Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/RogbABm9PlH5XXPdwkfF9UohZCU.roa
File: RogbABm9PlH5XXPdwkfF9UohZCU.roa (raw, json)
Hash identifier: j1mi3pHT4iWB82ZZlqfSgPI7YOQ8HQjUS3bHpPMd0EM=
Subject key identifier: 46:88:1B:00:19:BD:3E:51:F9:5D:73:DD:C2:47:C5:F5:4A:21:64:25
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 018D16E4DD3D750911B38A939B124FBF4B50
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/RogbABm9PlH5XXPdwkfF9UohZCU.roa
Signing time: Wed 17 Jan 2024 10:08:34 +0000
ROA not before: Wed 17 Jan 2024 10:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201550
IP address blocks: 178.253.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 28 Jan 2024 17:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:e4:dd:3d:75:09:11:b3:8a:93:9b:12:4f:bf:4b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jan 17 10:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46881b0019bd3e51f95d73ddc247c5f54a216425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:be:41:70:35:ea:a4:72:84:35:37:d4:64:
fe:8a:5e:f9:48:42:d7:a1:24:6d:65:b6:26:a2:b8:
20:7c:1f:0e:19:81:42:10:fd:e7:bc:86:00:98:27:
ff:c8:80:6c:31:c7:81:e6:95:07:8c:34:fb:b4:4a:
d5:7e:81:c0:22:39:80:e9:72:45:a5:61:a6:c6:6c:
8b:16:dd:93:d0:a5:e9:6c:16:83:c0:b7:0c:d3:d6:
d2:fe:6f:15:35:bc:db:99:6f:6c:71:83:21:d5:aa:
09:7f:f7:88:3b:88:dd:df:29:bb:eb:24:2b:80:33:
2c:25:9c:01:d2:68:30:4d:55:45:f9:05:6f:60:fc:
cd:0a:7d:c4:13:db:ba:23:e5:ab:10:ab:b5:d1:4f:
ae:75:51:55:4d:49:84:fd:57:7b:69:e4:20:ce:7e:
53:ce:d3:ac:40:64:fd:db:66:b2:81:4f:d8:3d:70:
80:5b:8a:84:34:ab:25:89:43:ab:33:f3:6a:9b:b4:
fb:2e:e4:c3:33:0b:90:db:97:b2:b4:48:3a:8d:e6:
c2:e0:80:61:30:4c:c8:ec:ea:cf:a7:f5:e3:90:c2:
b0:9d:46:b4:7b:40:0e:77:32:87:14:c1:1f:da:80:
9b:bf:bc:f1:71:7b:a5:8a:34:07:b5:88:19:fe:c6:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:1B:00:19:BD:3E:51:F9:5D:73:DD:C2:47:C5:F5:4A:21:64:25
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/RogbABm9PlH5XXPdwkfF9UohZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.96.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:29:1c:12:af:7e:50:69:18:0e:c1:09:c6:dd:77:ca:11:8b:
e7:41:e9:22:23:f9:39:1e:6d:a6:01:dd:be:3d:dc:60:cc:57:
91:1c:a6:80:9a:22:1f:81:f0:03:ac:3b:18:3d:40:8e:59:59:
dd:6c:cd:1f:dc:76:12:8c:47:b9:dd:ce:a7:2f:0b:7d:33:d1:
1e:15:b9:0f:e9:c0:b8:d6:a6:ab:81:75:d8:be:ea:2d:1e:96:
ad:31:47:e5:83:d8:47:0a:38:e2:56:d2:0d:08:ab:e7:f1:58:
cb:d3:e6:f1:bd:ae:df:34:1c:45:0f:e7:44:67:be:5b:35:b3:
49:32:0c:a4:45:ff:d5:af:de:c9:30:47:32:d0:81:a5:20:4b:
91:8b:a9:4b:34:c6:0b:07:4a:6e:fd:f5:1e:e4:b1:64:c1:83:
15:24:92:de:24:be:4f:bc:ae:c6:4e:9d:a1:77:20:d0:77:29:
3e:64:b8:e4:66:14:36:d9:57:a5:3b:8d:bc:a8:41:0a:cc:b9:
83:aa:ad:b3:db:2b:74:2e:27:75:43:e2:8f:8d:a2:99:2e:cb:
d6:79:a4:87:04:79:c9:3a:a4:47:60:02:6d:6d:4f:25:3b:ba:
47:2e:ff:24:1a:e4:cd:97:77:e9:5f:99:f2:6f:9a:ac:54:3e:
ca:7c:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org