Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/cxiPTiLQ1AP5XhJBg_wuC9YE8D0.roa
File: cxiPTiLQ1AP5XhJBg_wuC9YE8D0.roa (raw, json)
Hash identifier: LJXdCviz4h6PI+Xvb/YFKjMUWZXAOIR70NXxhl41U7Y=
Subject key identifier: 73:18:8F:4E:22:D0:D4:03:F9:5E:12:41:83:FC:2E:0B:D6:04:F0:3D
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA05C9185D7B9485539059076C0B5C
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/cxiPTiLQ1AP5XhJBg_wuC9YE8D0.roa
Signing time: Mon 02 Jan 2023 10:14:48 +0000
ROA not before: Mon 02 Jan 2023 10:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20946
IP address blocks: 178.170.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:05:c9:18:5d:7b:94:85:53:90:59:07:6c:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73188f4e22d0d403f95e124183fc2e0bd604f03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:f5:70:09:68:78:07:59:38:14:82:81:75:
f1:f8:ab:95:77:92:3d:4c:4e:29:fb:52:ae:f4:fc:
29:ae:67:11:c1:de:67:03:bb:7f:c9:03:08:6a:19:
54:2a:f1:a7:3d:70:e0:77:92:b4:de:b1:b2:c7:31:
52:3d:6e:cd:19:41:f3:0c:eb:ec:ba:13:69:fa:84:
04:06:39:8c:11:94:29:3a:41:14:c2:90:8f:5a:22:
95:f6:64:52:f6:29:b2:f4:15:dd:72:16:e0:ad:4b:
40:1b:8a:18:c7:d1:c3:84:e2:52:e3:8f:4b:c9:76:
f1:cf:66:86:2b:7d:bc:9d:12:4c:5c:5e:c9:3f:04:
e5:f1:9e:54:2f:3a:a6:0b:a3:98:76:9b:76:81:bb:
b5:63:d1:2e:53:af:21:f8:51:18:03:17:dc:a4:1a:
21:72:7d:cf:a0:b4:a1:80:75:82:7e:d9:6b:aa:f2:
60:21:bd:4f:5b:f6:be:e8:11:14:d6:67:3c:20:e0:
35:ba:e7:a3:ea:d1:62:bb:1a:2f:ac:60:dc:3f:d1:
80:5d:29:8c:58:c8:31:91:2c:23:8f:da:77:5a:23:
e9:04:6e:a4:07:95:10:4f:25:de:8e:32:ad:b9:b9:
68:32:66:c3:0a:8a:0c:c1:e3:a5:a7:c5:16:48:76:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:8F:4E:22:D0:D4:03:F9:5E:12:41:83:FC:2E:0B:D6:04:F0:3D
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/cxiPTiLQ1AP5XhJBg_wuC9YE8D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.229.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3a:5a:17:6e:3e:72:46:08:92:a4:17:5d:e2:3c:54:e3:d3:
65:5f:7e:57:af:f9:8d:ad:23:04:95:d4:17:0a:5e:3a:30:73:
7b:c1:a6:f9:d9:d7:c1:47:6d:a5:a3:84:04:4e:fd:60:99:17:
94:94:fb:84:31:94:bc:99:7a:4a:b2:8a:60:f7:07:98:ae:22:
3b:91:67:f2:74:32:88:7e:e7:2d:7e:df:9a:74:e3:68:ec:33:
06:33:32:8d:e8:54:e0:d5:ca:0e:22:92:6d:71:4d:2a:c0:91:
19:2d:da:da:4a:61:19:08:80:0f:3a:ba:cc:76:05:67:53:48:
70:55:1c:de:df:f8:6e:68:7b:69:db:7d:9c:af:5a:a1:73:95:
de:30:60:a3:b7:ec:65:15:ec:e1:27:71:df:7f:96:78:b2:cf:
d9:d9:a3:da:f1:b7:44:e4:c1:44:ed:ed:b1:20:19:50:02:fe:
00:b7:b6:14:3c:5d:03:49:c3:cd:b1:f7:b3:6c:9b:be:61:4d:
f9:50:da:6c:5d:76:39:c3:69:aa:86:44:06:ca:70:5a:e3:d5:
66:8d:ee:29:25:63:b6:9c:8b:41:31:a9:36:cb:64:ee:a6:c6:
0e:1e:9a:87:2d:8b:b6:cb:b8:3a:0f:6c:9e:28:ba:40:9c:39:
1e:86:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:21 2024 by rpki-client on console-fra.rpki-client.org