Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/s8k29FmM3e1CuS4J-HNrhcxdT5I.roa
File: s8k29FmM3e1CuS4J-HNrhcxdT5I.roa (raw, json)
Hash identifier: LrAxoQVO89K5FSON2xTYko14eKkkkU6DTfVN7nU73VQ=
Subject key identifier: B3:C9:36:F4:59:8C:DD:ED:42:B9:2E:09:F8:73:6B:85:CC:5D:4F:92
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018611F75EBF083E4969FB38E68A12E86134
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/s8k29FmM3e1CuS4J-HNrhcxdT5I.roa
Signing time: Thu 02 Feb 2023 11:51:09 +0000
ROA not before: Thu 02 Feb 2023 11:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211193
IP address blocks: 5.178.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:f7:5e:bf:08:3e:49:69:fb:38:e6:8a:12:e8:61:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 2 11:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3c936f4598cdded42b92e09f8736b85cc5d4f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:d9:e8:37:fe:95:fe:f8:4b:63:95:6f:a7:
5d:c9:e8:0a:0b:30:08:3f:d6:35:73:4b:ee:8f:fe:
e2:8a:0e:28:75:80:61:00:73:b8:a9:3a:e5:a5:85:
fd:f0:d4:dd:85:29:6a:32:2f:00:df:8e:16:4c:10:
6d:b9:7c:f1:8f:a1:2b:2b:36:08:04:a9:16:aa:cb:
2a:7d:f5:d7:c2:07:84:4a:ca:9c:0c:14:cb:56:9b:
84:7b:cd:e3:ab:16:5c:5d:85:7c:14:96:33:a5:0a:
fd:e5:0b:48:f2:13:04:81:2f:4e:33:36:26:b2:ca:
29:5d:eb:37:d4:6c:b4:c9:f9:ba:e1:eb:7e:84:b4:
c9:3e:9f:1f:aa:b3:dc:87:b0:3e:a4:ee:61:a7:d0:
9e:19:d4:38:3a:6e:b9:09:ab:44:de:4d:b4:84:c5:
53:c6:ad:d2:03:4f:91:18:89:07:af:8b:1a:22:4d:
1c:d4:6c:b1:2f:38:16:38:46:fc:94:7a:9d:c6:b5:
0f:03:22:23:90:57:f6:12:32:29:b5:62:13:63:13:
f7:19:a1:7c:d0:11:7a:b8:11:dc:9e:f0:86:af:7c:
15:63:ca:6a:74:03:a8:90:56:19:0e:69:80:c4:97:
22:25:d7:cd:66:dc:c1:d0:59:43:c5:2f:91:2b:b3:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:36:F4:59:8C:DD:ED:42:B9:2E:09:F8:73:6B:85:CC:5D:4F:92
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/s8k29FmM3e1CuS4J-HNrhcxdT5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:48:e7:e4:2c:70:ee:da:d6:7c:33:9d:36:5a:dc:58:e3:3c:
6f:2c:40:dc:b8:eb:4e:b8:28:8d:9e:14:91:05:00:b9:8c:f1:
1b:9c:1b:b5:59:90:0b:71:2d:4d:f0:b4:a1:86:e6:ca:4d:35:
63:05:6d:89:11:ac:cd:08:19:80:7c:c7:1b:bd:2e:d4:8b:32:
07:de:cd:36:62:d6:fa:9b:74:e0:69:de:86:ea:c7:93:5d:19:
45:28:dc:7b:aa:4a:6e:4d:f6:5c:b4:a2:76:6a:70:1f:4e:90:
e8:bf:ae:53:27:a9:05:4e:f9:bf:bb:1e:7c:6e:83:99:9f:a2:
a5:bc:a5:30:e4:ae:ff:51:28:f9:7f:01:22:55:c1:8a:ea:6f:
0d:2c:a8:0d:3b:26:63:94:9c:2b:0c:bd:b2:56:bb:c3:dc:8f:
2b:01:2c:08:f4:cc:88:08:0d:d7:5a:10:25:bb:48:65:93:19:
3e:cf:97:45:8b:24:52:88:d9:95:9e:9d:33:eb:fb:cd:51:a4:
8a:22:cc:9b:54:1e:83:97:ac:5a:5a:84:45:d7:5e:29:92:f6:
03:d7:a6:2b:4f:17:29:d6:a2:7c:93:2e:1a:80:c4:3d:46:8b:
c3:ea:38:f2:8b:5e:f5:18:89:8f:88:3c:42:7c:be:b5:c9:9e:
06:62:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org