Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/B-5fKeHxHAq2wrXrOdJexiK6tJk.roa
File: B-5fKeHxHAq2wrXrOdJexiK6tJk.roa (raw, json)
Hash identifier: pwuDFeQk2MUjWkov2xBadD7t5C6E0Bzh5/TF8TnQhJc=
Subject key identifier: 07:EE:5F:29:E1:F1:1C:0A:B6:C2:B5:EB:39:D2:5E:C6:22:BA:B4:99
Certificate issuer: /CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Certificate serial: 0185728C751C5904275064845D71A2A2A80B
Authority key identifier: DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/B-5fKeHxHAq2wrXrOdJexiK6tJk.roa
Signing time: Mon 02 Jan 2023 12:54:45 +0000
ROA not before: Mon 02 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 178.211.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:75:1c:59:04:27:50:64:84:5d:71:a2:a2:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Validity
Not Before: Jan 2 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07ee5f29e1f11c0ab6c2b5eb39d25ec622bab499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:db:24:10:22:96:79:ed:6b:e0:6a:88:09:
3c:a5:a8:75:f3:07:eb:ca:d7:fa:db:79:cc:5b:f8:
74:f7:91:bc:e1:64:65:ba:36:1c:4e:af:a9:09:b4:
d4:95:82:6f:ff:cb:59:c0:84:98:63:3e:50:99:1d:
6b:c8:14:35:df:1c:9c:b4:28:45:dc:2b:94:ce:ff:
1e:53:fb:c1:e8:35:f4:56:44:85:8c:af:27:b9:b2:
30:4f:1c:73:85:7c:89:32:6d:b4:54:ff:0d:f5:d5:
9e:4f:40:8d:e8:19:ae:f9:65:89:27:8e:46:bb:31:
1f:7e:04:df:95:a0:52:6f:14:ea:0f:da:1e:4f:75:
e1:0d:de:5c:e6:3f:7c:f2:00:d0:cb:4b:03:b8:53:
2e:6d:0a:74:6d:03:2a:96:be:d3:d1:0f:2a:a4:e7:
65:4d:fa:d7:b5:21:d3:1c:cb:4e:63:d8:33:d0:ef:
b5:08:18:f0:14:9a:0c:93:10:c5:33:14:14:d1:37:
88:19:d9:71:06:20:93:ea:e4:4b:3a:c7:76:bc:67:
7e:93:e5:93:8b:0f:89:10:78:5a:20:1b:1e:c8:aa:
41:41:76:0b:fd:d1:eb:0b:4d:9f:3e:11:f6:d4:dc:
5f:13:64:ef:c1:bc:64:13:30:6b:74:a8:41:00:e5:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:5F:29:E1:F1:1C:0A:B6:C2:B5:EB:39:D2:5E:C6:22:BA:B4:99
X509v3 Authority Key Identifier:
keyid:DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/B-5fKeHxHAq2wrXrOdJexiK6tJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:04:05:43:b7:36:e6:ea:11:a4:20:fb:be:ce:34:6f:c3:5c:
0e:03:da:08:f7:e8:c2:6d:12:b1:28:0d:a2:bd:d2:14:f6:08:
5f:57:fb:77:49:b0:49:ff:8c:c7:73:d7:36:9e:1f:a0:22:e6:
fa:50:3a:33:c8:ee:33:a9:17:46:ff:24:22:7d:bd:80:4d:97:
88:7d:3c:4b:1d:50:1f:c4:b7:02:2c:47:e1:2b:64:30:a9:62:
a2:f5:04:29:e6:52:76:87:5b:2e:09:84:f2:8b:4a:84:bc:0a:
68:b6:e1:8f:7d:5e:d5:18:d4:89:3e:4a:ab:4f:5d:46:ad:18:
53:ae:d7:9c:c9:bf:54:87:fa:f8:ef:27:7c:99:2f:22:1a:11:
4f:1a:a8:b6:e9:e9:ca:30:a3:32:6d:27:93:07:c0:53:14:c8:
2a:73:56:53:af:36:50:07:34:97:3d:82:d0:d5:8b:cc:0e:20:
74:d0:ab:8e:91:36:cf:3f:ad:a5:15:dd:22:8e:b2:57:72:3a:
e8:d6:55:a7:48:d6:55:b7:01:fc:c6:3f:34:2c:05:64:61:9e:
8c:37:94:b1:b4:70:56:02:13:08:01:ea:cb:39:68:b8:15:43:
e2:8d:9f:a8:2c:3a:c9:01:6e:77:c0:23:86:81:df:71:b7:a4:
22:98:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-ams.rpki-client.org