Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/4xYEO_K350rXeaQsvccgzehfmUY.roa
File: 4xYEO_K350rXeaQsvccgzehfmUY.roa (raw, json)
Hash identifier: XlkEIg+dQK1iLd84s/fBqx+c2bsJ6aFj7w+U1rx7Was=
Subject key identifier: E3:16:04:3B:F2:B7:E7:4A:D7:79:A4:2C:BD:C7:20:CD:E8:5F:99:46
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0187D2E3416ADB72DBBEAA07745716780D45
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/4xYEO_K350rXeaQsvccgzehfmUY.roa
Signing time: Sun 30 Apr 2023 15:58:41 +0000
ROA not before: Sun 30 Apr 2023 15:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44084
IP address blocks: 5.178.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:e3:41:6a:db:72:db:be:aa:07:74:57:16:78:0d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 30 15:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e316043bf2b7e74ad779a42cbdc720cde85f9946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:b8:04:6d:b5:ff:02:17:b5:f4:04:64:72:
89:c1:31:1c:c9:ed:93:7d:43:b0:38:00:52:4c:c1:
91:1e:3e:97:7c:d8:68:58:69:1a:0d:85:fb:f1:b3:
b0:1b:60:03:1c:2e:45:cb:80:76:a2:57:a5:b0:09:
a5:73:54:22:4a:4f:8a:24:c9:3e:0e:88:17:59:8e:
24:87:66:d6:c3:77:94:6b:57:ac:2f:a5:d0:c1:08:
50:5b:a0:18:20:28:27:59:e3:1f:73:6a:c9:4f:9e:
58:a8:f3:dd:2c:c1:0c:d0:12:2f:49:3d:70:43:a2:
a2:fb:cd:5d:c4:d2:0c:19:e4:1d:d4:83:96:af:98:
e7:02:c0:92:8a:c3:57:21:eb:38:46:79:eb:2b:89:
03:a1:3a:e4:5f:b4:0e:1b:c7:f3:63:d3:82:5d:6c:
96:05:27:f7:dc:d9:07:e2:af:17:93:2d:62:cf:c9:
37:78:43:36:4e:42:4a:0e:96:c1:5f:bc:c6:4c:8e:
00:f6:4c:20:73:c0:4d:96:13:66:99:8f:ce:03:b5:
06:4a:a3:91:7d:5f:65:56:d6:63:a2:2f:30:29:c1:
9f:e9:00:e6:72:8e:1d:9e:a8:af:2f:79:f1:7e:a5:
fa:6d:7f:00:15:e0:7b:3c:0f:06:6f:4f:bf:e0:e1:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:04:3B:F2:B7:E7:4A:D7:79:A4:2C:BD:C7:20:CD:E8:5F:99:46
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/4xYEO_K350rXeaQsvccgzehfmUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f7:07:1b:b7:e6:80:1a:ac:22:ca:a2:f5:b0:48:9d:64:49:
4d:84:1d:7e:bc:c5:b2:58:0e:56:f4:fb:45:df:15:94:79:c4:
ef:41:b6:6d:b1:cc:53:46:4b:b2:67:fd:71:ad:d5:ef:3f:07:
91:79:34:ec:60:98:e6:51:4a:9a:4f:b1:41:c3:91:83:dc:e5:
c3:9a:85:2b:36:b8:61:7b:0e:4d:a3:77:6b:20:d5:08:9f:da:
53:7a:9f:5c:e3:6d:5e:18:50:27:82:ac:31:66:18:05:6c:ad:
08:79:0a:96:f7:b4:5b:61:15:3d:60:14:00:ad:d6:f7:3b:b9:
a1:d3:1a:c4:c2:f8:4d:a2:d5:c4:d2:1f:ec:da:73:17:01:d8:
ae:1e:2e:20:a1:d4:84:0e:f2:18:50:52:c4:5c:00:a2:7a:3e:
e9:0d:6e:1e:cb:f0:99:fe:f3:6e:de:29:7e:5f:5c:07:d9:de:
70:a5:75:95:56:10:65:1a:61:ce:33:98:08:e9:62:89:54:0d:
81:b1:76:85:9c:c9:ac:7b:e3:98:9e:dd:fc:bd:a1:ba:9c:92:
4d:12:6d:7d:d4:6e:c3:d0:f4:02:b3:02:79:e5:81:8d:01:56:
93:26:2c:5b:4c:d3:0f:d9:51:54:3a:53:5b:3f:51:50:8f:d3:
c6:48:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 12:39:41 2023 by rpki-client on console-fra.rpki-client.org