Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/we4w2ELYOqUeiRM7TMqGv-i6yKg.roa
File: we4w2ELYOqUeiRM7TMqGv-i6yKg.roa (raw, json)
Hash identifier: F7ah2tZGREjNvkJUwabnj5L2Pk5eIAEor7kaDJKtew8=
Subject key identifier: C1:EE:30:D8:42:D8:3A:A5:1E:89:13:3B:4C:CA:86:BF:E8:BA:C8:A8
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0189E4438884012234D60623307075FF07D9
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/we4w2ELYOqUeiRM7TMqGv-i6yKg.roa
Signing time: Fri 11 Aug 2023 11:02:58 +0000
ROA not before: Fri 11 Aug 2023 11:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 5.178.4.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:43:88:84:01:22:34:d6:06:23:30:70:75:ff:07:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 11 11:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ee30d842d83aa51e89133b4cca86bfe8bac8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:5e:ca:eb:0b:7a:3d:d6:94:5d:fd:5e:f1:
64:3f:23:5c:d8:1a:d5:68:09:df:98:f2:d6:6b:53:
07:01:57:17:b6:fa:85:20:aa:ac:4f:f8:5a:3d:bf:
d7:e4:07:4a:28:af:09:a2:89:f3:16:ff:36:56:5e:
61:68:c8:7c:c3:17:56:31:ef:30:26:75:86:2d:67:
92:8d:7b:77:e8:bc:4b:d3:7b:aa:53:6a:e8:dc:a3:
2a:c4:43:8f:8d:a3:9c:3e:fc:f0:fc:f9:5c:2b:29:
f5:1a:51:a2:b7:bf:6c:b1:e2:83:e5:da:ae:0a:b6:
20:4d:6b:61:2b:c8:3b:bf:93:55:ef:04:ee:8d:29:
b7:f1:f9:af:3a:b9:20:ab:9c:3e:f7:db:d6:82:69:
d2:6e:8f:b7:de:6b:b4:1d:68:7e:45:ce:96:9c:ac:
fe:e8:1c:ed:f5:ab:80:10:3d:82:13:7e:65:2f:1c:
0d:21:4d:2a:2a:f2:c5:d7:a7:43:c9:0b:95:d2:b8:
6a:5e:f4:59:46:e9:b8:6e:b0:0b:3a:7b:fe:79:59:
d2:78:53:83:44:9d:27:3a:97:54:16:5f:36:1b:21:
d3:cc:da:1a:62:38:e3:5c:b4:d9:22:2c:be:59:5d:
9b:97:a6:bf:81:95:99:be:f8:39:b8:99:92:50:00:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:30:D8:42:D8:3A:A5:1E:89:13:3B:4C:CA:86:BF:E8:BA:C8:A8
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/we4w2ELYOqUeiRM7TMqGv-i6yKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.4.0-5.178.6.255
Signature Algorithm: sha256WithRSAEncryption
43:28:18:96:d5:96:e0:ee:5f:45:8a:9f:1f:82:08:71:6d:4b:
10:d9:34:6d:5b:f4:ac:4d:c4:f2:e4:2f:f3:79:07:68:63:ce:
60:d6:b7:9e:be:e5:40:5b:0e:20:53:2d:f7:46:93:22:ad:62:
34:e5:65:40:8a:00:4d:72:96:70:8b:46:df:f9:47:43:39:d3:
2b:93:c5:4d:0e:0e:d7:6e:2b:48:c5:ab:55:1c:44:1a:7d:71:
6b:88:ef:c6:ac:6d:35:d7:54:d5:7d:4b:28:e0:4e:88:13:64:
a5:2d:72:8c:6a:59:4a:69:ef:13:91:13:9a:d3:4e:a0:89:a2:
8b:91:f6:68:df:ee:0a:76:f4:8f:6d:5d:9a:3f:f0:90:e7:2a:
07:c6:6b:fc:e0:84:7a:27:e7:d6:3a:f9:ab:c3:b4:0d:1e:2c:
de:78:db:94:d1:fa:3b:6c:16:e4:5f:7f:d3:1b:2d:a0:05:dc:
1e:18:fa:55:df:8f:63:77:d0:36:6f:10:a2:6d:9e:23:75:d7:
a0:28:94:72:ff:4f:ff:b6:30:d5:5a:b6:24:9a:2e:c4:48:bb:
8b:8a:9d:44:6b:c4:e8:59:7f:c9:6e:ee:78:73:3b:34:9a:c5:
3a:32:35:5e:c0:14:10:c1:14:38:70:b7:ce:07:0e:6f:08:cc:
a0:97:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 11:43:45 2023 by rpki-client on console-fra.rpki-client.org