Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/7E3VC-nHGSeh5kj53YegWNhin-4.roa
File: 7E3VC-nHGSeh5kj53YegWNhin-4.roa (raw, json)
Hash identifier: T+BXY+wrNd+ixh+F9bljkeBz2aeGHKFMOELEq0b0eS4=
Subject key identifier: EC:4D:D5:0B:E9:C7:19:27:A1:E6:48:F9:DD:87:A0:58:D8:62:9F:EE
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 01869918D08F2DBEE206FAE3E1DC3262E3B0
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/7E3VC-nHGSeh5kj53YegWNhin-4.roa
Signing time: Tue 28 Feb 2023 17:36:25 +0000
ROA not before: Tue 28 Feb 2023 17:36:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 178.250.191.0/24 maxlen: 24
178.250.190.0/24 maxlen: 24
2a04:1bc0::/29 maxlen: 29
2a00:4080::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Mar 2023 08:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:18:d0:8f:2d:be:e2:06:fa:e3:e1:dc:32:62:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 28 17:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec4dd50be9c71927a1e648f9dd87a058d8629fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:9b:63:55:9d:58:87:94:30:6a:47:ea:1f:
34:c7:29:6b:62:98:56:39:cc:09:66:c3:95:f2:b7:
ad:be:0c:9d:a8:46:59:8a:e3:44:87:49:39:04:10:
19:1c:bd:00:f3:9c:bf:2c:70:fc:8b:09:e2:3f:60:
3f:d0:0f:9a:29:18:cb:7e:4d:45:1c:fc:31:84:bd:
8f:2c:cf:d0:7e:7e:30:9d:66:6b:57:8d:6d:7b:94:
2b:e8:de:22:be:4d:a5:b0:01:78:0a:45:c5:de:eb:
43:98:bd:e5:db:ee:77:f5:77:58:a4:c5:cf:b2:b9:
d7:af:2e:15:8b:1c:a9:c6:fe:65:d1:ab:24:3d:87:
49:7b:ba:33:df:05:fe:4e:b9:88:af:0a:c1:32:2e:
6a:44:8e:f5:4c:c8:79:d1:51:31:ce:d9:e6:32:72:
37:79:31:c4:5d:48:bf:2f:4a:47:88:fb:0c:c9:0b:
4a:b4:45:51:16:22:3e:cb:9e:4a:cb:8d:df:9a:5e:
14:71:8c:d5:69:8f:88:d8:f8:a9:43:c6:a4:27:cb:
64:6d:7a:67:93:5b:e3:b7:d0:11:ee:91:27:fa:58:
63:4d:b0:cb:1f:ad:7c:03:be:ec:72:fa:21:e8:e9:
9c:b5:aa:e4:ce:d6:88:94:91:50:f3:01:a8:78:d5:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:D5:0B:E9:C7:19:27:A1:E6:48:F9:DD:87:A0:58:D8:62:9F:EE
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/7E3VC-nHGSeh5kj53YegWNhin-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.190.0/23
IPv6:
2a00:4080::/29
2a04:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
29:e0:9b:62:fe:00:14:ea:24:ed:5a:39:87:b3:52:80:d5:44:
42:18:34:70:db:d4:46:30:ca:9c:3b:10:05:82:68:7b:6e:24:
12:4f:8d:94:68:38:d5:8c:21:cd:25:5e:16:8e:5f:c8:06:27:
60:45:97:c2:60:da:1b:3b:3b:a1:ec:08:94:15:ae:b7:4d:97:
6a:9e:ce:ac:22:2c:33:55:e3:3c:a2:c6:c7:82:b7:40:b6:c0:
ef:86:41:f7:8a:df:e3:81:19:70:88:b1:6b:54:d8:f3:97:74:
14:d1:bb:14:cd:8f:f5:96:0a:ad:e5:d3:7d:92:20:5a:5e:2f:
7e:47:18:d9:50:82:d8:49:ac:1b:23:fe:e1:2a:60:c3:b9:b3:
40:05:f6:64:d0:86:13:c0:5c:de:ff:50:e4:ec:e8:4e:1f:81:
72:15:6b:e2:a0:16:f7:ab:76:ad:cb:3c:e4:e3:06:1e:8e:1c:
c1:46:78:2b:a8:e1:f2:22:b1:8d:61:35:9e:a7:b0:f2:e5:d0:
70:e5:8e:49:f6:61:b9:75:15:4f:d1:da:7e:ef:b0:f0:7e:6a:
64:10:b0:01:01:0c:8a:c5:10:8b:db:27:01:5e:4c:68:fc:d7:
ba:b4:83:98:8a:23:48:e3:83:fa:5f:d7:84:fc:7b:8f:7d:18:
a2:fd:a6:cf
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYaZGNCPLb7iBvrj4dwyYuOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi
ZjA2OTIwHhcNMjMwMjI4MTczNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzRkZDUwYmU5YzcxOTI3YTFlNjQ4ZjlkZDg3YTA1OGQ4NjI5ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsqbY1WdWIeUMGpH6h80xylrYphW
OcwJZsOV8retvgydqEZZiuNEh0k5BBAZHL0A85y/LHD8iwniP2A/0A+aKRjLfk1F
HPwxhL2PLM/Qfn4wnWZrV41te5Qr6N4ivk2lsAF4CkXF3utDmL3l2+539XdYpMXP
srnXry4Vixypxv5l0askPYdJe7oz3wX+TrmIrwrBMi5qRI71TMh50VExztnmMnI3
eTHEXUi/L0pHiPsMyQtKtEVRFiI+y55Ky43fml4UcYzVaY+I2PipQ8akJ8tkbXpn
k1vjt9AR7pEn+lhjTbDLH618A77scvoh6OmctarkztaIlJFQ8wGoeNVpHwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFOxN1QvpxxknoeZI+d2HoFjYYp/uMB8GA1UdIwQY
MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt
YWE5ZDY5MTgxMWU3LzEvN0UzVkMtbkhHU2VoNWtqNTNZZWdXTmhpbi00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3
LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQBsvq+MBQE
AgACMA4DBQMqAECAAwUDKgQbwDANBgkqhkiG9w0BAQsFAAOCAQEAKeCbYv4AFOok
7Vo5h7NSgNVEQhg0cNvURjDKnDsQBYJoe24kEk+NlGg41YwhzSVeFo5fyAYnYEWX
wmDaGzs7oewIlBWut02Xap7OrCIsM1XjPKLGx4K3QLbA74ZB94rf44EZcIixa1TY
85d0FNG7FM2P9ZYKreXTfZIgWl4vfkcY2VCC2EmsGyP+4Spgw7mzQAX2ZNCGE8Bc
3v9Q5OzoTh+BchVr4qAW96t2rcs85OMGHo4cwUZ4K6jh8iKxjWE1nqew8uXQcOWO
SfZhuXUVT9Hafu+w8H5qZBCwAQEMisUQi9snAV5MaPzXurSDmIojSOOD+l/XhPx7
j30Yov2mzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-fra.rpki-client.org