Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/CE0oVuMTgb7N7hbmkceI0eFTAK8.roa
File: CE0oVuMTgb7N7hbmkceI0eFTAK8.roa (raw, json)
Hash identifier: bFZuRz1YD9VT5X+3Gl42c9QPKMKdUbkZcNHZjY2ytsM=
Subject key identifier: 08:4D:28:56:E3:13:81:BE:CD:EE:16:E6:91:C7:88:D1:E1:53:00:AF
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018A8E3432BC8691ECE9A7AC5554E4F15962
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/CE0oVuMTgb7N7hbmkceI0eFTAK8.roa
Signing time: Wed 13 Sep 2023 11:01:40 +0000
ROA not before: Wed 13 Sep 2023 11:01:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 5.178.4.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:34:32:bc:86:91:ec:e9:a7:ac:55:54:e4:f1:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 13 11:01:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084d2856e31381becdee16e691c788d1e15300af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:3f:ec:28:ad:3d:f9:18:0c:e8:5a:30:f6:
8a:e4:9e:5a:a7:c2:f3:38:4c:0b:79:0b:73:36:6f:
da:cc:8d:08:c9:59:fe:1d:eb:16:44:37:21:0c:6e:
8c:48:c2:15:df:af:9d:b8:34:79:d8:7b:0f:d9:6d:
08:71:3a:16:97:c9:a7:b4:c9:35:a5:c5:42:d3:f2:
35:39:de:68:ba:39:19:01:56:92:e6:08:47:30:36:
a4:a9:70:c9:83:cf:22:6e:8a:a3:d7:3a:a3:81:02:
3e:6a:b3:ec:73:dc:3f:0f:6e:f5:ae:ab:78:f8:c6:
3d:86:3a:ba:b1:3e:45:c2:d3:57:13:57:d5:35:3b:
12:56:24:a7:a6:e7:5a:5e:df:97:b7:36:78:27:b8:
66:42:2a:48:cb:76:1a:70:62:2e:63:a1:a3:9b:0c:
98:e7:1d:a1:f7:dd:41:2f:59:a8:03:ca:b1:91:2c:
71:e1:a9:a0:aa:bc:0a:ca:d3:b8:64:bd:b1:7d:0a:
0d:51:47:95:5a:05:53:78:8d:80:61:ae:1e:6a:35:
24:7b:be:55:6c:6c:fb:65:1c:4f:33:35:30:59:5d:
3a:c4:a0:66:53:5f:0c:e7:da:6b:fb:22:a5:e2:1b:
fe:96:b2:7e:50:da:57:1a:22:b5:99:94:95:a3:30:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:28:56:E3:13:81:BE:CD:EE:16:E6:91:C7:88:D1:E1:53:00:AF
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/CE0oVuMTgb7N7hbmkceI0eFTAK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.4.0-5.178.6.255
Signature Algorithm: sha256WithRSAEncryption
36:1e:35:04:e4:1e:b4:75:df:3b:9c:e1:7c:d4:bb:71:80:11:
0e:50:38:a7:31:3a:ae:8e:49:47:9c:9c:73:0c:f7:d9:ed:2f:
25:bb:ea:35:63:9c:1c:d6:3d:b8:f0:87:39:c5:c1:cc:ad:22:
d5:36:a1:f2:5c:b9:f3:f4:e0:16:84:43:46:0e:05:e9:11:9d:
6c:b7:d7:63:0c:84:71:b6:a8:d1:47:f9:cf:d6:86:26:f0:fb:
6d:47:17:04:04:09:2d:db:8b:45:9e:d4:6a:fb:71:97:7e:09:
31:5e:6f:92:7b:7c:db:dc:75:17:a1:f7:cc:23:9f:71:e8:4d:
ad:5f:cd:e9:f6:40:8d:cf:58:25:6d:cd:9b:53:a4:e4:7f:94:
97:9e:87:ff:92:d4:ee:fc:cb:d6:84:6b:9c:11:47:2e:b2:43:
21:2d:32:8f:7e:2d:af:b6:85:68:a9:8d:f5:1d:48:4a:79:91:
b4:cc:48:bb:d1:4e:20:53:e1:d0:d7:38:d1:ea:b5:53:96:f8:
8c:65:e4:8e:07:32:fe:01:df:b3:00:70:18:84:b6:f1:0f:3a:
d1:f7:59:d7:56:39:5a:3f:2e:7e:34:c1:51:32:4b:61:05:74:
da:6b:78:5c:33:99:a8:7b:0e:4f:79:9b:ff:db:b9:14:18:59:
ee:e2:f5:21
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 6 13:29:05 2023 by rpki-client on console-fra.rpki-client.org