7c:10:
27:ac:56:26:b3:cb:82:65:d8:ad:0d:53:32:fd:02:
99:de:2f:22:0c:f0:4a:bb:47:10:ec:11:2a:b1:84:
7d:ea:d7:42:33:c6:f0:97:84:31:db:47:f3:79:8e:
9e:3f:e5:95:35:b6:41:43:cb:ed:ce:55:b6:91:31:
d1:a8:e9:29:f4:e0:aa:6d:9e:48:3a:87:74:e7:97:
3a:5d:c6:7d:a2:12:5d:4a:55:1f:c9:25:5b:ed:a6:
be:ff:8c:84:8e:bb:cf:3f:4a:0c:2e:0a:e1:5e:6f:
ee:00:63:85:73:7a:dd:34:79:8a:99:95:8b:85:56:
68:fe:8d:85:c5:6c:bf:6e:94:d9:45:3c:d5:b9:c5:
e7:87:24:b7:cf:21:bb:9a:3c:36:9a:19:b8:ad:15:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:DE:1B:A9:81:05:1E:56:61:78:E4:FC:73:FB:58:82:FB:84:A1
X509v3 Authority Key Identifier:
keyid:DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/1GneG6mBBR5WYXjk_HP7WIL7hKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:45:79:0f:f9:39:e8:18:3d:65:f1:e2:82:6a:7c:da:45:a6:
8c:29:0c:9f:e2:78:f0:57:ec:16:9d:f2:e4:6d:92:ff:57:d4:
41:40:f1:36:cf:0d:a7:69:d2:16:a1:1d:0d:e6:b7:69:46:14:
9b:09:54:72:57:df:2e:46:37:31:03:85:8f:55:18:6b:ea:5a:
74:2a:20:d6:00:4b:b8:28:00:85:06:24:fc:29:5a:ff:b7:1a:
7c:89:13:e2:a2:5f:95:c2:65:6f:fa:3b:be:1c:c9:59:3e:a4:
03:97:49:22:8a:95:d5:a7:c9:7f:ff:07:18:b3:a4:f1:6b:da:
09:32:0a:ed:74:8e:e9:e0:7a:bb:01:d1:9a:e5:8a:58:22:26:
9a:14:e3:78:25:20:e0:35:8d:ad:62:3e:d6:5b:43:e5:a2:a4:
24:2e:17:8b:ae:ae:9c:66:8b:49:17:b4:88:b7:c5:89:62:fc:
29:ee:06:a1:9e:82:4a:b3:3e:d3:8a:64:87:2f:7e:26:8d:a0:
ab:d2:29:7f:9f:7c:d3:a6:16:7d:c6:80:3e:d2:3a:ac:31:f6:
09:66:52:6f:33:eb:f7:bb:32:a3:00:ce:57:59:80:4d:4e:1a:
cf:ed:64:1b:7b:f2:25:d1:35:b7:29:b7:44:60:56:be:6b:58:
a5:14:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:45 2024 by rpki-client on console-fra.rpki-client.org