Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/U-lAZG8_e0oBadDk7vKguwc2_9c.roa
File: U-lAZG8_e0oBadDk7vKguwc2_9c.roa (raw, json)
Hash identifier: V9rDtK1e0T9j5amQwkCV5FIDWd2dQabXQ9T+gb7b8Ko=
Subject key identifier: 53:E9:40:64:6F:3F:7B:4A:01:69:D0:E4:EE:F2:A0:BB:07:36:FF:D7
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01857169B49A6A0A5559FD532B2AAAE28B6B
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/U-lAZG8_e0oBadDk7vKguwc2_9c.roa
Signing time: Mon 02 Jan 2023 07:37:10 +0000
ROA not before: Mon 02 Jan 2023 07:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136714
IP address blocks: 178.248.112.0/22 maxlen: 24
178.248.118.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b4:9a:6a:0a:55:59:fd:53:2b:2a:aa:e2:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jan 2 07:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53e940646f3f7b4a0169d0e4eef2a0bb0736ffd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:44:f3:1d:d2:c5:94:f8:19:60:f8:29:14:
52:f2:75:bf:14:49:59:f0:2d:26:14:e9:f5:26:5d:
77:c9:c0:cd:22:42:b5:0e:4d:2a:3f:fd:ba:d5:50:
68:86:54:9b:c3:9a:85:b6:8c:80:4e:29:c5:68:22:
fb:c4:a3:3e:d2:05:99:1a:25:3e:12:98:87:7f:a9:
c8:79:49:0e:99:6f:7b:9f:ee:94:5a:eb:f1:94:85:
23:49:79:f7:f5:04:0e:15:a4:33:b2:fa:03:09:39:
22:3f:1f:ec:bf:ce:6e:90:8a:fe:b2:6e:a8:94:49:
1c:4d:ef:23:17:de:6b:7c:1b:24:bc:0e:76:d1:a9:
42:dc:c2:3c:11:3e:66:af:54:34:95:ae:eb:d0:c5:
18:f9:35:4b:20:62:c0:c5:cf:c2:9a:2d:a9:38:34:
5c:e0:a8:d3:72:dc:0d:46:4c:73:2c:c1:1e:81:8f:
ed:37:bf:93:29:61:df:2e:74:3a:9c:bd:c8:b1:3f:
2e:1a:b9:60:37:f2:e6:11:61:06:c5:10:c2:7b:d6:
4b:09:2e:cd:20:c8:fb:25:11:11:ef:52:6f:ac:00:
81:e5:a4:0b:0e:94:08:f3:be:80:2a:e9:8c:b2:ab:
8c:50:86:96:b2:1d:a2:37:e6:c4:b7:f1:e8:2c:bb:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E9:40:64:6F:3F:7B:4A:01:69:D0:E4:EE:F2:A0:BB:07:36:FF:D7
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/U-lAZG8_e0oBadDk7vKguwc2_9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.112.0/22
178.248.118.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:10:cd:0c:d3:a8:e8:a8:a1:bc:dc:7c:bf:7b:65:95:e7:19:
66:87:59:c9:68:89:87:b8:c2:2d:68:a7:ea:5c:d1:0b:75:84:
75:05:4b:1b:c1:e3:f7:6e:f7:21:82:5a:e1:17:c2:1f:cb:17:
d2:8e:37:0a:98:82:ef:a4:17:70:14:8c:28:5b:6a:e6:45:db:
7e:cf:40:77:09:1c:83:b0:40:b5:2c:5d:56:b6:5b:f6:c1:48:
7d:dc:07:28:51:a9:2b:9d:bd:0d:e2:1e:40:58:cc:00:79:f7:
df:14:c1:12:1b:38:9e:6d:7c:75:8f:49:98:76:46:46:00:85:
c4:5e:9a:f8:01:f2:0c:26:a4:26:7c:49:d4:c6:d8:f3:e5:96:
20:93:32:9e:7c:14:64:80:11:f1:b0:e9:7c:5b:6a:7d:7e:fc:
75:d4:ea:c3:f3:86:34:43:8d:ff:1f:71:f2:fd:ec:ea:40:f4:
be:f7:f0:6f:8f:d6:12:3b:44:f2:7f:53:9e:f3:e3:fd:90:1a:
e3:19:6d:6b:60:11:05:94:16:d2:63:11:08:dc:d5:e8:26:86:
93:c4:cb:0e:35:88:f5:cb:c5:51:d3:e6:fa:35:87:3b:a7:f1:
ec:71:65:61:60:8a:48:38:ba:5c:05:8a:8e:a2:bb:a2:cd:53:
af:03:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:18 2024 by rpki-client on console-ams.rpki-client.org