Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/GrJGH2xwkiq-hiqnuLiwuxHqrYA.roa
File: GrJGH2xwkiq-hiqnuLiwuxHqrYA.roa (raw, json)
Hash identifier: kEOrlyIYD3uPIQd4BChhevbfbPoNJzmln5231/mRo5A=
Subject key identifier: 1A:B2:46:1F:6C:70:92:2A:BE:86:2A:A7:B8:B8:B0:BB:11:EA:AD:80
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: 018572E82C028C3CCB0BF4C3D11264E56FDB
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/GrJGH2xwkiq-hiqnuLiwuxHqrYA.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3561
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2c:02:8c:3c:cb:0b:f4:c3:d1:12:64:e5:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab2461f6c70922abe862aa7b8b8b0bb11eaad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:51:6e:8d:9b:9d:63:f9:a3:33:c1:61:37:
30:e7:0a:fc:f0:fc:ed:35:77:ba:ee:31:48:1f:0a:
3c:40:50:88:5b:00:ca:6a:04:c2:55:38:af:7b:9f:
08:05:83:a7:de:43:d4:36:68:14:f6:fc:2a:bc:1e:
bc:ab:0f:99:98:24:23:cb:40:8c:b5:91:09:3b:1c:
16:2e:9e:43:08:c2:67:ec:d6:23:68:e8:76:28:1e:
e8:51:6f:60:34:bc:d6:3d:c2:de:35:48:e2:c3:c5:
fa:11:a2:b7:48:23:b2:49:83:74:90:d1:55:64:7d:
d3:53:88:e1:53:69:14:6f:b9:7b:2a:01:d9:96:e6:
08:31:ea:70:5a:13:be:0b:e8:ac:56:cf:d6:d7:ea:
87:7e:ed:67:2c:5e:88:30:95:cb:e7:47:32:32:56:
67:99:3b:08:96:f1:1e:11:81:39:5d:8a:2f:75:4b:
9c:62:ca:45:e3:62:8d:4e:6c:6b:9c:71:e7:3d:7f:
77:9a:f5:bc:86:c7:9c:4a:f2:a9:f1:df:b9:97:df:
41:39:da:dd:ff:61:56:d5:58:97:dd:94:c2:21:ec:
db:cf:78:0a:ce:06:5e:42:af:fc:b7:bd:04:69:15:
ca:b3:1d:0b:5e:8b:22:4b:d2:a8:e0:d8:d5:58:91:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:46:1F:6C:70:92:2A:BE:86:2A:A7:B8:B8:B0:BB:11:EA:AD:80
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/GrJGH2xwkiq-hiqnuLiwuxHqrYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
60:35:e2:d6:39:69:5c:8a:49:f6:09:b1:9d:83:e2:a3:7c:b1:
a7:c8:f3:4e:b5:59:90:e0:ee:6f:53:51:3d:29:3a:85:02:c5:
f4:3e:ae:74:92:90:93:e0:d3:4c:49:f2:9b:d9:5e:ae:c5:25:
07:bc:2d:f9:eb:49:aa:2a:d5:29:d6:e0:ba:04:36:90:8a:7e:
9f:f3:5d:d7:a2:62:b1:a8:f0:00:4e:b8:de:f6:23:e0:96:47:
b4:09:eb:1c:71:22:6a:17:a8:48:86:aa:cd:3f:7e:21:81:80:
57:07:83:5d:a7:04:11:93:4b:a5:5a:ed:9b:c4:20:fc:86:c8:
45:b5:ad:5e:2c:7a:9d:12:01:0d:0b:84:b3:20:8f:18:75:f8:
ac:3a:a0:cd:52:da:80:82:31:45:9d:78:b7:99:e7:18:93:34:
e7:d6:77:55:3f:37:1a:35:9e:e6:a7:be:36:7b:b1:f2:ec:d0:
b8:7c:da:30:9c:fa:05:fa:6c:e6:20:1c:61:4f:48:44:54:79:
5a:5a:8d:5a:10:dc:fb:b4:d8:1e:84:3f:78:ae:04:ec:ed:65:
7b:93:31:66:5a:bf:34:0f:30:0b:79:f7:d9:a0:af:cd:1f:64:
52:00:99:e1:9f:1d:0c:d6:0d:09:2d:31:5d:f4:94:b4:a9:15:
cd:c1:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:54 2024 by rpki-client on console-ams.rpki-client.org