Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/3fiG3ke-LWyIEoIH0fj1RA7hpLg.roa
File: 3fiG3ke-LWyIEoIH0fj1RA7hpLg.roa (raw, json)
Hash identifier: FT9tLubHUxiS/wLpeRClyk0ik9aZRjPU6u/e4LvuOdQ=
Subject key identifier: DD:F8:86:DE:47:BE:2D:6C:88:12:82:07:D1:F8:F5:44:0E:E1:A4:B8
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018698EDC910F0A0CE86D55A060CE2ADB69B
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/3fiG3ke-LWyIEoIH0fj1RA7hpLg.roa
Signing time: Tue 28 Feb 2023 16:49:25 +0000
ROA not before: Tue 28 Feb 2023 16:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 178.250.191.0/24 maxlen: 24
178.250.190.0/24 maxlen: 24
2a04:1bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 Feb 2023 17:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:ed:c9:10:f0:a0:ce:86:d5:5a:06:0c:e2:ad:b6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 28 16:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddf886de47be2d6c88128207d1f8f5440ee1a4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:f5:2e:14:2c:65:57:c7:fc:75:02:46:a8:
82:bb:d0:ce:40:49:79:5a:06:4f:d4:92:a0:e7:f9:
a0:93:7e:4c:3a:49:79:22:56:c2:b1:11:22:e2:63:
f4:fb:13:0a:aa:a7:6c:5a:67:75:e3:79:6b:3d:63:
dc:2e:b5:e3:9f:df:bb:d7:67:d2:d5:91:6c:26:1c:
c8:f5:a4:05:d7:db:8d:fb:54:c3:ca:fe:91:e5:17:
dc:89:c8:e8:0f:84:6d:05:59:60:f4:44:50:fe:39:
14:db:e1:7a:e2:9d:d7:c1:5c:f3:33:03:35:58:28:
61:37:e8:8c:ca:9f:e0:51:27:1b:df:66:ed:3a:80:
6d:47:56:7d:df:fa:c2:5f:5b:95:7b:dc:1c:a9:27:
e4:b0:5b:62:38:4f:e4:3d:e5:25:c8:7a:5f:06:61:
75:04:53:29:5b:5a:66:b2:1f:24:76:6d:ce:16:a9:
fb:74:62:e6:c8:11:78:d9:05:ba:28:73:6f:ac:4c:
2f:95:b3:09:e1:8e:ee:f9:c2:4d:66:6a:09:f9:28:
7f:b5:fd:a6:a9:32:cf:76:8b:83:cf:7a:3d:0f:60:
a7:28:d9:47:b8:14:46:0a:65:23:9d:d0:2b:8f:37:
e9:50:8f:0c:4a:00:c1:ff:74:45:79:5a:e5:4d:05:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F8:86:DE:47:BE:2D:6C:88:12:82:07:D1:F8:F5:44:0E:E1:A4:B8
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/3fiG3ke-LWyIEoIH0fj1RA7hpLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.190.0/23
IPv6:
2a04:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:da:0f:26:25:29:00:cc:d0:d8:ad:2f:86:9c:46:4a:d9:33:
0d:c2:9f:cf:fc:59:0c:cb:7d:36:dd:19:5e:1d:00:1e:4e:18:
2b:fb:bd:4d:e7:7b:a2:a8:32:b6:94:83:e9:d9:17:bb:6a:71:
d7:de:80:ff:82:d0:fc:b4:c5:68:cf:ec:07:94:7d:75:b2:44:
b1:1b:5d:f4:8f:23:8e:ac:53:c6:ec:11:88:0a:df:d4:58:6a:
58:c3:c5:78:96:23:91:2a:fc:ee:be:93:25:2d:6f:e0:36:34:
28:33:90:a8:c8:0f:dd:da:77:f7:2a:a1:7c:f6:28:52:b6:ae:
81:f3:dd:65:d6:8e:b0:b5:26:ba:f8:98:46:5f:6b:fa:19:b9:
88:20:d3:f9:f8:fe:77:3a:7b:0a:36:b3:c6:77:fb:55:51:6d:
cc:64:0a:7a:ed:58:ac:d1:df:89:7b:88:27:ea:7b:8d:18:5d:
29:5e:56:bd:54:30:50:f4:58:30:84:a1:20:55:76:0b:a6:6d:
6a:fb:d9:c7:89:f9:08:a5:0b:e1:f1:1a:c3:18:a2:b3:3f:3f:
0a:6b:57:1a:f7:60:36:10:79:e9:ae:da:4c:33:a2:67:9a:93:
99:7e:eb:b0:31:50:01:bd:32:97:59:81:f4:c3:e5:33:17:04:
06:d9:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-fra.rpki-client.org