Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/KZEJsBkIJnwG7jWCoJ_NxasP67s.roa
File: KZEJsBkIJnwG7jWCoJ_NxasP67s.roa (raw, json)
Hash identifier: NZi1HC2J2FzIudtyQQHaxypzbxeYbm6yc/stmohQIYg=
Subject key identifier: 29:91:09:B0:19:08:26:7C:06:EE:35:82:A0:9F:CD:C5:AB:0F:EB:BB
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0189FEA5C7ABC283568D4B5C1B1535BBAA4B
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/KZEJsBkIJnwG7jWCoJ_NxasP67s.roa
Signing time: Wed 16 Aug 2023 14:00:24 +0000
ROA not before: Wed 16 Aug 2023 14:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61108
IP address blocks: 178.238.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:a5:c7:ab:c2:83:56:8d:4b:5c:1b:15:35:bb:aa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Aug 16 14:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=299109b01908267c06ee3582a09fcdc5ab0febbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:bf:8b:4c:a7:97:21:af:47:3f:2c:26:4e:
7d:69:e4:55:e5:c1:3e:20:83:dd:09:8e:82:d8:b6:
2a:ed:a3:fa:21:3a:8b:45:b5:48:97:74:c7:aa:66:
7b:4b:21:3d:9d:b2:81:a4:88:4c:f2:41:6c:6e:df:
fe:a2:5d:58:68:a3:b2:6a:a1:74:7e:15:b9:0b:17:
1e:11:4d:18:5b:82:6f:9e:cc:f8:77:8a:af:11:f7:
b7:30:8b:10:98:57:8f:53:a0:a9:a2:b2:c1:c2:64:
56:ac:12:a3:f7:cc:97:df:ed:db:db:84:32:e4:01:
5f:a0:6c:e5:ba:3c:10:7f:c5:d7:e6:92:93:89:85:
0f:f6:2f:1d:d3:83:8c:ce:5a:bb:64:ca:30:d3:bb:
98:c6:f1:fc:f8:40:36:ca:76:ab:3f:ba:0f:45:4b:
4c:85:a9:c4:45:34:b6:2b:c7:ba:a8:53:94:b9:ca:
9f:b1:3e:07:e3:b6:2b:e7:a0:15:8a:3f:60:e3:7e:
17:84:62:52:70:65:26:73:54:a7:2a:f7:65:38:d6:
70:0b:ad:03:97:5c:bc:a9:3e:bd:81:f6:04:2f:ac:
c9:f2:59:1f:70:cc:a0:63:7f:1b:f3:51:60:f1:ca:
16:eb:ce:96:47:77:c1:5d:8c:73:ff:32:41:b6:17:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:09:B0:19:08:26:7C:06:EE:35:82:A0:9F:CD:C5:AB:0F:EB:BB
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/KZEJsBkIJnwG7jWCoJ_NxasP67s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:68:77:77:1c:b1:4c:bd:58:d4:8e:00:57:f7:50:f6:d9:08:
dd:3e:46:7d:f9:13:24:c2:3e:5d:60:26:0d:46:bb:cf:cd:6c:
e4:ea:43:de:4c:ee:d5:bb:41:a4:d0:10:fd:24:48:61:02:d0:
28:0f:9d:16:be:e2:ba:38:24:36:f2:af:17:2a:10:fb:9a:df:
74:5d:8b:80:3b:04:1c:e9:a3:f5:4d:7a:9e:51:1b:a0:be:85:
ca:42:2a:64:05:ef:1a:39:eb:ee:77:6b:55:16:73:a5:c8:ef:
eb:26:d9:ad:25:f2:e8:ca:01:05:3a:11:41:00:75:9f:71:39:
12:8b:92:9c:3e:53:86:f7:c8:cf:a4:b4:10:64:09:20:b6:6e:
44:a0:b2:1e:d1:01:6b:a7:7e:fc:1b:73:e2:54:dc:cd:8f:a4:
5e:a3:6a:16:6c:ba:15:d7:bf:a4:bb:50:55:96:ce:d5:33:90:
9c:8c:97:58:ca:ae:ee:cf:7f:4c:bf:36:5d:67:99:e8:2d:5f:
b8:37:32:9e:ee:97:10:7c:62:78:a1:75:02:2b:05:b7:6a:df:
68:0d:90:0b:a1:77:69:50:96:a9:9d:f3:86:9e:76:2e:0c:f7:
5a:bc:25:d3:2a:c7:61:bd:1e:a2:0a:af:52:f6:ee:29:1b:36:
3b:73:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:08 2024 by rpki-client on console.sobornost.net